last executing test programs: 28.779084787s ago: executing program 1 (id=350): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") chdir(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2721, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 23.922365777s ago: executing program 1 (id=358): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) capset(0x0, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0xfff, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f0000000200)='\x00\x80\x00\x00\x00\x00\x00\x06\x8a\x82,\x9eA\x93\x8a\xb4\xf1y\x8d\x80\x00\xbb\x14C\xee\xd2(]\x1fZG\xdb\xee\xd3\xcf\x98+\x1d\x01\x87Q\xe9\x03H;0\xa8\xe4\xfe\x1a\xbb\x17\xb9\xf0\xe2\t\x93\xde\xf4\xad\x8a\xa2\xf6{\x1d\x02\x85I\f\x06\xe0\x03\xcd\xca\xa2d\x0e\x1d\xc6[\xe8\xd2\xe1\x9cX\xed\xc1?n9%\x00#_\b\xaadP\xf8\xab\xa0#') r6 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fgetxattr(r6, &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f0000000100), 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0) 17.989079432s ago: executing program 1 (id=365): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x10880, 0x0) r0 = syz_open_dev$video(&(0x7f00000009c0), 0x7, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x1e, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) recvfrom(r2, 0x0, 0x0, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) 15.781229972s ago: executing program 3 (id=371): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmod(r2, 0x140) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3201, 0x3, 0x19d}, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000340)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}, 0x40002, 0x2, 0x3, 0x2, 0x0, 0x3ff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) 14.929530692s ago: executing program 0 (id=372): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa7f0e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/178, 0x2}, 0x20) fstat(r3, &(0x7f0000004280)) syz_open_dev$ublk_bdev(&(0x7f0000004300), 0x0, 0x480001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}}}, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.108521913s ago: executing program 0 (id=374): syz_open_dev$loop(&(0x7f00000084c0), 0x3, 0x181200) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1ff, 0x2000, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffe, 0x0, 0x0, 0x8f], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) ioctl$I2C_PEC(r4, 0x708, 0x7f) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000001c0)={0x0, 0x6, 0x7, &(0x7f00000000c0)={0x14, "28bc7ba3bad91f8c6a605f738c0ffa025c21f995f3cf7b26ff01f4cb4c388d242b"}}) getpgid(r1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r5, 0x5406, 0xfffffffffffffffe) prlimit64(r1, 0x9, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 12.588968485s ago: executing program 3 (id=375): futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) 12.501298407s ago: executing program 2 (id=376): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 12.313673031s ago: executing program 4 (id=377): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xe3}, {0x0}, &(0x7f0000000300)}}], 0x48, 0x8001}, 0x0) 11.604380267s ago: executing program 4 (id=378): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xe3}, {0x0}, &(0x7f0000000300)}}], 0x48, 0x8001}, 0x0) 10.935730842s ago: executing program 4 (id=379): set_mempolicy(0x8006, 0x0, 0x5) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf2510000000040001803eae1647bdae45e07260e027f64e6351774b419678b42affec0b629257e61948433221594a19a5b18bfd7488037a65145545e7b010a5e9fb"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x8844) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x96f5, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) 10.931750522s ago: executing program 0 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000001000)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aac2aaaaaa"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x14c, 0x10, 0x1b020ba487bfd163, 0x0, 0x0, {{@in6=@mcast1, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@empty, {0x7, 0x0, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff}, {}, {}, 0x3, 0x0, 0xa}, [@algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "f76c53a22efbe5b37da0debc7f835c9d08"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 10.924255583s ago: executing program 2 (id=380): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xe3}, {0x0}, &(0x7f0000000300)}}], 0x48, 0x8001}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 10.917280203s ago: executing program 3 (id=381): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xe3}, {0x0}, &(0x7f0000000300)}}], 0x48, 0x8001}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 8.852366769s ago: executing program 3 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x900, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) unshare(0x24020400) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x800030b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000003c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, r8, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, 0xffffffffffffffff, 0x4}, 0x10) r10 = dup(r7) syz_ublk_setup_queues(r10, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 8.850749079s ago: executing program 2 (id=393): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") chdir(&(0x7f0000000040)='./file0\x00') r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2721, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.626945695s ago: executing program 0 (id=383): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 8.504291908s ago: executing program 4 (id=384): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0xe) 6.055008723s ago: executing program 2 (id=385): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.054237053s ago: executing program 1 (id=397): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x100000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0xf7f, 0x400}, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000080)={{@hyper, 0x2}, 0x100, 0x4}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffd, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 6.024561314s ago: executing program 4 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x87, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create1(0x80000) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r4, 0xffffffffffffffff, &(0x7f00000002c0)={0x40000012}}) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.780947442s ago: executing program 4 (id=387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$mouse(0x0, 0xff7e, 0x400) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000240)={{0x8, 0x7, &(0x7f0000000180)=[{0xc5, 0x0, 0xffff}, {0x6, 0x0, 0x2}, {0x56, 0x0, 0x4}, {0xf8, 0x0, 0x9}, {0x3, 0x0, 0x1}, {0xfd}, {0x5, 0x0, 0x2}]}, 0xb9, 0x4a, 0x4, 0x2, 0x0, 0x3, 0xfffffffffffffff8, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32], 0x10) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, 0x0, &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c000300ebae55130000000000000005be6d55b57cb15e63c15c46099d0fb04ce9b861d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 2.469913915s ago: executing program 2 (id=388): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.429320245s ago: executing program 1 (id=390): futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) 2.361743677s ago: executing program 3 (id=391): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xe3}, {0x0}, &(0x7f0000000300)}}], 0x48, 0x8001}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 2.280404659s ago: executing program 1 (id=392): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x1, 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x18, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x82, "0062baad630400"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0xa0000000}) syz_open_pts(r1, 0x80) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000c80)={{r2}, 0x0, 0x2, @unused=[0x6, 0x9, 0x4, 0x1], @devid}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 1.406235249s ago: executing program 0 (id=394): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xe3}, {0x0}, &(0x7f0000000300)}}], 0x48, 0x8001}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 627.096007ms ago: executing program 3 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x9, 0xfe, 0xfff00004}, {0x16, 0x0, 0x3, 0xfffffffe}]}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0xfff9, 0x3}, 'syz0\x00', 0x38}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) write$input_event(r4, &(0x7f00000000c0)={{0x0, 0xea60}, 0x12, 0x6, 0x80}, 0x18) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) 445.146791ms ago: executing program 0 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000001000)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aac2aaaaaa"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x14c, 0x10, 0x1b020ba487bfd163, 0x0, 0x0, {{@in6=@mcast1, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@empty, {0x7, 0x0, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff}, {}, {}, 0x3, 0x0, 0xa}, [@algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "f76c53a22efbe5b37da0debc7f835c9d08"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=398): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2721, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 59.400583][ T4259] cgroup: Unknown subsys name 'net' [ 59.501113][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.732738][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.389301][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.410410][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.418593][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.430922][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.438532][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.439181][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.446827][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.455444][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.461180][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.467460][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.475945][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.482758][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.488764][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.496496][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.502753][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.509502][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.524157][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.524565][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.540779][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.543800][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.549010][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.556381][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.570362][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.593389][ T4272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.600965][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.608879][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.616461][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.623673][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.631137][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.638505][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.965444][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 