last executing test programs: 9.848795028s ago: executing program 4 (id=1158): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x5452, 0x0) 7.80514016s ago: executing program 2 (id=1171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x9, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) mlockall(0x3) msgget$private(0x0, 0x28) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x0) rt_sigreturn() socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = gettid() accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) poll(0x0, 0x0, 0x5f) rt_sigreturn() rt_sigtimedwait(&(0x7f0000000180), 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x8) r3 = memfd_create(&(0x7f0000000180)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9O\x06i\xd7\xf7m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x10a, 0x0}, 0x0) close(r3) rt_sigreturn() socket$inet6_udp(0xa, 0x2, 0x0) eventfd2(0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shutdown(r0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.357294337s ago: executing program 0 (id=1174): r0 = memfd_create(&(0x7f0000000740)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xbc\xd7\x04\xdd\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%\x7f\b\x95\xf5%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7AR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\xf6\xca\x88\x82\xf3T$\a\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00V\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e\x1e\xce\xd8h\xb9p\x12\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O%\x13m\x1a\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x0e`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa72k{\xb0\xee\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H \x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\xe6{\x9d\xf1\xbd\xb0\xc7\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfd\x06\x00\xd3\x9d\x9d\xb8d\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000\x9f\'\\=\xc0\x82\xf8\xcawY\xcb\x00\xc2\xaf2p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xef\t\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0Zt\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xed\xb4\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xbe\x1c\x95\xc6k\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r3, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r3, &(0x7f00000023c0)="8c", 0x1, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 4.977315912s ago: executing program 4 (id=1176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000605222327b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) 4.76506387s ago: executing program 1 (id=1177): ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), 0x4) keyctl$search(0xa, 0x0, &(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/38, 0x26) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60600) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) time(0xfffffffffffffffe) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000980)=""/146, 0x92}], 0x1, 0x8, 0x0) 4.759882011s ago: executing program 4 (id=1178): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(0x0, 0x4000) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x0, 0x0, 0x3}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r7, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) 4.643316975s ago: executing program 2 (id=1179): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) listen(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 4.257209851s ago: executing program 3 (id=1180): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 4.135987315s ago: executing program 3 (id=1181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = syz_io_uring_setup(0xace, &(0x7f0000000480)={0x0, 0x0, 0x400}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x6, 0x4823, 0x1, 0x0, 0x0) io_uring_enter(r3, 0x15ac, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x60d7, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$igmp6(0xa, 0x3, 0x2) preadv(r6, &(0x7f00000019c0)=[{&(0x7f0000000400)}, {&(0x7f0000000680)=""/158, 0x9e}, {&(0x7f0000001740)=""/198, 0xc6}, {&(0x7f0000001840)=""/169, 0xa9}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000001900)=""/190, 0xbe}], 0x6, 0x2, 0x3) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'dummy0\x00', 0x400}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0x7, 0xdba3, 0xa0, 0x1, 0x9, '\x00', 0x0, r6, 0x3, 0x0, 0x1, 0xf}, 0x48) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000003c0)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000006b4962693362c55af663160bf44d542d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) close(r5) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x40000, &(0x7f00000002c0)={[{@metacopy_on}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3.745530691s ago: executing program 1 (id=1182): setreuid(0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 3.612826456s ago: executing program 1 (id=1183): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x100000, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES8, @ANYRES32]) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) 2.586479307s ago: executing program 1 (id=1184): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3008000, &(0x7f0000000640)={[{@stripe={'stripe', 0x3d, 0x9}}, {@auto_da_alloc}, {@jqfmt_vfsold}, {@norecovery}, {@commit={'commit', 0x3d, 0xc6}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0xc}}]}, 0x1, 0x52a, &(0x7f00000008c0)="$eJzs3X9rHGkdAPDvTLK5tM2ZPRWpB94d3kl7aHeTi3cXRe5OEP3rQK3/x5hsQsgmG7Kb2oSiKX0BgogVfAEiCL4AQfoSRCjo/6KiiLb6rx2Z3YkmzW6yND+2bj4fmJ3nmWdmvs8z7M7Oj4eZAC6s1yLig4gYiYg3I2KymJ4Ww1ye2e3M9/jRnYV8SCLLbv49iaSYtreuPD8aEVc6i8R4RHzzaxHfSTrlpX1xm9s7q/P1em2zyFdbaxvV5vbOjZW1+eXacm19Zmb6ndl3Z9+encoKJ2pnOSLe+8qff/yDn331vV9/7rt/mPvr9e/l1frSJzr1joiFEwXoobPuUntb7Mm30eZZBBuQvD2lkUHXAgCAfuTH+B+NiE+3j/8nY6R9NAcAAAAMk+z9ifY9qgwAAAAYWmlETESSVoq+ABORppVKpw/vx+NyWm80W59damytL+ZlEeUopUsr9dpU0Ve4HKUkz08XfWz38m89lZ+JiJci4keTl9r5ykKjvjjoix8AAABwQVx59eD5/78m03YaAAAAGDLlnhkAAABgWDjlBwAAgOHn/B8AAACG2tc//DAfsr33eC/e2t5abdy6sVhrrlbWthYqC43Njcpyo7Hcfmbf2nHrqzcaG5+P9a3b1Vat2ao2t3fm1hpb6625lQOvwAYAAADO0UuvPvh9EhG7X7zUHqJ4DmBhZHA1A54rfxp0BYDT5A8eLq7RQVcAGJjSsXPYQ8Dw+nn7MzlmrsOddzrXCuM3Z1EnAADgLFz75OH7/2NF2fHXBoD/Z+mgKwAAnDt39+DiKj1rD8Crp10TYFA+Uox79QPYf////v5MH/f/O9cYsuzZawcAAJyGifaQpJXiOH0i0rRSiXix/VqAUrK0Uq9NFecHv5ssvZDnp9tLJsf2GQYAAAAAAAAAAAAAAAAAAAAAAAAAOrIsiQwAAAAYahHpX5LivV/XJt+YOHh1YPxg9qc379+eb7U2pyPGkn9M5pPGIqL1k2L6W5lXAgAAAMBzoHOeXoynB10bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbN40d3FvaG84z7ty9HRLlb/NEYb4/HoxQRl/+ZxOi+5ZKIGDmF+Lt3I+Jqt/hJPMmyrFzUolv8S2ccv9zeNN3jpxFx5RTiw0X2IN//fNDt95fGa+1x99/faDGcVO/9X/rf/d9Ij/3Pi0/le3n54S+rPePfjXh5tPv+Zy9+0ol/IESeeb3PNn77Wzs7XQv2rbJb/P2xqq21jWpze+fGytr8cm25tj4zM/3O7Luzb89OVZdW6rXis2uYH37qV0+Oav/lHvHLB9t/aPu/0Vfrs/j3w9uPPtbJlLrFv/569//fqz3ip8V/32eKdF5+bS+920nv98ovfvvKUe1f7NH+8WPaf72v9scX3vzGvT92LTm0NQCA89Dc3lmdr9drm0ckxvuY55wT7z8f1TjFROSJGHg1BpXIvt/5Pp5sPSdc/FAiO3aeF3oXjcYpVGPs0O905Jm/JEnEbr6uPr+QAADAkPnfQf9Rd5AAAAAAAAAAAAAAAAAAAACAs9THw8PuxeGi8Yjo+9ljT8fcHUxTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACO9J8AAAD//9E40HE=") 2.549525469s ago: executing program 3 (id=1185): pipe2$9p(0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000100000000000000760f00001d00002000000000000000000000000007"]) syz_open_dev$mouse(&(0x7f0000000200), 0x81, 0x280000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 2.222381842s ago: executing program 1 (id=1186): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x2, 0x1e6, &(0x7f0000000700)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) 1.960405072s ago: executing program 0 (id=1187): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000) 1.895169125s ago: executing program 1 (id=1188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000f7"], 0x0}, 0x0) 1.673167154s ago: executing program 2 (id=1189): ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000680)={{}, "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"}) pipe2$9p(0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa65"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000100000000000000760f00001d00002000000000000000000000000007"]) syz_open_dev$mouse(&(0x7f0000000200), 0x81, 0x280000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 1.657166464s ago: executing program 3 (id=1190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r2}, 0x10) write$cgroup_type(r1, &(0x7f0000000000), 0x9) 1.557508208s ago: executing program 3 (id=1191): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="070600000000000000002d00000008000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 1.25311939s ago: executing program 4 (id=1192): pipe2$9p(0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000100000000000000760f00001d00002000000000000000000000000007"]) syz_open_dev$mouse(&(0x7f0000000200), 0x81, 0x280000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 586.787766ms ago: executing program 3 (id=1193): ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), 0x4) keyctl$search(0xa, 0x0, &(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/38, 0x26) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60600) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) time(0xfffffffffffffffe) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000980)=""/146, 0x92}], 0x1, 0x8, 0x0) 557.235828ms ago: executing program 2 (id=1194): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 429.125763ms ago: executing program 2 (id=1195): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0xfbfffffb, 0x0, 0x200, 0x266}, &(0x7f0000000300)=0x98) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480), 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) syz_open_pts(0xffffffffffffffff, 0x801) 428.831903ms ago: executing program 0 (id=1196): unshare(0x20000400) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x1c0000000, 0x0) 184.921623ms ago: executing program 0 (id=1197): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40087602, 0x0) 120.233865ms ago: executing program 4 (id=1198): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x101200) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x48, 0x0, 0x290) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00') 41.208039ms ago: executing program 2 (id=1199): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b000207000000090400010079319c0009040000000202ff00082402", @ANYRES32], 0x0) 0s ago: executing program 4 (id=1200): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000240)={0xc025, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0, 0x100000}) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e27, 0x1, @empty, 0x72c1}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x3}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0xfe, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/180, 0xb4) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x431, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.787820][ T3807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.855478][ T3807] bond0 (unregistering): Released all slaves [ 195.928440][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.078433][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.098400][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.114060][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.202934][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.216040][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.229581][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.236742][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.251372][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.261411][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.276587][ T5992] loop4: detected capacity change from 0 to 40427 [ 196.284820][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.284855][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.285272][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.286176][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 196.307522][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.308053][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.308730][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.309621][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.310089][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.310511][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.311299][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.311636][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.318256][ T5992] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 196.318308][ T5992] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 196.320149][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.320778][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.321220][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.336561][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.421059][ T5992] F2FS-fs (loop4): Found nat_bits in checkpoint [ 196.494318][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 196.509006][ T5992] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 196.550935][ T5994] netlink: 160 bytes leftover after parsing attributes in process `syz.3.550'. [ 196.564183][ T5994] netlink: 160 bytes leftover after parsing attributes in process `syz.3.550'. [ 196.585496][ T5992] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 196.592550][ T5992] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 197.523664][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.531230][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.543828][ T4297] Bluetooth: hci2: command 0x041b tx timeout [ 197.551272][ T5971] device bridge_slave_0 entered promiscuous mode [ 197.713073][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.890293][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.055279][ T5971] device bridge_slave_1 entered promiscuous mode [ 198.219531][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.228093][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.325901][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.338538][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.366482][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.947987][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.957225][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.969268][ T5971] team0: Port device team_slave_0 added [ 198.980480][ T5848] device veth0_vlan entered promiscuous mode [ 198.997174][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.024425][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.034423][ T5971] team0: Port device team_slave_1 added [ 199.049272][ T5848] device veth1_vlan entered promiscuous mode [ 199.085878][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.110549][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.130875][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.157958][ T6037] loop1: detected capacity change from 0 to 64 [ 199.229121][ T6035] loop4: detected capacity change from 0 to 40427 [ 199.278361][ T6035] F2FS-fs (loop4): Unrecognized mount option "01777777777777777777777017777777777777777777770177777777777777777777701777777777777777777777" or missing value [ 199.315947][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.343229][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.406908][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.430580][ T5848] device veth0_macvtap entered promiscuous mode [ 199.451116][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.621908][ T6039] overlayfs: filesystem on './file2' not supported [ 199.849730][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.858557][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.867847][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.885731][ T4297] Bluetooth: hci2: command 0x040f tx timeout [ 199.931627][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.043496][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.061091][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.076197][ T5848] device veth1_macvtap entered promiscuous mode [ 200.193944][ T6046] loop1: detected capacity change from 0 to 1024 [ 200.210216][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.245826][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.271333][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.271596][ T6044] loop3: detected capacity change from 0 to 4096 [ 200.293156][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.314559][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.338123][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.365621][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.383057][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.396835][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.410305][ T5971] device hsr_slave_0 entered promiscuous mode [ 200.430538][ T5971] device hsr_slave_1 entered promiscuous mode [ 200.453209][ T5971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.461761][ T6046] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 200.461941][ T5971] Cannot create hsr debugfs directory [ 200.509059][ T6046] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 200.533739][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.542482][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.549620][ T6048] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 200.555349][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.573953][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.583937][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.585944][ T6048] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 200.594489][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.594517][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.594533][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.594550][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.594561][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.595792][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.677048][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.686430][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.698591][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.708586][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.717935][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.726987][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.911916][ T3608] hfsplus: b-tree write err: -5, ino 4 [ 200.926242][ T3608] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 201.298612][ T26] audit: type=1800 audit(1719761527.887:62): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.565" name="bus" dev="sda1" ino=1983 res=0 errno=0 [ 201.305905][ T6057] trusted_key: encrypted_key: keyword 'ew' not recognized [ 201.524884][ T3552] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 201.761806][ T3807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.844492][ T3807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.929496][ T3807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.980462][ T3552] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.995642][ T3552] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.012059][ T3807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.087084][ T3552] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.107153][ T3552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.127382][ T3552] usb 2-1: SerialNumber: syz [ 202.438952][ T3552] usb 2-1: 0:2 : does not exist [ 202.524419][ T3552] usb 2-1: USB disconnect, device number 14 [ 202.578456][ T3936] udevd[3936]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.071690][ T6075] chnl_net:caif_netlink_parms(): no params data found [ 203.344070][ T6084] chnl_net:caif_netlink_parms(): no params data found [ 203.353491][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.368836][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.387420][ T6075] device bridge_slave_0 entered promiscuous mode [ 203.401179][ T6089] chnl_net:caif_netlink_parms(): no params data found [ 203.434072][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.441154][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.464710][ T6075] device bridge_slave_1 entered promiscuous mode [ 203.617578][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.629752][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.665135][ T6075] team0: Port device team_slave_0 added [ 203.708083][ T6088] chnl_net:caif_netlink_parms(): no params data found [ 203.811372][ T6075] team0: Port device team_slave_1 added [ 204.125374][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.159955][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.215087][ T6084] device bridge_slave_0 entered promiscuous mode [ 204.403284][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.423403][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.451623][ T6084] device bridge_slave_1 entered promiscuous mode [ 204.466858][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.474399][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.482522][ T6089] device bridge_slave_0 entered promiscuous mode [ 204.491877][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.499724][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.509623][ T5231] Bluetooth: hci0: command 0x0409 tx timeout [ 204.526698][ T6075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.568389][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.582680][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.591826][ T6089] device bridge_slave_1 entered promiscuous mode [ 204.605201][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.612143][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.639639][ T6075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.677359][ T6084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.725488][ T6084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.793334][ T6089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.826123][ T6084] team0: Port device team_slave_0 added [ 204.834123][ T6089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.843214][ T3552] Bluetooth: hci4: command 0x0409 tx timeout [ 204.864142][ T3552] Bluetooth: hci2: command 0x0409 tx timeout [ 204.892819][ T6075] device hsr_slave_0 entered promiscuous mode [ 204.903660][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 204.910052][ T6075] device hsr_slave_1 entered promiscuous mode [ 204.921640][ T6075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.935470][ T6075] Cannot create hsr debugfs directory [ 204.942221][ T6084] team0: Port device team_slave_1 added [ 204.980480][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.990005][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.998662][ T6088] device bridge_slave_0 entered promiscuous mode [ 205.034941][ T3807] device hsr_slave_0 left promiscuous mode [ 205.043064][ T3807] device hsr_slave_1 left promiscuous mode [ 205.049706][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.059073][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.068510][ T3807] device bridge_slave_1 left promiscuous mode [ 205.075088][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.085506][ T3807] device bridge_slave_0 left promiscuous mode [ 205.091695][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.106662][ T3807] device hsr_slave_0 left promiscuous mode [ 205.117437][ T3807] device hsr_slave_1 left promiscuous mode [ 205.124459][ T3807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.131911][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.143224][ T3807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.150902][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.160167][ T3807] device bridge_slave_1 left promiscuous mode [ 205.166406][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.181202][ T3807] device bridge_slave_0 left promiscuous mode [ 205.188170][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.213139][ T3807] device veth1_macvtap left promiscuous mode [ 205.220205][ T3807] device veth0_macvtap left promiscuous mode [ 205.226848][ T3807] device veth1_vlan left promiscuous mode [ 205.232628][ T3807] device veth0_vlan left promiscuous mode [ 205.457732][ T3807] team0 (unregistering): Port device team_slave_1 removed [ 205.475039][ T3807] team0 (unregistering): Port device team_slave_0 removed [ 205.488200][ T3807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.004367][ T3807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.061768][ T3807] bond0 (unregistering): Released all slaves [ 206.169848][ T3807] team0 (unregistering): Port device team_slave_1 removed [ 206.184149][ T3807] team0 (unregistering): Port device team_slave_0 removed [ 206.196137][ T3807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.208902][ T3807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.268651][ T3807] bond0 (unregistering): Released all slaves [ 206.332684][ T6089] team0: Port device team_slave_0 added [ 206.350613][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.357898][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.366499][ T6088] device bridge_slave_1 entered promiscuous mode [ 206.403069][ T6089] team0: Port device team_slave_1 added [ 206.424185][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.431242][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.459929][ T6084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.498396][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.507288][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.533693][ T6084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.545877][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.552814][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.602558][ T6089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.625667][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.632620][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.640414][ T3552] Bluetooth: hci0: command 0x041b tx timeout [ 206.691382][ T6089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.708362][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 206.719932][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.735034][ T26] audit: type=1800 audit(1719761533.327:63): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.584" name="memory.events" dev="sda1" ino=1985 res=0 errno=0 [ 206.769946][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.858465][ T6088] team0: Port device team_slave_0 added [ 206.875849][ T6088] team0: Port device team_slave_1 added [ 206.912383][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.923558][ T3552] Bluetooth: hci2: command 0x041b tx timeout [ 206.933998][ T3552] Bluetooth: hci4: command 0x041b tx timeout [ 206.943905][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.982256][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.993288][ T3552] Bluetooth: hci3: command 0x041b tx timeout [ 207.012485][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.023877][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.062572][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.070880][ T6160] loop1: detected capacity change from 0 to 40427 [ 207.100337][ T6089] device hsr_slave_0 entered promiscuous mode [ 207.107401][ T6089] device hsr_slave_1 entered promiscuous mode [ 207.114887][ T6089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.122439][ T6089] Cannot create hsr debugfs directory [ 207.147432][ T6084] device hsr_slave_0 entered promiscuous mode [ 207.157134][ T6084] device hsr_slave_1 entered promiscuous mode [ 207.168468][ T6160] F2FS-fs (loop1): Unrecognized mount option "01777777777777777777777017777777777777777777770177777777777777777777701777777777777777777777" or missing value [ 207.173148][ T6084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.193109][ T6084] Cannot create hsr debugfs directory [ 207.439042][ T6088] device hsr_slave_0 entered promiscuous mode [ 207.474174][ T6088] device hsr_slave_1 entered promiscuous mode [ 207.494245][ T6088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.520055][ T6088] Cannot create hsr debugfs directory [ 207.982355][ T6075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.241861][ T6075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.684375][ T6075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.755540][ T3552] Bluetooth: hci0: command 0x040f tx timeout [ 208.997610][ T3605] Bluetooth: hci4: command 0x040f tx timeout [ 209.004724][ T3605] Bluetooth: hci2: command 0x040f tx timeout [ 209.027369][ T6075] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.063709][ T3605] Bluetooth: hci3: command 0x040f tx timeout [ 209.134090][ T6089] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.206308][ T6089] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.311969][ T6089] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.369613][ T6089] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.471626][ T6084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.556115][ T6084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.650199][ T6084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.775594][ T6084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.035019][ T6084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.055181][ T6084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.079717][ T6084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.147441][ T6084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.597545][ T6084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.666134][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.674539][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.694900][ T6084] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.755773][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.765146][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.773504][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.780631][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.798050][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.811679][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.823723][ T3605] Bluetooth: hci0: command 0x0419 tx timeout [ 210.829056][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.836797][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.862518][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.871588][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.909536][ T6075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.921130][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.930230][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.940359][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.950370][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.959302][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.968300][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.988869][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.004820][ T6075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.036696][ T6084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.062791][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.074285][ T3552] Bluetooth: hci2: command 0x0419 tx timeout [ 211.080361][ T3552] Bluetooth: hci4: command 0x0419 tx timeout [ 211.094306][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.104471][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.121959][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.148559][ T3546] Bluetooth: hci3: command 0x0419 tx timeout [ 211.176312][ T6075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.236080][ T6075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.286514][ T6089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.286731][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 211.322850][ T6089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.334892][ T26] audit: type=1800 audit(1719761537.927:64): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.591" name="memory.events" dev="sda1" ino=1985 res=0 errno=0 [ 211.360066][ T6088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.400739][ T6089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.438050][ T6089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.456245][ T6088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.602297][ T6088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.614651][ T6088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.717106][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.725536][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.007463][ T6084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.493671][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.506443][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.570240][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.581902][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.613417][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.645383][ T6084] device veth0_vlan entered promiscuous mode [ 212.662602][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.695631][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.716226][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.724472][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.742628][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.791252][ T6089] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.835503][ T6075] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.880475][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.906581][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.934319][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.953793][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.962461][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.984114][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.991364][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.001277][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.010088][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.019183][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.026298][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.034546][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.043274][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.054074][ T6084] device veth1_vlan entered promiscuous mode [ 213.063781][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.071664][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.080724][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.089462][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.096556][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.124017][ T6088] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.147640][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.165487][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.173290][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.190708][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.202304][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.223148][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.232363][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.245366][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.252416][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.282295][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.292950][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.311302][ T6089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.342125][ T6089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.372298][ T6084] device veth0_macvtap entered promiscuous mode [ 213.400401][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.410771][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.434922][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.449207][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.460595][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.480577][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.502914][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.512351][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.528746][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.537973][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.553971][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.561030][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.581834][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.590583][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.614230][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.621314][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.646685][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.655867][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.665112][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.680761][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.713283][ T6075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.738259][ T6075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.765316][ T6084] device veth1_macvtap entered promiscuous mode [ 213.805793][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.814971][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.842343][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.861743][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.893362][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.904721][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.927808][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.945785][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.955775][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.964697][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.973252][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.982267][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.991006][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.009004][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.018957][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.028047][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.036803][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.045794][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.054375][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.062803][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.071931][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.080315][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.095260][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.288421][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.319765][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.340513][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.352784][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.372985][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.394907][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.411690][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.447721][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.471175][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.511674][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.521059][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.554417][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.572158][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.604618][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.635954][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.663919][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.691861][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.710604][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.734335][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.772484][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.789094][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.809316][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.825615][ T6089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.840034][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.850483][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.866642][ T6084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.877501][ T6084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.887176][ T6084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.901978][ T6084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.939099][ T6088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.975408][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.982943][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.012475][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.020409][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.080199][ T6075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.160831][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.179987][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.240905][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.257514][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.319306][ T6089] device veth0_vlan entered promiscuous mode [ 215.339278][ T3808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.360130][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.384073][ T3808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.402867][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.433432][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.486742][ T6089] device veth1_vlan entered promiscuous mode [ 215.495459][ T5276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.503916][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.511742][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.516086][ T5276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.534560][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.547984][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.584308][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.595234][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.603127][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.622449][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.636638][ T6088] device veth0_vlan entered promiscuous mode [ 215.713740][ T6088] device veth1_vlan entered promiscuous mode [ 215.731367][ T6089] device veth0_macvtap entered promiscuous mode [ 215.773729][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.781896][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.790778][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.800119][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.809443][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.818305][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.840153][ T6089] device veth1_macvtap entered promiscuous mode [ 215.857202][ T6075] device veth0_vlan entered promiscuous mode [ 215.898182][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.907357][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.917441][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.925886][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.934473][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.942775][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.952148][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.961950][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.970123][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.989200][ T6075] device veth1_vlan entered promiscuous mode [ 216.026486][ T6088] device veth0_macvtap entered promiscuous mode [ 216.038627][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.052074][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.063824][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.074600][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.084778][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.095671][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.116321][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.133580][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.143399][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.163625][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.186482][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.207071][ T6088] device veth1_macvtap entered promiscuous mode [ 216.217069][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.234284][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.242888][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.268055][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.281460][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.303895][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.323763][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.352076][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.369368][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.411755][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.433581][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.443411][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.473571][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.492049][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.522571][ T6075] device veth0_macvtap entered promiscuous mode [ 216.545444][ T6075] device veth1_macvtap entered promiscuous mode [ 216.587789][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.604364][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.623372][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.634107][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.653131][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.715130][ T6089] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.733588][ T6089] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.753093][ T6089] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.773320][ T6089] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.801714][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.822693][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.852918][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.883900][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.905244][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.923582][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.943604][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.963584][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.983756][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.005288][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.023585][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.043630][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.072360][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.095347][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.104212][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.124059][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.174105][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.193786][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.213592][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.233605][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.255667][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.277359][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.297711][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.318749][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.339336][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.360547][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.402833][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.422880][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.445015][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.459260][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.493745][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.513549][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.541452][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.556526][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.577126][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.591456][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.607774][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.622127][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.643454][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.662211][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.672801][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.692777][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.704526][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.725148][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.734976][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.763843][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.793045][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.822711][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.850053][ T6088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.873594][ T6088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.882302][ T6088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.903581][ T6088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.944430][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.973588][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.993656][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.004501][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.023756][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.043566][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.063588][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.083556][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.103798][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.123553][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.143568][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.163552][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.185799][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.203553][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.215442][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.263027][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.282313][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.308209][ T6075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.327506][ T6075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.343733][ T6075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.362678][ T6075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.408845][ T3808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.456197][ T3808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.507037][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.663434][ T5276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.691809][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.711597][ T5276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.728143][ T2535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.752285][ T2535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.760037][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.774057][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.780560][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.811807][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.890797][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.923737][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.979514][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.985043][ T6391] loop2: detected capacity change from 0 to 64 [ 219.033453][ T3644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.052599][ T3644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.110376][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.581432][ T6400] loop0: detected capacity change from 0 to 4096 [ 219.600995][ T3807] device hsr_slave_0 left promiscuous mode [ 219.609995][ T3807] device hsr_slave_1 left promiscuous mode [ 219.621402][ T3807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.641516][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.668608][ T6400] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 219.699368][ T3807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.728991][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.737555][ T6400] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 219.773014][ T3807] device bridge_slave_1 left promiscuous mode [ 219.811925][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.860534][ T3807] device bridge_slave_0 left promiscuous mode [ 219.888993][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.904735][ T6382] loop1: detected capacity change from 0 to 32768 [ 219.948235][ T3807] device hsr_slave_0 left promiscuous mode [ 219.959858][ T6088] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 219.978467][ T3807] device hsr_slave_1 left promiscuous mode [ 219.994181][ T3807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.012072][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.012833][ T6418] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 220.037027][ T6382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.598 (6382) [ 220.082243][ T6382] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 220.083281][ T3807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.109163][ T6382] BTRFS info (device loop1): using free space tree [ 220.139360][ T6382] BTRFS info (device loop1): has skinny extents [ 220.150500][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.221748][ T3807] device bridge_slave_1 left promiscuous mode [ 220.227286][ T6420] loop0: detected capacity change from 0 to 4096 [ 220.249222][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.257374][ T3554] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 220.268209][ T3807] device bridge_slave_0 left promiscuous mode [ 220.274748][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.314111][ T3807] device hsr_slave_0 left promiscuous mode [ 220.338098][ T3807] device hsr_slave_1 left promiscuous mode [ 220.371956][ T6423] loop3: detected capacity change from 0 to 4096 [ 220.374969][ T3807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.421065][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.458620][ T3807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.472392][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.489108][ T3807] device bridge_slave_1 left promiscuous mode [ 220.528989][ T6382] BTRFS info (device loop1): enabling ssd optimizations [ 220.537429][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.555316][ T3807] device bridge_slave_0 left promiscuous mode [ 220.571769][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.654286][ T3554] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.665599][ T3554] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 220.676369][ T3554] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.685844][ T3554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.717053][ T3807] device veth1_macvtap left promiscuous mode [ 220.724269][ T6409] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 220.741545][ T3807] device veth0_macvtap left promiscuous mode [ 220.759127][ T3807] device veth1_vlan left promiscuous mode [ 220.823826][ T3807] device veth0_vlan left promiscuous mode [ 220.872879][ T3807] device veth1_macvtap left promiscuous mode [ 220.901696][ T3807] device veth0_macvtap left promiscuous mode [ 220.915786][ T6448] loop3: detected capacity change from 0 to 4096 [ 220.949886][ T3807] device veth1_vlan left promiscuous mode [ 221.019229][ T3807] device veth0_vlan left promiscuous mode [ 221.095310][ T6449] usb 3-1: USB disconnect, device number 10 [ 221.120042][ T3807] device veth1_macvtap left promiscuous mode [ 221.132282][ T3807] device veth0_macvtap left promiscuous mode [ 221.147249][ T6452] raw_sendmsg: syz.1.613 forgot to set AF_INET. Fix it! [ 221.194128][ T3807] device veth1_vlan left promiscuous mode [ 221.199937][ T3807] device veth0_vlan left promiscuous mode [ 221.544925][ T6446] loop0: detected capacity change from 0 to 32768 [ 221.571858][ T6460] loop1: detected capacity change from 0 to 4096 [ 221.607257][ T6460] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 221.626369][ T6446] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz.0.612 (6446) [ 221.662743][ T6446] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 221.684617][ T6460] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 221.698740][ T6446] BTRFS info (device loop0): disabling tree log [ 221.742172][ T6446] BTRFS info (device loop0): enabling tree log [ 221.752319][ T6446] BTRFS info (device loop0): using free space tree [ 221.770921][ T6446] BTRFS info (device loop0): has skinny extents [ 221.840714][ T3503] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 222.028534][ T26] audit: type=1326 audit(1719761548.617:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.1.618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4dce8db99 code=0x0 [ 222.052043][ T6446] BTRFS info (device loop0): enabling ssd optimizations [ 222.077071][ T6446] BTRFS info (device loop0): checking UUID tree [ 222.610103][ T6503] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 222.633737][ T6503] UDF-fs: Scanning with blocksize 512 failed [ 222.645386][ T6503] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 222.653109][ T6503] UDF-fs: Scanning with blocksize 1024 failed [ 222.659943][ T6503] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 222.670470][ T6503] UDF-fs: Scanning with blocksize 2048 failed [ 222.671182][ T3807] team0 (unregistering): Port device team_slave_1 removed [ 222.676946][ T6503] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 222.676964][ T6503] UDF-fs: Scanning with blocksize 4096 failed [ 222.721804][ T3807] team0 (unregistering): Port device team_slave_0 removed [ 222.736082][ T3807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.752662][ T3807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.932893][ T3807] bond0 (unregistering): Released all slaves [ 223.252022][ T3807] team0 (unregistering): Port device team_slave_1 removed [ 223.296514][ T3807] team0 (unregistering): Port device team_slave_0 removed [ 223.341061][ T3807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.347705][ T6514] loop2: detected capacity change from 0 to 32768 [ 223.376559][ T3807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.401707][ T6514] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.626 (6514) [ 223.441169][ T6514] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 223.451060][ T6514] BTRFS info (device loop2): turning off barriers [ 223.457989][ T6514] BTRFS info (device loop2): enabling auto defrag [ 223.464941][ T6514] BTRFS info (device loop2): force zlib compression, level 3 [ 223.483827][ T6514] BTRFS info (device loop2): enabling ssd optimizations [ 223.490848][ T6514] BTRFS info (device loop2): using spread ssd allocation scheme [ 223.503632][ T6514] BTRFS info (device loop2): using free space tree [ 223.510220][ T6514] BTRFS info (device loop2): has skinny extents [ 223.533012][ T3807] bond0 (unregistering): Released all slaves [ 223.955006][ T3807] team0 (unregistering): Port device team_slave_1 removed [ 223.995499][ T3807] team0 (unregistering): Port device team_slave_0 removed [ 224.024195][ T3807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.084168][ T3807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.222374][ T6554] loop1: detected capacity change from 0 to 2048 [ 224.302014][ T3807] bond0 (unregistering): Released all slaves [ 224.309700][ T6555] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.339909][ T6554] attempt to access beyond end of device [ 224.339909][ T6554] loop1: rw=0, want=18441677524128759846, limit=2048 [ 224.369312][ T6554] attempt to access beyond end of device [ 224.369312][ T6554] loop1: rw=0, want=18441677524128759846, limit=2048 [ 224.416219][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 224.464772][ T6550] netlink: 2 bytes leftover after parsing attributes in process `syz.2.630'. [ 224.591968][ T6561] loop4: detected capacity change from 0 to 1024 [ 224.678226][ T6563] ebt_among: src integrity fail: 200 [ 224.833921][ T6572] loop2: detected capacity change from 0 to 64 [ 224.999929][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 225.089970][ T6579] bridge0: port 3(bond1) entered blocking state [ 225.135467][ T6579] bridge0: port 3(bond1) entered disabled state [ 225.197138][ T6579] device bond1 entered promiscuous mode [ 225.265721][ T6577] bond1: (slave xfrm1): refused to change device type [ 225.615928][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 225.689219][ T6597] netlink: 2 bytes leftover after parsing attributes in process `syz.0.647'. [ 226.498831][ T2535] hfsplus: b-tree write err: -5, ino 4 [ 226.543686][ T4551] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 226.646453][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.656'. [ 226.768621][ T6637] bridge0: port 3(ip6gretap0) entered blocking state [ 226.788645][ T6637] bridge0: port 3(ip6gretap0) entered disabled state [ 226.819006][ T6637] device ip6gretap0 entered promiscuous mode [ 226.827867][ T6637] bridge0: port 3(ip6gretap0) entered blocking state [ 226.834725][ T6637] bridge0: port 3(ip6gretap0) entered forwarding state [ 227.033915][ T4551] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 227.087231][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 227.099671][ T6647] netlink: 2 bytes leftover after parsing attributes in process `syz.0.661'. [ 227.157834][ T4551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.193726][ T4551] usb 4-1: config 0 has no interfaces? [ 227.212651][ T26] audit: type=1800 audit(1719761553.797:66): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.663" name="file1" dev="sda1" ino=2007 res=0 errno=0 [ 227.233003][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.248477][ T6650] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 227.255386][ T6650] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.263490][ T26] audit: type=1804 audit(1719761553.827:67): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.663" name="/root/syzkaller.bARgns/14/file1" dev="sda1" ino=2007 res=1 errno=0 [ 227.285864][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.300237][ T4551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.311208][ T6650] vhci_hcd vhci_hcd.0: Device attached [ 227.348770][ T4551] usb 4-1: config 0 has no interfaces? [ 227.414994][ T6651] vhci_hcd: connection closed [ 227.426693][ T154] vhci_hcd: stop threads [ 227.436741][ T154] vhci_hcd: release socket [ 227.443244][ T154] vhci_hcd: disconnect device [ 227.454558][ T4551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.477351][ T4551] usb 4-1: config 0 has no interfaces? [ 227.554014][ T4551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.567614][ T4551] usb 4-1: config 0 has no interfaces? [ 227.713777][ T4551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.739083][ T4551] usb 4-1: config 0 has no interfaces? [ 227.748043][ T26] audit: type=1326 audit(1719761554.337:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.1.665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4dce8db99 code=0x0 [ 227.769711][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.893879][ T4551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.920046][ T4551] usb 4-1: config 0 has no interfaces? [ 228.053797][ T4551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.084069][ T4551] usb 4-1: config 0 has no interfaces? [ 228.183902][ T4551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.221349][ T4551] usb 4-1: config 0 has no interfaces? [ 228.264335][ T1279] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 228.400997][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 228.424047][ T4551] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 228.443458][ T4551] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 228.475366][ T4551] usb 4-1: Product: syz [ 228.479886][ T6679] bridge0: port 3(hsr0) entered blocking state [ 228.491524][ T4551] usb 4-1: Manufacturer: syz [ 228.506112][ T4551] usb 4-1: SerialNumber: syz [ 228.509413][ T6679] bridge0: port 3(hsr0) entered disabled state [ 228.545410][ T4551] usb 4-1: config 0 descriptor?? [ 228.561167][ T6679] device hsr0 entered promiscuous mode [ 228.573956][ T1279] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 228.605952][ T6679] bridge0: port 3(hsr0) entered blocking state [ 228.612171][ T6679] bridge0: port 3(hsr0) entered forwarding state [ 228.678854][ T1279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.709164][ T1279] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.773866][ T1279] usb 2-1: config 0 interface 0 has no altsetting 0 [ 228.840433][ T6449] usb 4-1: USB disconnect, device number 12 [ 228.873987][ T1279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.893330][ T1279] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.935158][ T1279] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.043895][ T1279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.052806][ T1279] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.102673][ T1279] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.161954][ T6705] loop2: detected capacity change from 0 to 4096 [ 229.224696][ T1279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.237380][ T6705] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 229.244056][ T1279] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.262194][ T1279] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.292378][ T6705] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 229.383865][ T1279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.408119][ T1279] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.448292][ T1279] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.531983][ T6084] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 229.543887][ T1279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.556276][ T1279] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.585345][ T1279] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.704460][ T1279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.725631][ T1279] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.751812][ T1279] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.843919][ T1279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.867482][ T1279] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.895460][ T1279] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.125606][ T1279] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 230.148431][ T1279] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 230.203231][ T1279] usb 2-1: Product: syz [ 230.234593][ T1279] usb 2-1: Manufacturer: syz [ 230.253260][ T1279] usb 2-1: SerialNumber: syz [ 230.312069][ T1279] usb 2-1: config 0 descriptor?? [ 230.434153][ T1279] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 230.536739][ T6741] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 230.633210][ T1279] usb 2-1: USB disconnect, device number 15 [ 230.685120][ T1279] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 231.655774][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.711'. [ 231.672009][ T6775] bridge0: port 3(macvtap0) entered blocking state [ 231.679647][ T6775] bridge0: port 3(macvtap0) entered disabled state [ 236.394397][ T1065] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 236.429027][ T1065] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 236.483395][ T1065] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 236.659763][ T6851] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 236.711448][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 237.059882][ T6867] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 237.112404][ T6867] bridge0: port 4(team0) entered blocking state [ 237.149290][ T6869] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 237.169396][ T6867] bridge0: port 4(team0) entered disabled state [ 237.191976][ T6867] device team0 entered promiscuous mode [ 237.213184][ T6867] device team_slave_0 entered promiscuous mode [ 237.238903][ T6867] device team_slave_1 entered promiscuous mode [ 237.260965][ T6867] bridge0: port 4(team0) entered blocking state [ 237.267313][ T6867] bridge0: port 4(team0) entered forwarding state [ 237.809702][ T6876] netlink: 5 bytes leftover after parsing attributes in process `syz.2.745'. [ 238.009014][ T6888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.748'. [ 238.857663][ T6911] ISOFS: Unable to identify CD-ROM format. [ 240.169033][ T4298] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 240.291130][ T4298] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 240.509815][ T4298] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 241.453268][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 241.493227][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.964689][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.123658][ T7001] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 245.612767][ T7003] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 246.677902][ T3605] kernel write not supported for file /video36 (pid: 3605 comm: kworker/1:8) [ 246.802625][ T7019] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 248.526311][ T7013] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 248.555241][ T7013] bridge0: port 4(team0) entered disabled state [ 248.561810][ T7013] bridge0: port 3(hsr0) entered disabled state [ 248.568238][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.576594][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.643871][ T7013] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 248.761733][ T7013] bridge0: port 4(team0) entered blocking state [ 248.768471][ T7013] bridge0: port 4(team0) entered forwarding state [ 248.775083][ T7013] bridge0: port 3(hsr0) entered blocking state [ 248.781275][ T7013] bridge0: port 3(hsr0) entered forwarding state [ 248.787788][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.794909][ T7013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.802275][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.809486][ T7013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.436443][ T7013] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 251.418389][ T7071] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 252.283619][ T13] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 252.673893][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 253.524349][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 253.607463][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.851425][ T13] usb 5-1: Product: syz [ 253.865203][ T13] usb 5-1: Manufacturer: syz [ 253.869825][ T13] usb 5-1: SerialNumber: syz [ 254.188707][ T5231] usb 5-1: USB disconnect, device number 12 [ 255.295235][ T7099] netlink: 'syz.0.813': attribute type 10 has an invalid length. [ 255.340077][ T7099] bridge0: port 4(team0) entered disabled state [ 255.346518][ T7099] bridge0: port 3(hsr0) entered disabled state [ 255.352756][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.359881][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.418240][ T7118] syz.2.814 uses obsolete (PF_INET,SOCK_PACKET) [ 255.576102][ T7120] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 255.604096][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.610637][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.053845][ T7143] netlink: 'syz.1.826': attribute type 3 has an invalid length. [ 257.404561][ T26] audit: type=1326 audit(1719761583.997:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4dce8db99 code=0x0 [ 259.116226][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 260.424709][ T26] audit: type=1800 audit(1719761587.017:70): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.846" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 260.488963][ T26] audit: type=1800 