last executing test programs: 18.175900224s ago: executing program 4 (id=267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x12) 17.583890186s ago: executing program 4 (id=269): setresuid(0xee01, 0xee00, 0x0) r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) 17.372009374s ago: executing program 4 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x5c, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 16.873222467s ago: executing program 4 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) 16.736231979s ago: executing program 4 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x4000010) 16.531950497s ago: executing program 4 (id=273): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) get_robust_list(r1, &(0x7f0000000680)=&(0x7f0000000640)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)}}, &(0x7f00000006c0)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0x2, 0x3fff}, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) get_robust_list(r1, &(0x7f00000004c0)=&(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f0000000340)}, &(0x7f0000000500)=0xc) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 15.503927396s ago: executing program 1 (id=275): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) read(0xffffffffffffffff, 0x0, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4c0c8) tkill(r5, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 11.549182109s ago: executing program 1 (id=278): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea6, 0x0}) 11.408956441s ago: executing program 1 (id=280): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0x6, 0x9, 0x1, 0x7, 0x5, 0xffffffffffffffff}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$packet(0x11, 0x2, 0x300) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000080)={0x1, "7bc7b0eb07939da1ee8efc70c96ced7db5515f1f455fd01ec5750310cb20fa5e"}) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) 10.144612011s ago: executing program 1 (id=286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 9.777185693s ago: executing program 1 (id=287): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xfffffffeffe) 5.313723359s ago: executing program 1 (id=292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000540)=""/145, 0x91}], &(0x7f0000000640)=[0x7fffffffffffffff], 0x2}, 0x20) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getspdinfo={0x14, 0x25, 0x800, 0x70bd26, 0x25dfdbfe, 0x4, ["", "", ""]}, 0x14}}, 0x20004010) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x3a, 0x9, 0x72bd27, 0x2, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000001c0)=0x2) 5.241134056s ago: executing program 3 (id=293): syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r2, 0x4b65, 0x75) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x1, 0x8037, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x38, 0x18, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast2, @local, {[@noop]}}}}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc84fc84032e27209}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24010000120001002abd7000fddbdf25180300024e224e20fcffffff06000000010000000cc9000000000000030000000000010000000100", @ANYRES32=r3, @ANYRESOCT=r0], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000080)=0xfb9fa3e5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff}, {0xfff1}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x287b, 0xa}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0xffffffff}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c000}, 0x24040084) socket$packet(0x11, 0x2, 0x300) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) setfsuid(0x0) syz_io_uring_setup(0x10b, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2a) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xd9000}, 0x1, 0x2}) socket(0xa, 0x3, 0x3a) 5.107911037s ago: executing program 3 (id=295): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000200)) 4.713267132s ago: executing program 3 (id=300): socket$rxrpc(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket(0x40000000015, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0) 4.413229557s ago: executing program 3 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) memfd_create(0x0, 0x0) unshare(0x22020600) chdir(&(0x7f0000000080)='./file1\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4000, 0x0) 4.257647491s ago: executing program 0 (id=304): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x50) 4.193740666s ago: executing program 2 (id=305): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x188, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0x158, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x8801) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 4.081251816s ago: executing program 0 (id=306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) 4.080814366s ago: executing program 3 (id=307): socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x1, &(0x7f0000000100)=[{0x4, 0xc, 0x0, 0xfff}]}) io_uring_enter(r3, 0x4e14, 0x913a, 0x41, 0x0, 0x0) 3.882204424s ago: executing program 0 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.825527852s ago: executing program 3 (id=309): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r6 = dup(r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r6, r4, 0x0, 0x40008) 1.665340816s ago: executing program 2 (id=310): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 1.326571165s ago: executing program 2 (id=311): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9, 0x2}, {0xc}}}}, 0xf) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.251535482s ago: executing program 32 (id=273): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) get_robust_list(r1, &(0x7f0000000680)=&(0x7f0000000640)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)}}, &(0x7f00000006c0)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0x2, 0x3fff}, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) get_robust_list(r1, &(0x7f00000004c0)=&(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f0000000340)}, &(0x7f0000000500)=0xc) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 1.228180324s ago: executing program 0 (id=313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x8000000000000000], 0x10000, 0x216}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xc000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x0, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfc, 0x12}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0x0, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x10, 0x4, 0x2}, {0x80a0000, 0x6000, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x2}, {0xffff1000, 0xeeee0000, 0x0, 0x2, 0x80, 0x1, 0x2, 0x0, 0x15, 0x50, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x3, 0x0, 0xef, 0x8}, {0x2, 0x25000, 0xc, 0x0, 0x0, 0x7, 0x6, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0xc, 0xf801, 0x0, [0x80000001, 0x6, 0xffffffffffffffff, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.137268232s ago: executing program 2 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x2380, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000040)={0x4000000000000026}) 979.166326ms ago: executing program 0 (id=315): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x6, 0xf40, 0x0, 0x0, 0xb, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0xff, 0x7, 0x6, 0x4, 0x5, 0x1, 0x8, 0x6, 0x4000009, 0x8e, 0x0, 0x3, 0x7, 0xa, 0x5, 0x1, 0x52, 0xc, 0x8, 0x8400002, 0x2]}) 978.928465ms ago: executing program 2 (id=316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @private=0xa010101, @empty}, {0x4e20, 0x880b, 0x8}}}}}}, 0x2e) 822.139299ms ago: executing program 0 (id=317): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) epoll_create(0xb3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_format(r1, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000100)) epoll_create(0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 0s ago: executing program 2 (id=318): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x6, 0x3, 0x8, 0x5}, {0x5, 0xf7, 0x2, 0x4}, {0xc0, 0x0, 0xc5, 0x8}]}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8003, 0x4, 0x886}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2, 0x0) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x1}, 