63.053846][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 63.112336][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 63.166122][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.173254][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.181930][ T4271] device bridge_slave_0 entered promiscuous mode [ 63.195804][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 63.218895][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.226104][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.233709][ T4271] device bridge_slave_1 entered promiscuous mode [ 63.244131][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 63.290288][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.297493][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.305419][ T4274] device bridge_slave_0 entered promiscuous mode [ 63.327893][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.345703][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.352799][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.360780][ T4274] device bridge_slave_1 entered promiscuous mode [ 63.382377][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.422088][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.440960][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.448248][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.456216][ T4279] device bridge_slave_0 entered promiscuous mode [ 63.463485][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.473482][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.481408][ T4282] device bridge_slave_0 entered promiscuous mode [ 63.495706][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.516344][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.523723][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.531592][ T4279] device bridge_slave_1 entered promiscuous mode [ 63.538629][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.546145][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.553798][ T4282] device bridge_slave_1 entered promiscuous mode [ 63.573700][ T4271] team0: Port device team_slave_0 added [ 63.606102][ T4271] team0: Port device team_slave_1 added [ 63.628132][ T4274] team0: Port device team_slave_0 added [ 63.636567][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.645801][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.652882][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.663693][ T4278] device bridge_slave_0 entered promiscuous mode [ 63.681467][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.692508][ T4274] team0: Port device team_slave_1 added [ 63.700081][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.709431][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.716830][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.724643][ T4278] device bridge_slave_1 entered promiscuous mode [ 63.738268][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.763814][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.770822][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.796724][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.809777][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.816822][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.843017][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.892318][ T4282] team0: Port device team_slave_0 added [ 63.900309][ T4279] team0: Port device team_slave_0 added [ 63.909375][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.916687][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.942721][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.956022][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.967956][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.978681][ T4282] team0: Port device team_slave_1 added [ 63.995633][ T4279] team0: Port device team_slave_1 added [ 64.001744][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.012437][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.038602][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.091552][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.098619][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.124596][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.148444][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.155920][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.182157][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.198549][ T4278] team0: Port device team_slave_0 added [ 64.204751][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.211906][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.238085][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.252868][ T4271] device hsr_slave_0 entered promiscuous mode [ 64.259608][ T4271] device hsr_slave_1 entered promiscuous mode [ 64.268022][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.275543][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.301902][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.316834][ T4278] team0: Port device team_slave_1 added [ 64.380488][ T4274] device hsr_slave_0 entered promiscuous mode [ 64.387590][ T4274] device hsr_slave_1 entered promiscuous mode [ 64.394083][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.402144][ T4274] Cannot create hsr debugfs directory [ 64.419732][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.429403][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.455426][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.469637][ T4279] device hsr_slave_0 entered promiscuous mode [ 64.477010][ T4279] device hsr_slave_1 entered promiscuous mode [ 64.483428][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.491076][ T4279] Cannot create hsr debugfs directory [ 64.508792][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.516048][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.544597][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.555762][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 64.598635][ T4282] device hsr_slave_0 entered promiscuous mode [ 64.605822][ T4282] device hsr_slave_1 entered promiscuous mode [ 64.612422][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.620455][ T4282] Cannot create hsr debugfs directory [ 64.635153][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 64.715169][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 64.715181][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 64.715341][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 64.748365][ T4278] device hsr_slave_0 entered promiscuous mode [ 64.755602][ T4278] device hsr_slave_1 entered promiscuous mode [ 64.762261][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.770044][ T4278] Cannot create hsr debugfs directory [ 64.991785][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.010649][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.023273][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.032733][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.064728][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.076626][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.095679][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.131478][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.202220][ T4282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.227294][ T4282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.237884][ T4282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.251889][ T4282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.266447][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.293433][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.303279][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.337017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.348814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.358248][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.367703][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.391753][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.401693][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.440054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.452207][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.461468][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.468726][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.478344][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.488423][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.497236][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.504279][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.520900][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.536076][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.544216][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.552366][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.582830][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.605756][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.617334][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.626223][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.633273][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.641748][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.650638][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.659241][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.668735][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.677756][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.686509][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.695062][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.702164][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.709998][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.719152][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.727473][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.737957][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.749610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.760359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.776221][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.788668][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.807343][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.816520][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.828610][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.859461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.870200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.880568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.891621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.912982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.923599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.932464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.940813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.963325][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.972668][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.984144][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.993056][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.011237][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.021959][