audit(1719761587.047:71): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.846" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 260.685334][ T26] audit: type=1800 audit(1719761587.127:72): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.846" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 261.491261][ T26] audit: type=1800 audit(1719761587.127:73): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.846" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 261.638874][ T26] audit: type=1804 audit(1719761587.937:74): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.849" name="/root/syzkaller.446FQp/51/file0" dev="sda1" ino=1991 res=1 errno=0 [ 261.785108][ T7233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 262.420680][ T26] audit: type=1326 audit(1719761588.647:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146da09b99 code=0x7ffc0000 [ 262.625739][ T26] audit: type=1326 audit(1719761588.657:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f146da085d0 code=0x7ffc0000 [ 262.654438][ T26] audit: type=1326 audit(1719761588.657:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f146da0b327 code=0x7ffc0000 [ 262.733812][ T26] audit: type=1326 audit(1719761588.657:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f146da09b99 code=0x7ffc0000 [ 262.759388][ T7247] netlink: 'syz.0.858': attribute type 11 has an invalid length. [ 263.230464][ T26] audit: type=1326 audit(1719761588.657:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f146da0b327 code=0x7ffc0000 [ 263.253826][ T26] audit: type=1326 audit(1719761588.657:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f146da088ca code=0x7ffc0000 [ 264.547553][ T26] audit: type=1326 audit(1719761588.657:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146da09b99 code=0x7ffc0000 [ 264.580005][ T26] audit: type=1326 audit(1719761588.657:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f146da09b99 code=0x7ffc0000 [ 264.893671][ T26] audit: type=1326 audit(1719761588.657:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146da09b99 code=0x7ffc0000 [ 265.096046][ T26] audit: type=1326 audit(1719761588.657:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f146da09b99 code=0x7ffc0000 [ 265.118230][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.863007][ T7283] binder: BINDER_SET_CONTEXT_MGR already set [ 265.934139][ T7283] binder: 7277:7283 ioctl 4018620d 20000040 returned -16 [ 267.531495][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 267.531510][ T26] audit: type=1326 audit(1719761594.117:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.4.877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f146da09b99 code=0x0 [ 267.783035][ T7326] sp0: Synchronizing with TNC [ 268.106754][ T7330] IPv6: NLM_F_REPLACE set, but no existing node found! [ 269.240390][ T26] audit: type=1804 audit(1719761595.827:112): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.888" name="/root/syzkaller.bARgns/56/file0" dev="sda1" ino=2006 res=1 errno=0 [ 269.296870][ T26] audit: type=1326 audit(1719761595.857:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6860ef0b99 code=0x0 [ 269.318520][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.557502][ T26] audit: type=1326 audit(1719761597.147:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893f8fb99 code=0x7ffc0000 [ 270.629714][ T26] audit: type=1326 audit(1719761597.207:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2893f8fb99 code=0x7ffc0000 [ 270.651871][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.956269][ T26] audit: type=1326 audit(1719761597.207:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893f8fb99 code=0x7ffc0000 [ 271.021525][ T7374] netlink: 'syz.3.900': attribute type 2 has an invalid length. [ 271.336743][ T26] audit: type=1326 audit(1719761597.207:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2893f8fb99 code=0x7ffc0000 [ 271.857126][ T7388] IPv6: NLM_F_REPLACE set, but no existing node found! [ 272.785732][ T7399] netlink: 200 bytes leftover after parsing attributes in process `syz.3.907'. [ 272.927654][ T7404] binder: BINDER_SET_CONTEXT_MGR already set [ 272.943649][ T7404] binder: 7403:7404 ioctl 4018620d 20000140 returned -16 [ 273.043055][ T7410] netlink: 'syz.2.911': attribute type 2 has an invalid length. [ 273.076269][ T26] audit: type=1804 audit(1719761599.667:118): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.913" name="/root/syzkaller.bARgns/60/bus" dev="sda1" ino=2006 res=1 errno=0 [ 273.160244][ T7416] loop1: detected capacity change from 0 to 1024 [ 273.178872][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.917'. [ 273.188051][ T7422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.917'. [ 273.267824][ T7416] EXT4-fs (loop1): Ignoring removed oldalloc option [ 273.281411][ T7416] EXT4-fs (loop1): Ignoring removed orlov option [ 273.301811][ T7416] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 273.368969][ T7416] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000080000,lazytime,resuid=0x0000000000000000,noblock_validity,abort,oldalloc,nodiscard,orlov,,errors=continue. Quota mode: writeback. [ 273.714952][ T7449] loop1: detected capacity change from 0 to 512 [ 273.897791][ T7449] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 273.949262][ T7449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 273.998007][ T7449] System zones: 1-12 [ 274.013084][ T7449] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 274.029709][ T7449] EXT4-fs (loop1): 1 truncate cleaned up [ 274.035459][ T7449] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 274.233049][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 274.666783][ T7503] sd 0:0:1:0: device reset [ 274.926939][ T7533] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.936965][ T7533] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.946223][ T7533] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.951182][ T7516] sd 0:0:1:0: device reset [ 274.955116][ T7533] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.971048][ T7533] device vxlan0 entered promiscuous mode [ 274.989623][ T7533] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.998949][ T7533] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.007885][ T7533] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.016795][ T7533] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.183610][ T26] audit: type=1326 audit(1719761601.764:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a33cb99 code=0x7ffc0000 [ 275.225858][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 275.266541][ T26] audit: type=1326 audit(1719761601.774:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd41a33cb99 code=0x7ffc0000 [ 275.318638][ T26] audit: type=1326 audit(1719761601.774:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a33cb99 code=0x7ffc0000 [ 275.374980][ T26] audit: type=1326 audit(1719761601.774:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a33cb99 code=0x7ffc0000 [ 275.452957][ T7556] 8021q: VLANs not supported on bond0 [ 275.538579][ T7561] loop0: detected capacity change from 0 to 128 [ 276.015166][ T7592] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 276.034934][ T7588] IPVS: stopping backup sync thread 7592 ... [ 276.429954][ T26] audit: type=1804 audit(1719761603.014:123): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.993" name="/root/syzkaller.xqHmnv/66/file0" dev="sda1" ino=2014 res=1 errno=0 [ 280.337780][ T7671] loop1: detected capacity change from 0 to 256 [ 280.436771][ T7671] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 280.714057][ T7690] loop1: detected capacity change from 0 to 1024 [ 280.820874][ T7690] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 280.851919][ T7690] hfsplus: xattr searching failed [ 281.154839][ T3792] psmouse serio4: Failed to reset mouse on : -5 [ 282.160430][ T5231] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 282.169918][ T5231] Bluetooth: hci1: Injecting HCI hardware error event [ 282.177927][ T3519] Bluetooth: hci1: hardware error 0x00 [ 282.693425][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1049'. [ 282.750325][ T7757] device veth1_macvtap left promiscuous mode [ 282.801172][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 282.824216][ T7762] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1049'. [ 282.865100][ T7762] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 283.074325][ T26] audit: type=1326 audit(1719761609.654:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7770 comm="syz.1.1053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4dce8db99 code=0x0 [ 283.258716][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 283.885424][ T7790] loop2: detected capacity change from 0 to 2048 [ 284.641775][ T7798] loop1: detected capacity change from 0 to 256 [ 284.839601][ T7802] loop2: detected capacity change from 0 to 2048 [ 284.897908][ T7809] loop1: detected capacity change from 0 to 256 [ 284.913780][ T3792] misc userio: Buffer overflowed, userio client isn't keeping up [ 284.923289][ T7809] exfat: Deprecated parameter 'namecase' [ 284.932200][ T7809] exfat: Deprecated parameter 'namecase' [ 284.948408][ T7802] loop2: p1 < > p3 [ 284.972662][ T7809] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 285.049080][ T7802] loop2: p3 size 134217728 extends beyond EOD, truncated [ 285.110634][ T7812] loop4: detected capacity change from 0 to 256 [ 285.224600][ T7812] exfat: Deprecated parameter 'utf8' [ 285.230903][ T7812] exfat: Deprecated parameter 'namecase' [ 285.264214][ T7812] exfat: Deprecated parameter 'utf8' [ 285.305414][ T3936] udevd[3936]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 285.331492][ T7812] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 285.347390][ T5676] udevd[5676]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 285.404377][ T7812] attempt to access beyond end of device [ 285.404377][ T7812] loop4: rw=524288, want=34359738496, limit=256 [ 285.459759][ T7812] attempt to access beyond end of device [ 285.459759][ T7812] loop4: rw=0, want=34359738496, limit=256 [ 285.507576][ T7812] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 285.508047][ T26] audit: type=1800 audit(1719761612.094:125): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1068" name="file1" dev="loop4" ino=1048631 res=0 errno=0 [ 285.610264][ T7814] loop2: detected capacity change from 0 to 512 [ 285.745155][ T7816] loop4: detected capacity change from 0 to 256 [ 285.853332][ T7816] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.956006][ T7807] loop0: detected capacity change from 0 to 40427 [ 285.982098][ T7814] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.1069: corrupted in-inode xattr [ 286.028416][ T7809] exFAT-fs (loop1): invalid start cluster (4278190088) [ 286.029166][ T7814] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1069: couldn't read orphan inode 15 (err -117) [ 286.132120][ T7820] loop4: detected capacity change from 0 to 256 [ 286.144942][ T7814] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.167946][ T7807] F2FS-fs (loop0): invalid crc value [ 286.215432][ T3792] input: PS/2 Generic Mouse as /devices/serio4/input/input11 [ 286.243400][ T7807] F2FS-fs (loop0): Found nat_bits in checkpoint [ 286.277597][ T7825] loop1: detected capacity change from 0 to 256 [ 286.342590][ T7807] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 286.359899][ T7820] FAT-fs (loop4): Directory bread(block 64) failed [ 286.382883][ T7820] FAT-fs (loop4): Directory bread(block 65) failed [ 286.407925][ T7807] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 286.417510][ T7820] FAT-fs (loop4): Directory bread(block 66) failed [ 286.433639][ T7820] FAT-fs (loop4): Directory bread(block 67) failed [ 286.439473][ T7825] FAT-fs (loop1): Directory bread(block 64) failed [ 286.444589][ T7807] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 286.463663][ T7820] FAT-fs (loop4): Directory bread(block 68) failed [ 286.470308][ T7820] FAT-fs (loop4): Directory bread(block 69) failed [ 286.477182][ T3792] psmouse serio4: Failed to enable mouse on [ 286.487304][ T7807] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 286.487414][ T7825] FAT-fs (loop1): Directory bread(block 65) failed [ 286.507448][ T7820] FAT-fs (loop4): Directory bread(block 70) failed [ 286.523717][ T7820] FAT-fs (loop4): Directory bread(block 71) failed [ 286.535133][ T7825] FAT-fs (loop1): Directory bread(block 66) failed [ 286.541675][ T7825] FAT-fs (loop1): Directory bread(block 67) failed [ 286.542217][ T7820] FAT-fs (loop4): Directory bread(block 72) failed [ 286.578613][ T7820] FAT-fs (loop4): Directory bread(block 73) failed [ 286.610863][ T7825] FAT-fs (loop1): Directory bread(block 68) failed [ 286.687144][ T7825] FAT-fs (loop1): Directory bread(block 69) failed [ 286.698367][ T7825] FAT-fs (loop1): Directory bread(block 70) failed [ 286.705870][ T7825] FAT-fs (loop1): Directory bread(block 71) failed [ 286.736410][ T7825] FAT-fs (loop1): Directory bread(block 72) failed [ 286.749121][ T7828] loop3: detected capacity change from 0 to 512 [ 286.773104][ T7830] attempt to access beyond end of device [ 286.773104][ T7830] loop4: rw=524288, want=1196, limit=256 [ 286.784808][ T7825] FAT-fs (loop1): Directory bread(block 73) failed [ 286.823947][ T7830] attempt to access beyond end of device [ 286.823947][ T7830] loop4: rw=0, want=1196, limit=256 [ 286.871921][ T26] audit: type=1800 audit(1719761613.454:126): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1071" name="file1" dev="loop4" ino=1048633 res=0 errno=0 [ 286.941665][ T7834] loop1: detected capacity change from 0 to 512 [ 286.952288][ T7831] loop2: detected capacity change from 0 to 2048 [ 286.975482][ T7828] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 287.113753][ T7828] ext4 filesystem being mounted at /root/syzkaller.446FQp/93/bus supports timestamps until 2038 (0x7fffffff) [ 287.131507][ T6075] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 287.132153][ T7834] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.1076: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 287.163897][ T6075] FAT-fs (loop4): Filesystem has been set read-only [ 287.221510][ T7831] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.233731][ T7834] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1076: couldn't read orphan inode 15 (err -117) [ 287.280697][ T7834] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.291685][ T7828] loop_set_status: loop3 () has still dirty pages (nrpages=3) [ 287.378441][ T7834] ext4 filesystem being mounted at /root/syzkaller.Wt1vg3/238/file0 supports timestamps until 2038 (0x7fffffff) [ 287.461311][ T6089] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /root/syzkaller.446FQp/93/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 287.538806][ T7837] loop0: detected capacity change from 0 to 32768 [ 287.672296][ T7837] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 scanned by syz.0.1073 (7837) [ 287.777858][ T7837] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 287.812144][ T7837] BTRFS info (device loop0): using free space tree [ 287.841162][ T7837] BTRFS info (device loop0): has skinny extents [ 288.204414][ T7837] BTRFS info (device loop0): enabling ssd optimizations [ 288.263624][ T4298] psmouse serio5: Failed to reset mouse on : -5 [ 288.321053][ T7837] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 288.870423][ T7879] chnl_net:caif_netlink_parms(): no params data found [ 289.079866][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.095069][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.103105][ T7879] device bridge_slave_0 entered promiscuous mode [ 289.241457][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.257575][ T7915] loop1: detected capacity change from 0 to 256 [ 289.276952][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.301886][ T7879] device bridge_slave_1 entered promiscuous mode [ 289.345030][ T7915] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.402890][ T7879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.442257][ T7879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.557851][ T7879] team0: Port device team_slave_0 added [ 289.608680][ T7879] team0: Port device team_slave_1 added [ 289.681726][ T7925] netlink: 'syz.1.1100': attribute type 4 has an invalid length. [ 289.753369][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.771383][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.848027][ T7879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.867127][ T7924] netlink: 'syz.1.1100': attribute type 4 has an invalid length. [ 289.887664][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.908266][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.963541][ T7879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.046448][ T7879] device hsr_slave_0 entered promiscuous mode [ 290.082161][ T7879] device hsr_slave_1 entered promiscuous mode [ 290.092032][ T7879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.121834][ T7879] Cannot create hsr debugfs directory [ 290.283432][ T7932] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 290.343835][ T3552] Bluetooth: hci0: command 0x0409 tx timeout [ 290.387699][ T7879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.508106][ T7879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.627150][ T7879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.749240][ T7879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.932485][ T9] bridge0: port 3(ip6gretap0) entered disabled state [ 290.970299][ T9] device ip6gretap0 left promiscuous mode [ 290.993319][ T9] bridge0: port 3(ip6gretap0) entered disabled state [ 291.061922][ T7879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.122322][ T7879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.142816][ T7879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.180696][ T7879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.433199][ T7879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.466391][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.484677][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.496382][ T7879] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.533723][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.554197][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.583052][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.590260][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.666611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.666831][ T7941] loop1: detected capacity change from 0 to 32768 [ 291.681805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.718438][ T7941] [ 291.718438][ T7941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.718438][ T7941] [ 291.726054][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.774151][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.781252][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.802799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.813904][ T7941] [ 291.813904][ T7941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.813904][ T7941] [ 291.832209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.843820][ T4298] misc userio: Buffer overflowed, userio client isn't keeping up [ 291.846686][ T7941] [ 291.846686][ T7941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.846686][ T7941] [ 291.883425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.892060][ T7943] [ 291.892060][ T7943] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.892060][ T7943] [ 291.910715][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.921050][ T7941] [ 291.921050][ T7941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.921050][ T7941] [ 291.950259][ T7941] [ 291.950259][ T7941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.950259][ T7941] [ 291.961185][ T7943] [ 291.961185][ T7943] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.961185][ T7943] [ 291.972364][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.980529][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.989684][ T7941] [ 291.989684][ T7941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.989684][ T7941] [ 292.008165][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.020469][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.028899][ T7943] jfs: Unrecognized mount option "0xffffffffffffffff00000000000000000000000"Co"'ή_0-%+ t6P'k;/|%T9i(%Z@G~ͱ\%S:UVTOvO7MfOJjN"Bn]XZ [ 292.028899][ T7943] o*e4bL*" or missing value [ 292.057872][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.070000][ T274] [ 292.070000][ T274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.070000][ T274] [ 292.082578][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.092035][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.118676][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.193539][ T3503] [ 292.193539][ T3503] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.193539][ T3503] [ 292.225716][ T3503] [ 292.225716][ T3503] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.225716][ T3503] [ 292.264610][ T9] device hsr_slave_0 left promiscuous mode [ 292.291426][ T9] device hsr_slave_1 left promiscuous mode [ 292.299293][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.348563][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.368452][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.383754][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.403122][ T9] device bridge_slave_1 left promiscuous mode [ 292.421444][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.431171][ T9] device bridge_slave_0 left promiscuous mode [ 292.433853][ T4551] Bluetooth: hci0: command 0x041b tx timeout [ 292.444198][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.514636][ T9] device veth1_macvtap left promiscuous mode [ 292.520673][ T9] device veth0_macvtap left promiscuous mode [ 292.533654][ T9] device veth1_vlan left promiscuous mode [ 292.539535][ T9] device veth0_vlan left promiscuous mode [ 292.986196][ T9] team0 (unregistering): Port device team_slave_1 removed [ 293.024274][ T9] team0 (unregistering): Port device team_slave_0 removed [ 293.053977][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.092989][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.116847][ T4298] input: PS/2 Generic Mouse as /devices/serio5/input/input12 [ 293.333747][ T9] bond0 (unregistering): Released all slaves [ 293.384617][ T4298] psmouse serio5: Failed to enable mouse on [ 293.595316][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.602781][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.638086][ T7879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.693712][ T7956] loop2: detected capacity change from 0 to 256 [ 293.801518][ T7956] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.103744][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.112429][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.162818][ T7879] device veth0_vlan entered promiscuous mode [ 294.196985][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.205910][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.250824][ T7879] device veth1_vlan entered promiscuous mode [ 294.277077][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.291524][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.307497][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.356740][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 294.375943][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.400025][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.431024][ T7879] device veth0_macvtap entered promiscuous mode [ 294.459373][ T7879] device veth1_macvtap entered promiscuous mode [ 294.474990][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.489716][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.527948][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.544645][ T3554] Bluetooth: hci0: command 0x040f tx timeout [ 294.570991][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.614244][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.653512][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.693925][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.729064][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.763524][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.799776][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.834946][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.848483][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.874379][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.899908][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.933578][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.943417][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.003525][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.053622][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.083901][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.134827][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.143855][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.163047][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.193022][ T7879] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.213886][ T7879] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.223107][ T7879] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.273568][ T7879] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.445048][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.503583][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.540063][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.568612][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.586858][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.634839][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.583650][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 297.430152][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 298.149784][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.269111][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.471185][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.577532][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.648074][ T8002] chnl_net:caif_netlink_parms(): no params data found [ 298.865808][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.887058][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.926272][ T8002] device bridge_slave_0 entered promiscuous mode [ 298.969820][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.987470][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.031866][ T8002] device bridge_slave_1 entered promiscuous mode [ 299.111282][ T8002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.182793][ T8002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.265710][ T8002] team0: Port device team_slave_0 added [ 299.277569][ T8002] team0: Port device team_slave_1 added [ 299.359261][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.386709][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.432339][ T8002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.454609][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.461614][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.519336][ T8002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.653115][ T8002] device hsr_slave_0 entered promiscuous mode [ 299.702424][ T8002] device hsr_slave_1 entered promiscuous mode [ 299.731095][ T8002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.744077][ T8002] Cannot create hsr debugfs directory [ 300.023576][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 300.541846][ T9] device hsr_slave_0 left promiscuous mode [ 300.559128][ T9] device hsr_slave_1 left promiscuous mode [ 300.590761][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.613565][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.673882][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.691717][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.715112][ T9] device bridge_slave_1 left promiscuous mode [ 300.753799][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.764645][ T9] device bridge_slave_0 left promiscuous mode [ 300.770848][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.838532][ T9] device veth1_macvtap left promiscuous mode [ 300.853947][ T9] device veth0_macvtap left promiscuous mode [ 300.860040][ T9] device veth1_vlan left promiscuous mode [ 300.903712][ T9] device veth0_vlan left promiscuous mode [ 301.492060][ T9] team0 (unregistering): Port device team_slave_1 removed [ 301.540871][ T9] team0 (unregistering): Port device team_slave_0 removed [ 301.612186][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.648165][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.801814][ T9] bond0 (unregistering): Released all slaves [ 302.098165][ T8002] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 302.135268][ T8002] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 302.140672][ T1279] Bluetooth: hci4: command 0x041b tx timeout [ 302.167632][ T8002] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 302.206447][ T8002] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 302.454652][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.504664][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.512834][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.555790][ T8002] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.613605][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.622315][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.651258][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.658391][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.697678][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.724344][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.760088][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.767297][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.844626][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.859349][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.900913][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.930619][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.969854][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.012094][ T8002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.063222][ T8002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.095064][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.114293][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.139919][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.179259][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.219886][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.250332][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.290579][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.337947][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.660304][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.682768][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.721325][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.805480][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.814978][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.875180][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.893700][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.923610][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.931438][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.990634][ T8002] device veth0_vlan entered promiscuous mode [ 304.022021][ T8002] device veth1_vlan entered promiscuous mode [ 304.095512][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 304.114149][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 304.122261][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.172733][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.184522][ T8002] device veth0_macvtap entered promiscuous mode [ 304.202426][ T3554] Bluetooth: hci4: command 0x040f tx timeout [ 304.239850][ T8002] device veth1_macvtap entered promiscuous mode [ 304.291530][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.320249][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.359979][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.391031][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.421511][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.452556][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.483042][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.512170][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.563425][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.595707][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.618897][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.639143][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.676173][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.707040][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.748832][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.799164][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.831107][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.862119][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.912941][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.923807][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.932432][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.975398][ T8002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.016146][ T8002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.056358][ T8002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.093568][ T8002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.304835][ T3807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.313084][ T3807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.486625][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.603437][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.632516][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.669101][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.985842][ T1065] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 306.089438][ T8259] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 306.265085][ T4551] Bluetooth: hci4: command 0x0419 tx timeout [ 306.367343][ T1065] usb 5-1: config 1 has an invalid descriptor of length 57, skipping remainder of the config [ 306.394784][ T1065] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.448829][ T8263] 9pnet: Insufficient options for proto=fd [ 306.513636][ T1065] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 306.539186][ T1065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.567883][ T1065] usb 5-1: SerialNumber: syz [ 307.653262][ T8271] loop1: detected capacity change from 0 to 512 [ 307.694086][ T8271] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 307.729375][ T8271] EXT4-fs (loop1): can't mount with commit=198, fs mounted w/o journal [ 307.919619][ T8277] loop1: detected capacity change from 0 to 16 [ 308.013141][ T8277] erofs: (device loop1): mounted with root inode @ nid 36. [ 308.073042][ T8277] attempt to access beyond end of device [ 308.073042][ T8277] loop1: rw=0, want=34359739352, limit=16 [ 308.130943][ T8277] attempt to access beyond end of device [ 308.130943][ T8277] loop1: rw=524288, want=34359739344, limit=16 [ 308.176499][ T8277] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 308.198991][ T8277] attempt to access beyond end of device [ 308.198991][ T8277] loop1: rw=524288, want=34359740336, limit=16 [ 308.633708][ T1279] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 309.184358][ T1279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.277369][ T1279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.458114][ T1065] usb 5-1: 0:2 : does not exist [ 309.463135][ T1065] usb 5-1: unit 5: unexpected type 0x0c [ 309.478206][ T1279] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 309.480925][ T1065] usb 5-1: USB disconnect, device number 13 [ 309.532136][ T1279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.604574][ T1279] usb 2-1: config 0 descriptor?? [ 310.086247][ T1279] itetech 0003:258A:6A88.0006: unexpected long global item [ 310.098773][ T1279] itetech: probe of 0003:258A:6A88.0006 failed with error -22 [ 310.180155][ T8310] loop0: detected capacity change from 0 to 8192 [ 310.219052][ T8310] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 310.230655][ T8310] REISERFS (device loop0): using ordered data mode [ 310.250254][ T8310] reiserfs: using flush barriers [ 310.259597][ T8310] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 310.282097][ T8310] REISERFS (device loop0): checking transaction log (loop0) [ 310.286818][ T3547] usb 2-1: USB disconnect, device number 16 [ 310.312574][ T8316] loop4: detected capacity change from 0 to 1024 [ 310.369272][ T8310] REISERFS (device loop0): Using tea hash to sort names [ 310.377217][ T8310] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 310.391289][ T8310] [ 310.393611][ T8310] ====================================================== [ 310.400615][ T8310] WARNING: possible circular locking dependency detected [ 310.407616][ T8310] 5.15.161-syzkaller #0 Not tainted [ 310.412785][ T8310] ------------------------------------------------------ [ 310.419775][ T8310] syz.0.1197/8310 is trying to acquire lock: [ 310.425725][ T8310] ffff88801d700460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 310.435031][ T8310] [ 310.435031][ T8310] but task is already holding lock: [ 310.442378][ T8310] ffff88807352f090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 310.451333][ T8310] [ 310.451333][ T8310] which lock already depends on the new lock. [ 310.451333][ T8310] [ 310.461717][ T8310] [ 310.461717][ T8310] the existing dependency chain (in reverse order) is: [ 310.470710][ T8310] [ 310.470710][ T8310] -> #2 (&sbi->lock){+.+.}-{3:3}: [ 310.477902][ T8310] lock_acquire+0x1db/0x4f0 [ 310.482911][ T8310] __mutex_lock_common+0x1da/0x25a0 [ 310.488618][ T8310] mutex_lock_nested+0x17/0x20 [ 310.493882][ T8310] reiserfs_write_lock+0x76/0xd0 [ 310.499326][ T8310] reiserfs_lookup+0x15c/0x4b0 [ 310.504586][ T8310] lookup_one_qstr_excl+0x117/0x240 [ 310.510294][ T8310] filename_create+0x293/0x530 [ 310.515555][ T8310] do_mkdirat+0xb3/0x520 [ 310.520293][ T8310] __x64_sys_mkdirat+0x85/0x90 [ 310.525562][ T8310] do_syscall_64+0x3b/0xb0 [ 310.530489][ T8310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.536891][ T8310] [ 310.536891][ T8310] -> #1 (&type->i_mutex_dir_key#16/1){+.+.}-{3:3}: [ 310.545662][ T8310] lock_acquire+0x1db/0x4f0 [ 310.550786][ T8310] down_write_nested+0x3b/0x60 [ 310.556157][ T8310] filename_create+0x25c/0x530 [ 310.561430][ T8310] do_mkdirat+0xb3/0x520 [ 310.566180][ T8310] __x64_sys_mkdirat+0x85/0x90 [ 310.571442][ T8310] do_syscall_64+0x3b/0xb0 [ 310.576443][ T8310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.582836][ T8310] [ 310.582836][ T8310] -> #0 (sb_writers#20){.+.+}-{0:0}: [ 310.590288][ T8310] validate_chain+0x1649/0x5930 [ 310.595642][ T8310] __lock_acquire+0x1295/0x1ff0 [ 310.600990][ T8310] lock_acquire+0x1db/0x4f0 [ 310.605994][ T8310] sb_start_write+0x4f/0x1c0 [ 310.611086][ T8310] mnt_want_write_file+0x5a/0x1f0 [ 310.616705][ T8310] reiserfs_ioctl+0x170/0x340 [ 310.622056][ T8310] __se_sys_ioctl+0xf1/0x160 [ 310.627146][ T8310] do_syscall_64+0x3b/0xb0 [ 310.632060][ T8310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.638450][ T8310] [ 310.638450][ T8310] other info that might help us debug this: [ 310.638450][ T8310] [ 310.648664][ T8310] Chain exists of: [ 310.648664][ T8310] sb_writers#20 --> &type->i_mutex_dir_key#16/1 --> &sbi->lock [ 310.648664][ T8310] [ 310.662121][ T8310] Possible unsafe locking scenario: [ 310.662121][ T8310] [ 310.669553][ T8310] CPU0 CPU1 [ 310.674893][ T8310] ---- ---- [ 310.680234][ T8310] lock(&sbi->lock); [ 310.684192][ T8310] lock(&type->i_mutex_dir_key#16/1); [ 310.692157][ T8310] lock(&sbi->lock); [ 310.698633][ T8310] lock(sb_writers#20); [ 310.702856][ T8310] [ 310.702856][ T8310] *** DEADLOCK *** [ 310.702856][ T8310] [ 310.711019][ T8310] 1 lock held by syz.0.1197/8310: [ 310.716023][ T8310] #0: ffff88807352f090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 310.725411][ T8310] [ 310.725411][ T8310] stack backtrace: [ 310.731281][ T8310] CPU: 1 PID: 8310 Comm: syz.0.1197 Not tainted 5.15.161-syzkaller #0 [ 310.739412][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 310.749447][ T8310] Call Trace: [ 310.752707][ T8310] [ 310.755617][ T8310] dump_stack_lvl+0x1e3/0x2d0 [ 310.760288][ T8310] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 310.765900][ T8310] ? print_circular_bug+0x12b/0x1a0 [ 310.771078][ T8310] check_noncircular+0x2f8/0x3b0 [ 310.775993][ T8310] ? add_chain_block+0x850/0x850 [ 310.780914][ T8310] ? lockdep_lock+0x11f/0x2a0 [ 310.785568][ T8310] ? kasan_set_free_info+0x1f/0x40 [ 310.790654][ T8310] ? ____kasan_slab_free+0xd8/0x120 [ 310.795830][ T8310] ? slab_free_freelist_hook+0xdd/0x160 [ 310.801356][ T8310] ? kfree+0xf1/0x270 [ 310.805317][ T8310] ? tomoyo_path_number_perm+0x648/0x810 [ 310.810927][ T8310] ? reacquire_held_locks+0x660/0x660 [ 310.816360][ T8310] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.822406][ T8310] validate_chain+0x1649/0x5930 [ 310.827239][ T8310] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 310.833196][ T8310] ? reacquire_held_locks+0x660/0x660 [ 310.838546][ T8310] ? __lock_acquire+0x1295/0x1ff0 [ 310.843550][ T8310] ? look_up_lock_class+0x77/0x120 [ 310.848643][ T8310] ? register_lock_class+0x100/0x9a0 [ 310.853995][ T8310] ? is_dynamic_key+0x1f0/0x1f0 [ 310.858915][ T8310] ? mark_lock+0x98/0x340 [ 310.863228][ T8310] __lock_acquire+0x1295/0x1ff0 [ 310.868059][ T8310] lock_acquire+0x1db/0x4f0 [ 310.872540][ T8310] ? mnt_want_write_file+0x5a/0x1f0 [ 310.877724][ T8310] ? read_lock_is_recursive+0x10/0x10 [ 310.883200][ T8310] ? __might_sleep+0xc0/0xc0 [ 310.887766][ T8310] ? mutex_lock_io_nested+0x60/0x60 [ 310.892952][ T8310] sb_start_write+0x4f/0x1c0 [ 310.897520][ T8310] ? mnt_want_write_file+0x5a/0x1f0 [ 310.902697][ T8310] mnt_want_write_file+0x5a/0x1f0 [ 310.907702][ T8310] reiserfs_ioctl+0x170/0x340 [ 310.912363][ T8310] ? __se_sys_ioctl+0xe6/0x160 [ 310.917192][ T8310] ? reiserfs_unpack+0x5a0/0x5a0 [ 310.922108][ T8310] __se_sys_ioctl+0xf1/0x160 [ 310.926675][ T8310] do_syscall_64+0x3b/0xb0 [ 310.931088][ T8310] ? clear_bhb_loop+0x15/0x70 [ 310.935828][ T8310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.941711][ T8310] RIP: 0033:0x7fd41a33cb99 [ 310.946106][ T8310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.965690][ T8310] RSP: 002b:00007fd418dbd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.974084][ T8310] RAX: ffffffffffffffda RBX: 00007fd41a4cafa0 RCX: 00007fd41a33cb99 [ 310.982034][ T8310] RDX: 0000000000000000 RSI: 0000000040087602 RDI: 0000000000000004 [ 310.989981][ T8310] RBP: 00007fd41a3bd77e R08: 0000000000000000 R09: 0000000000000000 [ 310.997949][ T8310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.005896][ T8310] R13: 000000000000000b R14: 00007fd41a4cafa0 R15: 00007ffc23fbee18 [ 311.013850][ T8310] SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 311.023750][ T1279] usb 3-1: new high-speed USB device number 11 using dummy_hcd [