0x4) write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r3, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000003c0), 0x4) sched_setattr(r2, &(0x7f0000000380)={0x38, 0x6, 0x10000010, 0x2, 0x80, 0xdc, 0x4, 0xd517, 0x1, 0x80}, 0x0) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x100, 0x3}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40001018, r0, 0x0) r5 = syz_io_uring_setup(0x26503, &(0x7f0000000500)={0x0, 0x47a8, 0x0, 0x1, 0xc0}, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce, 0x0, r5}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@xdp={0x2c, 0x2, 0x0, 0x3f}, 0x80, 0x0}, 0x0, 0x80}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.215' (ED25519) to the list of known hosts. syzkaller login: [ 61.727465][ T4172] cgroup: Unknown subsys name 'net' [ 61.877697][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.367462][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.607105][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.648699][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.747564][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 65.787437][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.861093][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.869498][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.878767][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.891034][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.898467][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.906714][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.914999][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.924316][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.933112][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.944319][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.951476][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.959647][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.971226][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.033931][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.041211][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.049449][ T4182] device bridge_slave_0 entered promiscuous mode [ 66.059454][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.083271][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.092911][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.100006][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.108196][ T4182] device bridge_slave_1 entered promiscuous mode [ 66.117155][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.141796][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.169347][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.177071][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.185758][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.219138][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.226450][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.235018][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.252061][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.263737][ T4187] team0: Port device team_slave_0 added [ 66.270964][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.302139][ T4189] team0: Port device team_slave_0 added [ 66.318667][ T4187] team0: Port device team_slave_1 added [ 66.342004][ T4189] team0: Port device team_slave_1 added [ 66.349394][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.369066][ T4182] team0: Port device team_slave_0 added [ 66.392286][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.410258][ T4182] team0: Port device team_slave_1 added [ 66.416620][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.424081][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.432376][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.455897][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.462993][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.489709][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.503255][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.510236][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.536253][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.554638][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.561973][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.570110][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.577979][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.585342][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.611918][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.653928][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.660923][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.687256][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.700848][ T4191] team0: Port device team_slave_0 added [ 66.710137][ T4191] team0: Port device team_slave_1 added [ 66.716658][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.723976][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.750176][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.802750][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.809732][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.836112][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.853830][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.872698][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.879685][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.905907][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.918588][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.925733][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.952650][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.969235][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.990638][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.997693][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.066855][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.074051][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.080678][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.088995][ T4189] Cannot create hsr debugfs directory [ 67.116809][ T4182] device hsr_slave_0 entered promiscuous mode [ 67.123975][ T4182] device hsr_slave_1 entered promiscuous mode [ 67.130653][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.138450][ T4182] Cannot create hsr debugfs directory [ 67.146589][ T4192] team0: Port device team_slave_0 added [ 67.175137][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.182209][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.188828][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.200146][ T4191] Cannot create hsr debugfs directory [ 67.208587][ T4192] team0: Port device team_slave_1 added [ 67.215195][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 67.291865][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 67.301402][ T4196] Bluetooth: hci2: command 0x0409 tx timeout [ 67.307645][ T4196] Bluetooth: hci1: command 0x0409 tx timeout [ 67.332657][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.339677][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.365916][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.372268][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 67.390641][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.397890][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.424257][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.572240][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.578997][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.585862][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.594044][ T4192] Cannot create hsr debugfs directory [ 