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.053477][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.062651][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.075797][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.084068][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.093024][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.101965][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.110957][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.118087][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.126065][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.134560][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.143164][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.150332][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.164692][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.173691][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.199285][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.220304][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.265061][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.303411][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.323984][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.342129][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.352804][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.366961][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.379143][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.404252][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.418246][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.432979][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.443226][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.452136][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.467793][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.476254][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.493505][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.508712][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.539191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.560961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.588141][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.595321][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.623295][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.635740][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 66.675373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.698106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.712095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.715332][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 66.721893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.739546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.750341][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.757525][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.772757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.791690][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.796072][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 66.804494][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 66.804505][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 66.848896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.865939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.873479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.889690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.904202][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.911376][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.940325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.949782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.958784][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.965935][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.973877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.984128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.993722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.003552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.012874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.022253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.031432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.040397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.049674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.057937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.074550][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.103074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.111432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.119782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.131294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.140277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.166393][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.202897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.213927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.228727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.238975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.252947][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.279646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.295818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.303321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.326977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.345844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.354484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.375933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.385071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.394466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.447987][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.488995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.515848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.549508][ T4271] device veth0_vlan entered promiscuous mode [ 67.571904][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.596749][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.616588][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.635857][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.644703][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.669965][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.697944][ T4271] device veth1_vlan entered promiscuous mode [ 67.717488][ T4282] device veth0_vlan entered promiscuous mode [ 67.732416][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.742556][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.751395][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.761113][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.772001][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.787857][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.799305][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.809388][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.819947][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.829975][ T4279] device veth0_vlan entered promiscuous mode [ 67.849639][ T4282] device veth1_vlan entered promiscuous mode [ 67.880542][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.889639][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.899115][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.907411][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.926820][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.937005][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.946111][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.960118][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.968586][ T4279] device veth1_vlan entered promiscuous mode [ 67.994068][ T4271] device veth0_macvtap entered promiscuous mode [ 68.009929][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.019145][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.028052][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.036784][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.045497][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.059739][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.067476][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.084666][ T4282] device veth0_macvtap entered promiscuous mode [ 68.099820][ T4271] device veth1_macvtap entered promiscuous mode [ 68.115917][ T4282] device veth1_macvtap entered promiscuous mode [ 68.123138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.132019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.140466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.148544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.158651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.169402][ T4279] device veth0_macvtap entered promiscuous mode [ 68.180976][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.197392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.207877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.217582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.245767][ T4279] device veth1_macvtap entered promiscuous mode [ 68.268647][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.288487][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.299226][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.313798][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.324679][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.341887][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.353937][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.365924][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.379464][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.389567][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.402187][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.413305][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.420792][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.431164][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.440241][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.449198][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.465637][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.475868][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.484764][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.493667][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.502840][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.511327][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.524141][ T4282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.533868][ T4282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.542829][ T4282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.552545][ T4282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.568219][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.579170][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.590359][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.600039][ T4278] device veth0_vlan entered promiscuous mode [ 68.610331][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.622282][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.632548][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.643519][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.654531][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.664278][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.674612][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.683481][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.692659][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.702610][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.711553][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.720479][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 68.727154][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.736397][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.769266][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.779977][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.788818][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.797933][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 68.804377][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.834724][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.845217][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.859889][ T4278] device veth1_vlan entered promiscuous mode [ 68.876464][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 68.882942][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 68.882979][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 68.944911][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.952947][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.967190][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.978986][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.988050][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.997866][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.007431][ T4274] device veth0_vlan entered promiscuous mode [ 69.060502][ T4274] device veth1_vlan entered promiscuous mode [ 69.125104][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.133057][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.136111][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.149745][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.158128][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.169753][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.178547][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.189067][ T4278] device veth0_macvtap entered promiscuous mode [ 69.216441][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.224299][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.226106][ T4278] device veth1_macvtap entered promiscuous mode [ 69.242466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.250971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.259483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.284169][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.297994][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.310777][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.321618][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.334727][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.362065][ T4274] device veth0_macvtap entered promiscuous mode [ 69.372665][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.384020][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.395993][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.407104][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.417506][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.428336][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.441058][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.462229][ T4274] device veth1_macvtap entered promiscuous mode [ 69.469983][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.478970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.486569][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.490996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.503780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.513770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.523240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.547256][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.548312][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.568123][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.575228][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.578474][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.597474][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.607423][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.618180][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.629852][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.655772][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.660562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.664052][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.681178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.692832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.708116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.720864][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.729802][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.740840][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.750436][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.775818][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.792864][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.814758][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.834373][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.851180][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.862245][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.877867][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.890431][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.913348][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.949891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.960140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.979650][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.993088][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.025310][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.036491][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.048400][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.059334][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.069255][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.081262][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.113395][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.225006][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.252834][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.340881][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.350975][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.360570][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.371943][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.385929][ T4355] input: syz0 as /devices/virtual/input/input5 [ 70.533235][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.557363][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.609199][ T4365] loop3: detected capacity change from 0 to 256 [ 70.619910][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.636285][ T4365] exfat: Deprecated parameter 'utf8' [ 70.643689][ T4365] exfat: Deprecated parameter 'namecase' [ 70.662075][ T4360] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 70.711433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.731024][ T4365] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 70.763573][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.783436][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.795457][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 70.864033][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.875573][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 70.881856][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.919660][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.945806][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.955361][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 70.956671][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 70.961374][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 70.986312][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.247812][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.286055][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.298672][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.876294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.074814][ C0] sched: RT throttling activated [ 73.317828][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 73.931691][ T4401] loop1: detected capacity change from 0 to 512 [ 73.938948][ T4401] EXT4-fs: Ignoring removed bh option [ 73.960316][ T4401] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 74.537828][ T4401] EXT4-fs (loop1): 1 truncate cleaned up [ 74.693452][ T4401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.830407][ T4431] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.873900][ T4435] IPVS: Error connecting to the multicast addr [ 77.391293][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 77.474851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 77.494843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 77.504823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 77.514823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 77.524823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.534822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.544826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.554821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.564826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.574824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.528052][ T7] cfg80211: failed to load regulatory.db [ 82.696311][ T4464] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 82.976258][ T4468] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 84.012913][ T4472] tipc: Started in network mode [ 84.018105][ T4472] tipc: Node identity 4, cluster identity 4711 [ 84.024284][ T4472] tipc: Node number set to 4 [ 87.204362][ T4490] loop2: detected capacity change from 0 to 1024 [ 87.235761][ T4490] EXT4-fs: Ignoring removed orlov option [ 87.352333][ T4490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.130472][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 91.046347][ T4462] Bluetooth: hci5: Frame reassembly failed (-84) [ 91.511471][ T4523] NILFS (nullb0): couldn't find nilfs on the device [ 92.408255][ T4288] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 93.435154][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.464915][ T7] usb 2-1: device descriptor read/64, error -71 [ 97.315008][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 97.381394][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.390196][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.580900][ T4580] atomic_op ffff88807c930998 conn xmit_atomic 0000000000000000 [ 105.637328][ T4611] loop2: detected capacity change from 0 to 128 [ 105.644672][ T4611] ======================================================= [ 105.644672][ T4611] WARNING: The mand mount option has been deprecated and [ 105.644672][ T4611] and is ignored by this kernel. Remove the mand [ 105.644672][ T4611] option from the mount to silence this warning. [ 105.644672][ T4611] ======================================================= [ 105.885625][ T4611] EXT4-fs (loop2): Test dummy encryption mode enabled [ 106.705721][ T4611] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.716976][ T4611] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.494167][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 108.127185][ T4617] loop0: detected capacity change from 0 to 512 [ 108.145517][ T4623] Zero length message leads to an empty skb [ 108.248036][ T4617] EXT4-fs: Ignoring removed i_version option [ 108.254064][ T4617] EXT4-fs: Ignoring removed nobh option [ 108.335968][ T4617] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.416206][ T4627] 9pnet_virtio: no channels available for device syz [ 110.009146][ T4617] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.344085][ T4635] capability: warning: `syz.2.58' uses deprecated v2 capabilities in a way that may be insecure [ 111.125948][ T4617] EXT4-fs: failed to create workqueue [ 111.126741][ T4617] EXT4-fs (loop0): mount failed [ 112.408179][ T4646] loop4: detected capacity change from 0 to 16 [ 112.551627][ T4646] erofs: Unknown parameter 'ãé' [ 113.312362][ T4288] Bluetooth: min 0 < 6 [ 113.617306][ T4658] atomic_op ffff88807296a198 conn xmit_atomic 0000000000000000 [ 113.693593][ T4655] loop2: detected capacity change from 0 to 1024 [ 114.283430][ T4655] hfsplus: failed to load root directory [ 115.365715][ T4288] Bluetooth: hci0: command 0x2021 tx timeout [ 116.100651][ T4668] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.109624][ T4668] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.200934][ T4361] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.055718][ T4288] Bluetooth: hci2: failed to read key size for handle 200 [ 117.063233][ T4288] Bluetooth: hci3: link tx timeout [ 117.074691][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.115067][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 120.207870][ T4696] xt_l2tp: v2 doesn't support IP mode [ 120.703318][ T4699] loop2: detected capacity change from 0 to 40427 [ 120.740057][ T4699] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 120.747463][ T4699] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.762206][ T4699] F2FS-fs (loop2): invalid crc value [ 120.770466][ T4699] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 120.806045][ T4699] F2FS-fs (loop2): Start checkpoint disabled! [ 120.833295][ T4701] loop1: detected capacity change from 0 to 2048 [ 120.851966][ T4701] UDF-fs: bad mount option "anchkr=00000000000000000007icb" or missing value [ 120.908044][ T4699] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.915327][ T4699] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 121.169474][ T4709] hub 8-0:1.0: USB hub found [ 121.175562][ T4709] hub 8-0:1.0: 1 port detected [ 121.777210][ T4629] kworker/u4:16: attempt to access beyond end of device [ 121.777210][ T4629] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.187188][ T4701] loop1: detected capacity change from 0 to 8192 [ 122.328990][ T4701] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.380320][ T4715] netlink: 23 bytes leftover after parsing attributes in process `syz.0.76'. [ 122.521489][ T4701] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 122.578248][ T4701] FAT-fs (loop1): Filesystem has been set read-only [ 122.935440][ T953] libceph: connect (1)[c::]:6789 error -101 [ 122.965576][ T953] libceph: mon0 (1)[c::]:6789 connect error [ 123.138577][ T4715] ceph: No mds server is up or the cluster is laggy [ 123.168227][ T1193] libceph: connect (1)[c::]:6789 error -101 [ 123.188752][ T1193] libceph: mon0 (1)[c::]:6789 connect error [ 123.469577][ T4271] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 123.623332][ T4728] loop4: detected capacity change from 0 to 136 [ 123.626330][ T1193] libceph: connect (1)[c::]:6789 error -101 [ 123.759590][ T4728] Attempt to read inode for relocated directory [ 124.447721][ T1193] libceph: mon0 (1)[c::]:6789 connect error [ 125.706421][ T4734] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 125.954722][ T4744] loop4: detected capacity change from 0 to 256 [ 125.979229][ T4734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.048195][ T4744] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 126.871698][ T4730] bond1: (slave geneve2): making interface the new active one [ 127.090806][ T4730] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 127.104025][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 128.245442][ T4757] xt_limit: Overflow, try lower: 324382443/0 [ 133.405189][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.411497][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.600571][ T4815] netlink: 'syz.4.101': attribute type 2 has an invalid length. [ 135.815382][ T4822] netlink: 52 bytes leftover after parsing attributes in process `syz.4.101'. [ 136.387584][ T4830] syz.4.101 uses obsolete (PF_INET,SOCK_PACKET) [ 136.791990][ T4825] loop3: detected capacity change from 0 to 4096 [ 139.191965][ T4855] loop2: detected capacity change from 0 to 512 [ 139.213555][ T4855] EXT4-fs: Ignoring removed bh option [ 139.236600][ T4855] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 139.313543][ T4855] EXT4-fs (loop2): 1 truncate cleaned up [ 139.357608][ T4855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.523443][ T4861] loop4: detected capacity change from 0 to 2048 [ 139.533704][ T4861] UDF-fs: bad mount option "anchkr=00000000000000000007icb" or missing value [ 139.999355][ T4865] IPVS: Error connecting to the multicast addr [ 140.537194][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 141.611688][ T4861] loop4: detected capacity change from 0 to 8192 [ 142.213201][ T4879] loop1: detected capacity change from 0 to 128 [ 143.835797][ T4879] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 144.125083][ T4879] qnx6: wrong signature (magic) in superblock #1. [ 144.131536][ T4879] qnx6: unable to read the first superblock [ 144.343758][ T4883] loop2: detected capacity change from 0 to 512 [ 144.477554][ T4883] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.589181][ T4883] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.117: corrupted xattr entries [ 144.676287][ T4883] EXT4-fs (loop2): Remounting filesystem read-only [ 144.763195][ T4883] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.405943][ T4883] EXT4-fs (loop2): 1 truncate cleaned up [ 145.424917][ T4883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 147.017520][ T4905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.121'. [ 147.071278][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 149.056291][ T4911] loop3: detected capacity change from 0 to 4096 [ 149.213330][ T4928] loop2: detected capacity change from 0 to 128 [ 149.298309][ T4928] FAT-fs (loop2): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 152.423073][ T4942] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 152.429886][ T4942] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.439355][ T4942] vhci_hcd vhci_hcd.0: Device attached [ 152.446456][ T4944] vhci_hcd: connection closed [ 152.452500][ T9] vhci_hcd: stop threads [ 152.505795][ T9] vhci_hcd: release socket [ 152.510277][ T9] vhci_hcd: disconnect device [ 152.528501][ T4951] loop1: detected capacity change from 0 to 256 [ 152.608959][ T4954] hub 8-0:1.0: USB hub found [ 152.614977][ T4954] hub 8-0:1.0: 1 port detected [ 153.395722][ T4951] exfat: Deprecated parameter 'utf8' [ 153.401179][ T4951] exfat: Deprecated parameter 'namecase' [ 153.473373][ T4951] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 157.331268][ T4986] device bond0 entered promiscuous mode [ 157.366953][ T4986] device bond_slave_0 entered promiscuous mode [ 157.373331][ T4986] device bond_slave_1 entered promiscuous mode [ 159.090409][ T5001] IPVS: Error connecting to the multicast addr [ 160.569949][ T5020] loop4: detected capacity change from 0 to 64 [ 161.601440][ T5027] netlink: 'syz.2.150': attribute type 2 has an invalid length. [ 161.739992][ T5030] netlink: 52 bytes leftover after parsing attributes in process `syz.2.150'. [ 162.577760][ T5041] loop1: detected capacity change from 0 to 512 [ 162.596844][ T5041] EXT4-fs: Ignoring removed bh option [ 162.612693][ T5041] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 162.964579][ T5041] EXT4-fs (loop1): 1 truncate cleaned up [ 163.038617][ T5041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.829416][ T5057] netlink: 23 bytes leftover after parsing attributes in process `syz.3.154'. [ 163.925975][ T22] libceph: connect (1)[c::]:6789 error -101 [ 163.932097][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 163.978888][ T5057] ceph: No mds server is up or the cluster is laggy [ 163.989454][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 164.153081][ T5066] loop1: detected capacity change from 0 to 512 [ 164.188707][ T5066] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.234926][ T5066] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 164.245201][ T41] libceph: connect (1)[c::]:6789 error -101 [ 164.259112][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 165.240930][ T5066] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 165.282037][ T5066] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 165.297950][ T5076] device bond0 entered promiscuous mode [ 165.303532][ T5076] device bond_slave_0 entered promiscuous mode [ 165.315106][ T5076] device bond_slave_1 entered promiscuous mode [ 165.320285][ T5066] System zones: 0-2, 18-18, 34-35 [ 165.329657][ T5066] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.369380][ T5077] IPVS: Error connecting to the multicast addr [ 165.951840][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 167.026512][ T5089] loop3: detected capacity change from 0 to 128 [ 167.369967][ T5089] FAT-fs (loop3): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 170.722849][ T5114] mmap: syz.1.164 (5114) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.473286][ T5129] loop1: detected capacity change from 0 to 512 [ 172.531063][ T5129] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 172.686551][ T5129] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 173.439106][ T5129] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.171: Invalid inode table block 1 in block_group 0 [ 173.496027][ T5136] device syzkaller0 entered promiscuous mode [ 173.532555][ T5129] EXT4-fs (loop1): get root inode failed [ 173.539722][ T5129] EXT4-fs (loop1): mount failed [ 173.572982][ T5136] tipc: Started in network mode [ 173.592849][ T5136] tipc: Node identity 1ef9a1798273, cluster identity 4711 [ 173.721500][ T5136] tipc: Enabled bearer , priority 0 [ 173.788613][ T5135] tipc: Resetting bearer [ 173.865370][ T5138] ubi0: attaching mtd0 [ 173.876795][ T5138] ubi0: scanning is finished [ 173.881450][ T5138] ubi0: empty MTD device detected [ 174.164273][ T5138] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 174.403968][ T5135] tipc: Disabling bearer [ 175.263311][ T4284] tipc: Node number set to 2626331001 [ 178.290086][ T5168] loop4: detected capacity change from 0 to 8 [ 178.717696][ T5165] SQUASHFS error: Failed to read block 0x4de: -5 [ 178.724653][ T5165] SQUASHFS error: Failed to read block 0x4de: -5 [ 178.735702][ T5165] SQUASHFS error: Failed to read block 0x4de: -5 [ 178.742361][ T5165] SQUASHFS error: Failed to read block 0x4de: -5 [ 178.811899][ T26] audit: type=1800 audit(1783704489.493:2): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.179" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 179.215352][ T5174] loop1: detected capacity change from 0 to 128 [ 179.334301][ T5174] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 179.347577][ T5174] hpfs: filesystem error: improperly stopped [ 179.353649][ T5174] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 179.361502][ T5174] hpfs: You really don't want any checks? You are crazy... [ 179.369858][ T5174] hpfs: hpfs_map_sector(): read error [ 179.375309][ T5174] hpfs: code page support is disabled [ 179.387459][ T5174] hpfs: hpfs_map_4sectors(): unaligned read [ 179.393938][ T5174] hpfs: hpfs_map_4sectors(): unaligned read [ 179.399969][ T5174] hpfs: filesystem error: unable to find root dir [ 179.875269][ T5176] loop2: detected capacity change from 0 to 256 [ 180.474915][ T4319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 180.716154][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 180.765256][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.838591][ T4319] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.968243][ T4319] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 181.267611][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.289175][ T4319] usb 4-1: Product: syz [ 181.426265][ T4319] usb 4-1: Manufacturer: syz [ 181.454891][ T4319] usb 4-1: SerialNumber: syz [ 181.834179][ T4319] usb 4-1: config 0 descriptor?? [ 182.178539][ T5195] loop1: detected capacity change from 0 to 1024 [ 182.334493][ T5195] hfsplus: cannot replace xattr [ 182.369451][ T5195] hfsplus: xattr searching failed [ 182.388006][ T5195] hfsplus: xattr searching failed [ 182.407120][ T5195] hfsplus: b-tree write err: -5, ino 3 [ 182.842421][ T4691] hfsplus: b-tree write err: -5, ino 3 [ 186.278246][ T4284] usb 4-1: USB disconnect, device number 2 [ 186.301668][ T5212] loop2: detected capacity change from 0 to 64 [ 186.474925][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 186.475122][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 186.481697][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 186.488151][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 186.965044][ T26] audit: type=1800 audit(1783704497.703:3): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.190" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 188.234322][ T5232] loop4: detected capacity change from 0 to 512 [ 188.323557][ T5232] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 188.372582][ T5232] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 188.471917][ T5232] EXT4-fs (loop4): 1 truncate cleaned up [ 188.507487][ T5232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.952914][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 194.163362][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.284997][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.249392][ T5302] tmpfs: Unknown parameter 'mp' [ 197.295349][ T5306] loop1: detected capacity change from 0 to 512 [ 197.407629][ T5306] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 197.417150][ T5306] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.426262][ T5306] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 199.014778][ T5315] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 201.503468][ T5314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.511454][ T5314] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.316339][ T5314] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 202.477738][ T5335] loop2: detected capacity change from 0 to 64 [ 203.170024][ T5314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.205297][ T5314] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 203.378180][ T5314] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 203.395052][ T5314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.425200][ T5314] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 203.514893][ T4275] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.589274][ T5314] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 203.607852][ T5314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.385139][ T5314] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.459963][ T5314] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 204.482106][ T5314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.508858][ T5314] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.531161][ T5314] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 204.540156][ T5342] loop2: detected capacity change from 0 to 512 [ 204.605084][ T5342] EXT4-fs: Ignoring removed bh option [ 204.680514][ T5342] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 204.778728][ T5342] EXT4-fs (loop2): 1 truncate cleaned up [ 204.790977][ T5342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 204.810141][ T5347] loop4: detected capacity change from 0 to 512 [ 204.867877][ T5347] EXT4-fs: Ignoring removed bh option [ 204.929407][ T5347] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 204.952015][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 204.991824][ T5347] EXT4-fs (loop4): 1 truncate cleaned up [ 205.049164][ T5347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 205.194953][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.729926][ T4275] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.730248][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 205.745227][ T4275] Bluetooth: hci4: command 0x0c1a tx timeout [ 205.767311][ T5353] loop2: detected capacity change from 0 to 512 [ 205.774431][ T5353] EXT4-fs: Ignoring removed bh option [ 205.807087][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 205.930103][ T5353] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 205.999216][ T5353] EXT4-fs (loop2): 1 truncate cleaned up [ 206.029881][ T5359] loop0: detected capacity change from 0 to 512 [ 206.044311][ T5353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 206.083081][ T5359] EXT4-fs: Ignoring removed bh option [ 206.237359][ T5359] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 206.554913][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.290020][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 207.301021][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 207.307740][ T5359] EXT4-fs (loop0): 1 truncate cleaned up [ 207.313414][ T5359] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 207.773409][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 207.800320][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 208.635031][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 208.749234][ T5382] loop1: detected capacity change from 0 to 128 [ 208.761599][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 208.772946][ T5382] FAT-fs (loop1): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 209.840814][ T5390] loop0: detected capacity change from 0 to 512 [ 211.014651][ T5390] EXT4-fs: Ignoring removed bh option [ 211.089836][ T5390] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 211.114904][ T4285] Bluetooth: hci3: command 0x0405 tx timeout [ 212.036909][ T5390] EXT4-fs (loop0): 1 truncate cleaned up [ 212.179459][ T5390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 212.861965][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 214.392853][ T5421] IPVS: Error connecting to the multicast addr [ 214.472552][ T5423] loop2: detected capacity change from 0 to 256 [ 214.511582][ T5423] exfat: Deprecated parameter 'utf8' [ 214.564985][ T5423] exfat: Deprecated parameter 'namecase' [ 214.626832][ T5423] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 217.260011][ T5443] loop3: detected capacity change from 0 to 32768 [ 217.404528][ T5443] XFS (loop3): Mounting V5 Filesystem [ 218.120094][ T5443] XFS (loop3): Ending clean mount [ 218.656569][ T5460] IPVS: Error connecting to the multicast addr [ 218.843402][ T5463] IPVS: Error connecting to the multicast addr [ 218.854430][ T4282] XFS (loop3): Unmounting Filesystem [ 219.006664][ T5466] hub 8-0:1.0: USB hub found [ 219.011979][ T5466] hub 8-0:1.0: 1 port detected [ 219.999376][ T5468] loop2: detected capacity change from 0 to 512 [ 220.026149][ T5468] EXT4-fs: Ignoring removed bh option [ 220.032711][ T5468] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 220.081723][ T5468] EXT4-fs (loop2): 1 truncate cleaned up [ 220.115448][ T5468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 220.124757][ T5471] IPVS: Error connecting to the multicast addr [ 220.338098][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 220.523240][ T5476] loop2: detected capacity change from 0 to 512 [ 220.530555][ T5476] EXT4-fs: Ignoring removed bh option [ 220.566983][ T5476] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 220.597598][ T5476] EXT4-fs (loop2): 1 truncate cleaned up [ 220.612801][ T5476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 221.561564][ T5486] loop3: detected capacity change from 0 to 4096 [ 222.039440][ T5495] ntfs3: loop3: failed to convert "0080" to cp869 [ 230.176389][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 230.338925][ T5548] IPVS: Error connecting to the multicast addr [ 231.588547][ T5551] loop3: detected capacity change from 0 to 4096 [ 236.146955][ T5578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.154456][ T5578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.160897][ T5578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.167529][ T5578] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.174004][ T5578] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.354917][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.663247][ T5599] loop0: detected capacity change from 0 to 512 [ 237.692796][ T5599] EXT4-fs: Ignoring removed bh option [ 238.336590][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.378170][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.378193][ T4275] Bluetooth: hci4: command 0x0c1a tx timeout [ 238.384188][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 238.437550][ T5599] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 238.594231][ T5599] EXT4-fs (loop0): 1 truncate cleaned up [ 238.616067][ T5599] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 238.750745][ T5607] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 238.842870][ T5616] input: syz0 as /devices/virtual/input/input7 [ 240.492045][ T5607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.629937][ T5608] bond1: (slave geneve2): making interface the new active one [ 240.669167][ T5608] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 240.717411][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 240.820653][ T5621] IPVS: Error connecting to the multicast addr [ 241.265777][ T5629] loop4: detected capacity change from 0 to 128 [ 242.111009][ T5629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 242.140239][ T5629] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.257976][ T26] audit: type=1804 audit(1783704553.023:4): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.279" name="/newroot/61/file0/file1" dev="loop4" ino=12 res=1 errno=0 [ 242.701066][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 244.235092][ T5643] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 244.451077][ T5642] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.499426][ T5642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.638392][ T5642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.660926][ T5642] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 245.375239][ T5642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.483446][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 246.555008][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.714881][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.720928][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 247.450714][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 247.883800][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 249.038159][ T5675] loop2: detected capacity change from 0 to 512 [ 249.182620][ T5675] EXT4-fs: Ignoring removed bh option [ 249.253923][ T5675] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 249.287331][ T5679] loop3: detected capacity change from 0 to 128 [ 249.534247][ T5675] EXT4-fs (loop2): 1 truncate cleaned up [ 249.589154][ T5679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 249.608657][ T5675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 249.724210][ T5679] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.218275][ T5675] IPVS: Error connecting to the multicast addr [ 250.257926][ T26] audit: type=1804 audit(1783704561.023:5): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.292" name="/newroot/50/file0/file1" dev="loop3" ino=12 res=1 errno=0 [ 250.600261][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 250.607541][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 252.742949][ T5711] loop4: detected capacity change from 0 to 32768 [ 253.831755][ T5722] loop3: detected capacity change from 0 to 136 [ 253.851515][ T5722] Attempt to read inode for relocated directory [ 254.732799][ T5724] loop0: detected capacity change from 0 to 512 [ 254.740287][ T5724] EXT4-fs: Ignoring removed bh option [ 254.748885][ T5724] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 254.758122][ T5711] XFS (loop4): Mounting V5 Filesystem [ 254.858335][ T5724] EXT4-fs (loop0): 1 truncate cleaned up [ 254.932482][ T5711] XFS (loop4): Ending clean mount [ 254.941139][ T5724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 255.706694][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.713019][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.013054][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 256.091344][ T4279] XFS (loop4): Unmounting Filesystem [ 257.134249][ T5746] loop3: detected capacity change from 0 to 512 [ 257.145225][ T5746] EXT4-fs: Ignoring removed bh option [ 257.154159][ T5746] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 257.769465][ T5746] EXT4-fs (loop3): 1 truncate cleaned up [ 257.796796][ T5746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 258.457053][ T5753] loop1: detected capacity change from 0 to 128 [ 258.751054][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 259.278704][ T5759] loop2: detected capacity change from 0 to 256 [ 259.308069][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 259.358381][ T5753] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.391819][ T5759] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 260.114091][ T5767] loop3: detected capacity change from 0 to 64 [ 260.421072][ T5773] input: syz0 as /devices/virtual/input/input8 [ 260.955437][ T26] audit: type=1804 audit(1783704571.723:6): pid=5781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.307" name="/newroot/69/file0/file1" dev="loop1" ino=12 res=1 errno=0 [ 261.048496][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 261.632758][ T5787] loop0: detected capacity change from 0 to 512 [ 261.640328][ T5787] EXT4-fs: Ignoring removed bh option [ 261.666998][ T5787] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 261.700647][ T5787] EXT4-fs (loop0): 1 truncate cleaned up [ 262.375556][ T5787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 262.946480][ T5795] device bond0 entered promiscuous mode [ 262.953420][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 262.963537][ T5795] device bond_slave_0 entered promiscuous mode [ 263.053153][ T5804] loop1: detected capacity change from 0 to 136 [ 263.068239][ T5804] Attempt to read inode for relocated directory [ 263.537988][ T5795] device bond_slave_1 entered promiscuous mode [ 264.747033][ T5811] loop2: detected capacity change from 0 to 512 [ 264.767321][ T5814] netlink: 23 bytes leftover after parsing attributes in process `syz.1.320'. [ 264.774514][ T5813] loop0: detected capacity change from 0 to 512 [ 264.792987][ T5811] EXT4-fs: Ignoring removed bh option [ 264.834030][ T5811] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 264.847983][ T5398] libceph: connect (1)[c::]:6789 error -101 [ 264.854154][ T5398] libceph: mon0 (1)[c::]:6789 connect error [ 264.872966][ T5813] EXT4-fs: Ignoring removed bh option [ 264.879812][ T5813] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 264.944051][ T5811] EXT4-fs (loop2): 1 truncate cleaned up [ 264.960655][ T5814] ceph: No mds server is up or the cluster is laggy [ 264.981944][ T5813] EXT4-fs (loop0): 1 truncate cleaned up [ 264.987786][ T5813] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 264.992126][ T5811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 265.209489][ T5827] loop3: detected capacity change from 0 to 512 [ 265.298404][ T5398] libceph: connect (1)[c::]:6789 error -101 [ 265.306205][ T5398] libceph: mon0 (1)[c::]:6789 connect error [ 265.331033][ T5828] IPVS: Error connecting to the multicast addr [ 265.866413][ T22] libceph: connect (1)[c::]:6789 error -101 [ 265.867121][ T5827] EXT4-fs: Ignoring removed bh option [ 265.872427][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 265.887375][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 265.889028][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 266.008247][ T5827] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 266.080286][ T5833] loop0: detected capacity change from 0 to 128 [ 266.118741][ T5827] EXT4-fs (loop3): 1 truncate cleaned up [ 266.135854][ T5827] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 266.208651][ T5833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 267.345593][ T5833] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.659848][ T5846] IPVS: Error connecting to the multicast addr [ 268.050146][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 268.060583][ T26] audit: type=1804 audit(1783704578.823:7): pid=5833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.324" name="/newroot/55/file0/file1" dev="loop0" ino=12 res=1 errno=0 [ 268.167164][ T5850] loop2: detected capacity change from 0 to 512 [ 268.228705][ T5850] EXT4-fs: Ignoring removed bh option [ 269.223793][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 269.284745][ T5850] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 269.442800][ T5850] EXT4-fs (loop2): 1 truncate cleaned up [ 269.476908][ T5850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 270.158031][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 271.242440][ T5877] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 273.406081][ T5893] loop1: detected capacity change from 0 to 512 [ 273.430577][ T5893] EXT4-fs: Ignoring removed bh option [ 273.455576][ T5893] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 273.545425][ T5893] EXT4-fs (loop1): 1 truncate cleaned up [ 273.551090][ T5893] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 273.750998][ T5898] loop0: detected capacity change from 0 to 512 [ 274.378384][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 274.480174][ T5904] loop4: detected capacity change from 0 to 128 [ 274.496018][ T5904] FAT-fs (loop4): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 275.177334][ T5898] EXT4-fs: Ignoring removed bh option [ 275.273857][ T5898] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 275.411129][ T5898] EXT4-fs (loop0): 1 truncate cleaned up [ 275.451767][ T5898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 278.024340][ T5925] NILFS (nullb0): couldn't find nilfs on the device [ 278.346791][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 280.778724][ T5954] loop2: detected capacity change from 0 to 512 [ 280.816462][ T5954] EXT4-fs: Ignoring removed bh option [ 280.844697][ T5954] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 280.929152][ T5954] EXT4-fs (loop2): 1 truncate cleaned up [ 280.939007][ T5954] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 281.237098][ T5960] IPVS: Error connecting to the multicast addr [ 281.717705][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 281.973950][ T5969] loop3: detected capacity change from 0 to 512 [ 281.995342][ T5969] EXT4-fs: Ignoring removed bh option [ 282.004304][ T5969] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 282.029281][ T5967] loop4: detected capacity change from 0 to 2048 [ 283.081059][ T5969] EXT4-fs (loop3): 1 truncate cleaned up [ 283.088276][ T5967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 283.097579][ T5967] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.126202][ T5969] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 284.359497][ T5982] loop1: detected capacity change from 0 to 512 [ 284.366764][ T5982] EXT4-fs: Ignoring removed bh option [ 284.397673][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 284.403690][ T5982] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 284.504379][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 284.511571][ T5982] EXT4-fs (loop1): 1 truncate cleaned up [ 284.517875][ T5982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 285.506683][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 286.906117][ T5997] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 286.920561][ T5997] Error parsing options; rc = [-22] [ 288.028290][ T6008] xt_HMARK: spi-set and port-set can't be combined [ 290.207824][ T6025] ip6t_rpfilter: unknown options [ 291.560318][ T6031] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.366'. [ 291.764572][ T6045] loop3: detected capacity change from 0 to 128 [ 291.873213][ T6045] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 291.929724][ T6045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.834500][ T6060] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 293.856187][ T6060] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 293.872156][ T6060] overlayfs: missing 'workdir' [ 294.459129][ T6031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.461642][ T6038] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 295.959206][ T6081] loop4: detected capacity change from 0 to 8 [ 296.090803][ T6081] SQUASHFS error: zlib decompression failed, data probably corrupt [ 296.101004][ T6081] SQUASHFS error: Failed to read block 0x9b: -5 [ 296.107392][ T6081] SQUASHFS error: Unable to read metadata cache entry [99] [ 296.114697][ T6081] SQUASHFS error: Unable to read inode 0x127 [ 296.823998][ T4363] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.265627][ T6095] input: syz1 as /devices/virtual/input/input10 [ 298.963488][ T6113] loop0: detected capacity change from 0 to 128 [ 299.168350][ T6113] FAT-fs (loop0): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 300.941897][ T6138] loop2: detected capacity change from 0 to 512 [ 301.018537][ T6138] EXT4-fs: Ignoring removed bh option [ 301.195786][ T6138] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 301.553164][ T6138] EXT4-fs (loop2): 1 truncate cleaned up [ 302.134931][ T6138] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 303.383800][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 306.407304][ T6160] input: syz0 as /devices/virtual/input/input11 [ 306.882503][ T6163] xt_limit: Overflow, try lower: 324382443/0 [ 307.134223][ T6170] loop2: detected capacity change from 0 to 512 [ 307.144072][ T6170] EXT4-fs: Ignoring removed bh option [ 307.162716][ T6170] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 307.903762][ T6170] EXT4-fs (loop2): 1 truncate cleaned up [ 307.913904][ T6170] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 309.078463][ T6187] IPVS: Error connecting to the multicast addr [ 309.409729][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 309.429520][ T6188] ================================================================== [ 309.437613][ T6188] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 309.444826][ T6188] Read of size 8 at addr ffff888147fa4e18 by task syz.1.392/6188 [ 309.452547][ T6188] [ 309.454885][ T6188] CPU: 1 PID: 6188 Comm: syz.1.392 Not tainted syzkaller #0 [ 309.462170][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.472232][ T6188] Call Trace: [ 309.475517][ T6188] [ 309.478449][ T6188] dump_stack_lvl+0x188/0x24e [ 309.483140][ T6188] ? read_lock_is_recursive+0x10/0x10 [ 309.488531][ T6188] ? show_regs_print_info+0x12/0x12 [ 309.493748][ T6188] ? load_image+0x410/0x410 [ 309.498260][ T6188] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 309.503733][ T6188] ? __virt_addr_valid+0x188/0x540 [ 309.508858][ T6188] ? __virt_addr_valid+0x467/0x540 [ 309.513977][ T6188] ? dvb_device_open+0xc5/0x360 [ 309.518839][ T6188] print_report+0xa8/0x210 [ 309.523265][ T6188] kasan_report+0x10b/0x140 [ 309.527779][ T6188] ? dvb_device_open+0xc5/0x360 [ 309.532645][ T6188] dvb_device_open+0xc5/0x360 [ 309.537334][ T6188] chrdev_open+0x585/0x5f0 [ 309.541761][ T6188] ? cd_forget+0x160/0x160 [ 309.546190][ T6188] ? fsnotify_perm+0x39b/0x550 [ 309.550963][ T6188] ? cd_forget+0x160/0x160 [ 309.555400][ T6188] do_dentry_open+0x7dd/0x10b0 [ 309.560188][ T6188] path_openat+0x2674/0x2f10 [ 309.564796][ T6188] ? finish_task_switch+0x262/0x8e0 [ 309.570009][ T6188] ? lockdep_hardirqs_on+0x94/0x140 [ 309.575218][ T6188] ? __schedule+0x1087/0x4030 [ 309.579907][ T6188] ? do_filp_open+0x420/0x420 [ 309.584599][ T6188] do_filp_open+0x1ee/0x420 [ 309.589118][ T6188] ? vfs_tmpfile+0x470/0x470 [ 309.593722][ T6188] ? _raw_spin_unlock+0x36/0x40 [ 309.598582][ T6188] ? alloc_fd+0x590/0x640 [ 309.602931][ T6188] do_sys_openat2+0x14b/0x4f0 [ 309.607626][ T6188] ? do_sys_open+0xe0/0xe0 [ 309.612056][ T6188] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 309.618050][ T6188] ? lock_chain_count+0x20/0x20 [ 309.622910][ T6188] __x64_sys_openat+0x135/0x160 [ 309.627769][ T6188] do_syscall_64+0x4c/0xa0 [ 309.632198][ T6188] ? clear_bhb_loop+0x60/0xb0 [ 309.636882][ T6188] ? clear_bhb_loop+0x60/0xb0 [ 309.641564][ T6188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.647475][ T6188] RIP: 0033:0x7f134815e68e [ 309.651899][ T6188] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 309.671519][ T6188] RSP: 002b:00007f13490a5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 309.679943][ T6188] RAX: ffffffffffffffda RBX: 00007f13490a66c0 RCX: 00007f134815e68e [ 309.687921][ T6188] RDX: 0000000000000002 RSI: 00007f13490a5c00 RDI: ffffffffffffff9c [ 309.695899][ T6188] RBP: 00007f13490a5c00 R08: 0000000000000000 R09: 0000000000000000 [ 309.703876][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 309.711857][ T6188] R13: 00007f1348426218 R14: 00007f1348426180 R15: 00007fff7cbe0b48 [ 309.719844][ T6188] [ 309.722862][ T6188] [ 309.725182][ T6188] Allocated by task 6158: [ 309.729503][ T6188] kasan_set_track+0x4b/0x70 [ 309.734099][ T6188] __kasan_kmalloc+0x8e/0xa0 [ 309.738697][ T6188] __kmalloc+0xb3/0x240 [ 309.742856][ T6188] snd_midi_event_new+0x91/0x1e0 [ 309.747803][ T6188] snd_virmidi_output_open+0xee/0x510 [ 309.753181][ T6188] open_substream+0x32c/0x6c0 [ 309.757861][ T6188] rawmidi_open_priv+0xc4/0x620 [ 309.762717][ T6188] snd_rawmidi_open+0x45e/0xae0 [ 309.767569][ T6188] chrdev_open+0x585/0x5f0 [ 309.771988][ T6188] do_dentry_open+0x7dd/0x10b0 [ 309.776756][ T6188] path_openat+0x2674/0x2f10 [ 309.781351][ T6188] do_filp_open+0x1ee/0x420 [ 309.785857][ T6188] do_sys_openat2+0x14b/0x4f0 [ 309.790537][ T6188] __x64_sys_openat+0x135/0x160 [ 309.795392][ T6188] do_syscall_64+0x4c/0xa0 [ 309.799810][ T6188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.805704][ T6188] [ 309.808025][ T6188] Freed by task 6158: [ 309.811998][ T6188] kasan_set_track+0x4b/0x70 [ 309.816593][ T6188] kasan_save_free_info+0x27/0x40 [ 309.821617][ T6188] ____kasan_slab_free+0x126/0x1f0 [ 309.826735][ T6188] slab_free_freelist_hook+0x133/0x1b0 [ 309.832200][ T6188] __kmem_cache_free+0xb6/0x200 [ 309.837051][ T6188] snd_midi_event_free+0x3c/0x50 [ 309.841991][ T6188] snd_virmidi_output_close+0x9f/0x100 [ 309.847457][ T6188] close_substream+0x43b/0x750 [ 309.852224][ T6188] rawmidi_release_priv+0xe6/0x170 [ 309.857341][ T6188] snd_rawmidi_release+0x5a/0xc0 [ 309.862284][ T6188] __fput+0x20a/0x8b0 [ 309.866303][ T6188] task_work_run+0x1d0/0x260 [ 309.870900][ T6188] get_signal+0x118d/0x1340 [ 309.875413][ T6188] arch_do_signal_or_restart+0xc4/0x1310 [ 309.881050][ T6188] exit_to_user_mode_loop+0x70/0x110 [ 309.886342][ T6188] exit_to_user_mode_prepare+0xee/0x180 [ 309.891890][ T6188] syscall_exit_to_user_mode+0x16/0x40 [ 309.897348][ T6188] do_syscall_64+0x58/0xa0 [ 309.901778][ T6188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.907678][ T6188] [ 309.909999][ T6188] The buggy address belongs to the object at ffff888147fa4e00 [ 309.909999][ T6188] which belongs to the cache kmalloc-256 of size 256 [ 309.924049][ T6188] The buggy address is located 24 bytes inside of [ 309.924049][ T6188] 256-byte region [ffff888147fa4e00, ffff888147fa4f00) [ 309.937238][ T6188] [ 309.939566][ T6188] The buggy address belongs to the physical page: [ 309.945982][ T6188] page:ffffea00051fe900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x147fa4 [ 309.956215][ T6188] head:ffffea00051fe900 order:1 compound_mapcount:0 compound_pincount:0 [ 309.964538][ T6188] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 309.972613][ T6188] raw: 057ff00000010200 ffffea0001f81f00 dead000000000003 ffff888017441b40 [ 309.981196][ T6188] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 309.989775][ T6188] page dumped because: kasan: bad access detected [ 309.996193][ T6188] page_owner tracks the page as allocated [ 310.001902][ T6188] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12010949406, free_ts 0 [ 310.021612][ T6188] post_alloc_hook+0x173/0x1a0 [ 310.026398][ T6188] get_page_from_freelist+0x206b/0x2180 [ 310.031948][ T6188] __alloc_pages+0x1ec/0x4f0 [ 310.036546][ T6188] alloc_page_interleave+0x24/0x1e0 [ 310.041758][ T6188] alloc_slab_page+0x5d/0x180 [ 310.046437][ T6188] new_slab+0x87/0x2d0 [ 310.050511][ T6188] ___slab_alloc+0xbc5/0x1240 [ 310.055190][ T6188] __kmem_cache_alloc_node+0x126/0x270 [ 310.060650][ T6188] kmalloc_trace+0x26/0xe0 [ 310.065073][ T6188] bus_add_driver+0xdc/0x5d0 [ 310.069670][ T6188] driver_register+0x32d/0x430 [ 310.074433][ T6188] usb_register_driver+0x201/0x3c0 [ 310.079547][ T6188] do_one_initcall+0x257/0x800 [ 310.084318][ T6188] do_initcall_level+0x13d/0x1ed [ 310.089257][ T6188] do_initcalls+0x4b/0x8a [ 310.093590][ T6188] kernel_init_freeable+0x401/0x5ab [ 310.098800][ T6188] page_owner free stack trace missing [ 310.104168][ T6188] [ 310.106492][ T6188] Memory state around the buggy address: [ 310.112119][ T6188] ffff888147fa4d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 310.120187][ T6188] ffff888147fa4d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 310.128253][ T6188] >ffff888147fa4e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 310.136314][ T6188] ^ [ 310.141158][ T6188] ffff888147fa4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 310.149217][ T6188] ffff888147fa4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 310.157275][ T6188] ================================================================== [ 310.199336][ T6188] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 310.206555][ T6188] CPU: 1 PID: 6188 Comm: syz.1.392 Not tainted syzkaller #0 [ 310.213844][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.223897][ T6188] Call Trace: [ 310.227176][ T6188] [ 310.230108][ T6188] dump_stack_lvl+0x188/0x24e [ 310.234792][ T6188] ? memcpy+0x3c/0x60 [ 310.238779][ T6188] ? show_regs_print_info+0x12/0x12 [ 310.243984][ T6188] ? load_image+0x410/0x410 [ 310.248496][ T6188] panic+0x2d3/0x710 [ 310.252392][ T6188] ? bpf_jit_dump+0xd0/0xd0 [ 310.256897][ T6188] ? check_panic_on_warn+0x6c/0xa0 [ 310.262015][ T6188] check_panic_on_warn+0x80/0xa0 [ 310.266964][ T6188] ? dvb_device_open+0xc5/0x360 [ 310.271817][ T6188] end_report+0x66/0x110 [ 310.276074][ T6188] kasan_report+0x118/0x140 [ 310.280586][ T6188] ? dvb_device_open+0xc5/0x360 [ 310.285448][ T6188] dvb_device_open+0xc5/0x360 [ 310.290141][ T6188] chrdev_open+0x585/0x5f0 [ 310.294564][ T6188] ? cd_forget+0x160/0x160 [ 310.298990][ T6188] ? fsnotify_perm+0x39b/0x550 [ 310.303759][ T6188] ? cd_forget+0x160/0x160 [ 310.308179][ T6188] do_dentry_open+0x7dd/0x10b0 [ 310.312954][ T6188] path_openat+0x2674/0x2f10 [ 310.317552][ T6188] ? finish_task_switch+0x262/0x8e0 [ 310.322753][ T6188] ? lockdep_hardirqs_on+0x94/0x140 [ 310.327955][ T6188] ? __schedule+0x1087/0x4030 [ 310.332636][ T6188] ? do_filp_open+0x420/0x420 [ 310.337321][ T6188] do_filp_open+0x1ee/0x420 [ 310.341835][ T6188] ? vfs_tmpfile+0x470/0x470 [ 310.346436][ T6188] ? _raw_spin_unlock+0x36/0x40 [ 310.351287][ T6188] ? alloc_fd+0x590/0x640 [ 310.355627][ T6188] do_sys_openat2+0x14b/0x4f0 [ 310.360312][ T6188] ? do_sys_open+0xe0/0xe0 [ 310.364733][ T6188] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 310.370719][ T6188] ? lock_chain_count+0x20/0x20 [ 310.375576][ T6188] __x64_sys_openat+0x135/0x160 [ 310.380431][ T6188] do_syscall_64+0x4c/0xa0 [ 310.384857][ T6188] ? clear_bhb_loop+0x60/0xb0 [ 310.389542][ T6188] ? clear_bhb_loop+0x60/0xb0 [ 310.394227][ T6188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.400123][ T6188] RIP: 0033:0x7f134815e68e [ 310.404540][ T6188] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 310.424151][ T6188] RSP: 002b:00007f13490a5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 310.432569][ T6188] RAX: ffffffffffffffda RBX: 00007f13490a66c0 RCX: 00007f134815e68e [ 310.440542][ T6188] RDX: 0000000000000002 RSI: 00007f13490a5c00 RDI: ffffffffffffff9c [ 310.448516][ T6188] RBP: 00007f13490a5c00 R08: 0000000000000000 R09: 0000000000000000 [ 310.456485][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 310.464453][ T6188] R13: 00007f1348426218 R14: 00007f1348426180 R15: 00007fff7cbe0b48 [ 310.472435][ T6188] [ 310.475707][ T6188] Kernel Offset: disabled [ 310.480022][ T6188] Rebooting in 86400 seconds..