67.689804][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.710592][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.720422][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.730592][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.762662][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.779138][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.800243][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.819674][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.864908][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.896510][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.918066][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.929735][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.974983][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.011911][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.031217][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.043771][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.057579][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.117246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.127585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.139201][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.154868][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.163387][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.173923][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.182913][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.193636][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.203824][ T1630] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.211190][ T1630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.226228][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.235822][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.245817][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.254728][ T1630] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.261858][ T1630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.285953][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.298660][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.307557][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.316438][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.330827][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.343564][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.373511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.383627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.394136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.403434][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.410516][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.418454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.429153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.438524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.447633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.458542][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.465811][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.474019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.482945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.491698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.500746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.509758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.518998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.527485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.546966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.562210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.570683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.589539][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.602526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.614457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.628902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.643143][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.652336][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.675045][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.699992][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.714452][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.737434][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.747000][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.757563][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.767211][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.802269][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.818198][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.828903][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.846434][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.873700][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.881408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.890059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.914412][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.921564][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.963469][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.983024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.996931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.006114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.015918][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.023053][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.032674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.040421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.049728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.060090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.069212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.078727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.087903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.102283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.112002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.120503][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.127640][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.167620][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.179920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.189140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.200750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.210406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.219034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.227336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.236992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.245929][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.253161][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.262882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.273637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.291737][ T4253] Bluetooth: hci0: command 0x041b tx timeout [ 69.304171][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.327561][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.344650][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.356163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.367404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.375974][ T4253] Bluetooth: hci1: command 0x041b tx timeout [ 69.382361][ T4253] Bluetooth: hci2: command 0x041b tx timeout [ 69.389400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.397521][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 69.405590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.414824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.422450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.429893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.438554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.447335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.455148][ T4253] Bluetooth: hci4: command 0x041b tx timeout [ 69.470974][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.489461][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.499232][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.509011][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.520538][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.529806][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.541149][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.550867][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.587898][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.606655][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.636032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.648007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.659628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.669300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.678539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.689090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.698078][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.705206][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.713610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.722400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.730699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.739654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.748478][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.755631][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.763911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.810281][ T4182] device veth0_vlan entered promiscuous mode [ 69.847353][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.862235][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.898502][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.908256][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.921579][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.943693][ T4187] device veth0_vlan entered promiscuous mode [ 69.958836][ T4187] device veth1_vlan entered promiscuous mode [ 69.969522][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.981006][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.993184][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.006851][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.019734][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.028676][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.039271][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.049101][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.058084][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.068531][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.088534][ T4182] device veth1_vlan entered promiscuous mode [ 70.113260][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.125692][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.138878][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.147603][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.156154][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.164982][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.175807][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.185767][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.194773][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.203352][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.210753][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.218698][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.233287][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.259770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.269308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.278865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.297623][ T4187] device veth0_macvtap entered promiscuous mode [ 70.321905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.336820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.349636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.376568][ T4187] device veth1_macvtap entered promiscuous mode [ 70.395420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.407813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.417520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.456780][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.467080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.478044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.487106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.497146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.506429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.515721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.524871][ T4182] device veth0_macvtap entered promiscuous mode [ 70.534918][ T4191] device veth0_vlan entered promiscuous mode [ 70.551030][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.566902][ T4182] device veth1_macvtap entered promiscuous mode [ 70.577996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.586493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.595425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.604374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.619544][ T4191] device veth1_vlan entered promiscuous mode [ 70.644316][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.656916][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.669111][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.684866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.693885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.702564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.710044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.717888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.728746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.744837][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.753602][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.771566][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.784065][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.796924][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.821416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.830209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.848315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.857798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.873089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.884902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.894544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.903900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.915347][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.925022][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.933972][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.943109][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.964184][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.974421][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.983491][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.992636][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.004196][ T4191] device veth0_macvtap entered promiscuous mode [ 71.026867][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.042211][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.050681][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.072607][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.080498][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.092661][ T4189] device veth0_vlan entered promiscuous mode [ 71.100916][ T4191] device veth1_macvtap entered promiscuous mode [ 71.158816][ T4189] device veth1_vlan entered promiscuous mode [ 71.233596][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.254075][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.264818][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.275575][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.288930][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.301587][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.308207][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.357672][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.367423][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.373135][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 71.385837][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.396050][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.412785][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.423800][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.439535][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.440218][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.453850][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 71.464316][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 71.470436][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 71.476528][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.481206][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.491204][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.505066][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.516353][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.527201][ T4189] device veth0_macvtap entered promiscuous mode [ 71.534127][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 71.548374][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.559263][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.567791][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.578036][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.589856][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.599622][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.608880][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.618583][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.641946][ T4189] device veth1_macvtap entered promiscuous mode [ 71.664365][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.674474][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.686671][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.708288][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.720771][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.744679][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.766475][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.783677][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.796375][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.807813][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.817900][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.828485][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.840772][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.856926][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.865868][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.893931][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.903800][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.913897][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.926167][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.938138][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.948283][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.959473][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.969694][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.980437][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.992417][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.010110][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.021733][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.030365][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.034291][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.054180][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.069354][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.078656][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.100784][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.115342][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.149769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.168955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.186749][ T4192] device veth0_vlan entered promiscuous mode [ 72.211643][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.220159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.232793][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.240573][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.268864][ T4192] device veth1_vlan entered promiscuous mode [ 72.296593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.306327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.425751][ T4299] loop1: detected capacity change from 0 to 2048 [ 72.435042][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.450955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.462001][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.478953][ T4298] loop0: detected capacity change from 0 to 1024 [ 72.493815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.507681][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.521998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.540605][ T4192] device veth0_macvtap entered promiscuous mode [ 72.560237][ T4298] EXT4-fs (loop0): inline encryption not supported [ 72.582802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.602453][ T4298] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 72.637876][ T4298] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 72.670027][ T4192] device veth1_macvtap entered promiscuous mode [ 72.695161][ T4298] EXT4-fs (loop0): can't mount with commit=9, fs mounted w/o journal [ 72.967970][ T4296] loop1: detected capacity change from 0 to 256 [ 72.976318][ T4296] exfat: Deprecated parameter 'namecase' [ 73.014243][ T4296] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 73.239554][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.291492][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.311473][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.325080][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.337912][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.348613][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.358530][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.374113][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.389416][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.399194][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.411074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.421176][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.429949][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.441567][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.452190][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 73.472067][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.491724][ T4279] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.501871][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.513632][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.524346][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.532376][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 73.539773][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.542456][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 73.551123][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.567131][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.579048][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.590430][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.598526][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 73.604933][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.615911][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.627382][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 73.633669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.673371][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.696832][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.709805][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.723027][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.737424][ T4279] usb 3-1: Using ep0 maxpacket: 8 [ 73.781580][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.801430][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.857305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.871860][ T4279] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 143 [ 73.899740][ T4279] usb 3-1: can't read configurations, error -22 [ 73.968810][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.998465][ T4318] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 74.000975][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.045980][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.061545][ T4279] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.065270][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.087984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.131879][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.175068][ T4309] loop0: detected capacity change from 0 to 32768 [ 74.197412][ T4309] ======================================================= [ 74.197412][ T4309] WARNING: The mand mount option has been deprecated and [ 74.197412][ T4309] and is ignored by this kernel. Remove the mand [ 74.197412][ T4309] option from the mount to silence this warning. [ 74.197412][ T4309] ======================================================= [ 74.307214][ T4279] usb 3-1: Using ep0 maxpacket: 8 [ 74.425857][ T4309] XFS (loop0): Mounting V5 Filesystem [ 74.431879][ T4279] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 143 [ 74.440538][ T4279] usb 3-1: can't read configurations, error -22 [ 74.471688][ T4333] loop1: detected capacity change from 0 to 1024 [ 74.474509][ T4279] usb usb3-port1: attempt power cycle [ 74.506509][ T4338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.564179][ T4333] EXT4-fs (loop1): Ignoring removed oldalloc option [ 74.590526][ T4333] EXT4-fs (loop1): Test dummy encryption mode enabled [ 74.602767][ T4333] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 74.623751][ T4333] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,dioread_lock,test_dummy_encryption=v1,nomblk_io_submit,delalloc,nobarrier,errors=continue,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 74.691710][ T4309] XFS (loop0): Ending clean mount [ 74.698414][ T4333] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 74.815981][ T4338] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 74.842712][ T4342] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 74.858113][ T4333] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 74.921632][ T4279] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 74.994131][ T4182] XFS (loop0): Unmounting Filesystem [ 74.999654][ T4345] loop3: detected capacity change from 0 to 16 [ 75.067539][ T4349] loop4: detected capacity change from 0 to 256 [ 75.074483][ T4279] usb 3-1: Using ep0 maxpacket: 8 [ 75.222392][ T4279] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 143 [ 75.235558][ T4279] usb 3-1: can't read configurations, error -22 [ 75.269282][ T4351] x_tables: duplicate underflow at hook 3 [ 75.303471][ T4346] loop3: detected capacity change from 0 to 4096 [ 75.347034][ T4346] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 75.409470][ T4353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15'. [ 75.421406][ T4279] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 75.443478][ T4355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16'. [ 75.475449][ T4346] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 75.529310][ T4346] ntfs3: loop3: mft corrupted [ 75.541034][ T4353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15'. [ 75.551703][ T4279] usb 3-1: Using ep0 maxpacket: 8 [ 75.570510][ T4346] ntfs3: loop3: Failed to load $Extend. [ 75.675059][ T4360] loop1: detected capacity change from 0 to 512 [ 75.681851][ T4279] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 143 [ 75.690520][ T4279] usb 3-1: can't read configurations, error -22 [ 75.709604][ T4345] overlayfs: upper fs does not support tmpfile. [ 75.752570][ T4279] usb usb3-port1: unable to enumerate USB device [ 75.764270][ T4345] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.831327][ T4360] EXT4-fs (loop1): Ignoring removed nobh option [ 75.839430][ T4345] overlayfs: failed to clone lowerpath [ 75.847223][ T4362] loop4: detected capacity change from 0 to 2048 [ 75.888878][ T155] ntfs3: loop3: ino=1e, Internal error [ 75.898698][ T4360] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.918712][ T155] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 75.998358][ T4360] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 76.037441][ T4367] loop0: detected capacity change from 0 to 1024 [ 76.064761][ T4368] netlink: 'syz.0.13': attribute type 11 has an invalid length. [ 76.102006][ T4360] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.17: Corrupt directory, running e2fsck is recommended [ 76.196913][ T4360] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 76.276853][ T4360] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.17: corrupted in-inode xattr [ 76.294331][ T4371] loop2: detected capacity change from 0 to 2048 [ 76.311931][ T4367] hfsplus: unable to parse mount options [ 76.443046][ T4375] loop4: detected capacity change from 0 to 256 [ 76.586838][ T4360] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.17: couldn't read orphan inode 15 (err -117) [ 76.617784][ T4375] exfat: Deprecated parameter 'namecase' [ 76.695179][ T4375] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 77.038332][ T4371] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 77.088250][ T4360] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000006,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000008,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 77.116176][ T4371] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.267601][ T4360] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 77.290229][ T4371] overlayfs: './file1' not a directory [ 77.361402][ T4360] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 77.418145][ T4360] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.17: Corrupt directory, running e2fsck is recommended [ 77.468845][ T4383] fuse: Bad value for 'fd' [ 77.491675][ T4360] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.17: path /5/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 77.650518][ T4360] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 4: comm syz.1.17: path /5/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 77.676155][ T4387] loop0: detected capacity change from 0 to 512 [ 77.734379][ T4389] loop4: detected capacity change from 0 to 512 [ 77.800104][ T4387] EXT4-fs (loop0): orphan cleanup on readonly fs [ 77.814641][ T4389] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 77.871444][ T4389] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 77.898977][ T4387] EXT4-fs error (device loop0): ext4_quota_enable:6417: comm syz.0.23: inode #218103808: comm syz.0.23: iget: illegal inode # [ 77.984996][ T4387] EXT4-fs error (device loop0): ext4_quota_enable:6420: comm syz.0.23: Bad quota inode: 218103808, type: 2 [ 78.057977][ T4387] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 78.086650][ T4403] fuse: Bad value for 'fd' [ 78.125245][ T4387] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 78.148651][ T4387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.182176][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #148!!! [ 78.507971][ T7] cfg80211: failed to load regulatory.db [ 78.554825][ T4387] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 78.591649][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 78.600932][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.699631][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 78.734270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 78.743363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 78.752795][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.761885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.770924][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.779982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.956142][ T4387] EXT4-fs error (device loop0): ext4_quota_enable:6417: comm syz.0.23: inode #218103808: comm syz.0.23: iget: illegal inode # [ 79.236721][ T4387] EXT4-fs error (device loop0): ext4_quota_enable:6420: comm syz.0.23: Bad quota inode: 218103808, type: 2 [ 79.279721][ T4387] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 79.386442][ T4387] Zero length message leads to an empty skb [ 79.415773][ T4410] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 79.489504][ T4410] EXT4-fs error (device loop0): ext4_quota_enable:6417: comm syz.0.23: inode #218103808: comm syz.0.23: iget: illegal inode # [ 79.558164][ T4410] EXT4-fs error (device loop0): ext4_quota_enable:6420: comm syz.0.23: Bad quota inode: 218103808, type: 2 [ 79.602785][ T4410] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 79.784287][ T4436] ipt_REJECT: ECHOREPLY no longer supported. [ 79.818784][ T4430] loop2: detected capacity change from 0 to 8192 [ 79.838372][ T4436] loop4: detected capacity change from 0 to 512 [ 79.887624][ T4430] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 79.926990][ T4430] REISERFS (device loop2): using journaled data mode [ 79.939097][ T4380] mmap: syz.3.21 (4380) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 79.990614][ T4436] EXT4-fs (loop4): Unrecognized mount option "permit_directio" or missing value [ 80.010093][ T4430] reiserfs: using flush barriers [ 80.072586][ T4422] loop1: detected capacity change from 0 to 32768 [ 80.098914][ T4430] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.125304][ T4430] REISERFS (device loop2): checking transaction log (loop2) [ 80.150494][ T4430] REISERFS (device loop2): Using r5 hash to sort names [ 80.166156][ T4436] xt_hashlimit: invalid interval [ 80.195625][ T4422] JBD2: Ignoring recovery information on journal [ 80.212275][ T4430] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 80.299485][ T4430] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 80.324876][ T4422] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 80.388256][ T4440] loop4: detected capacity change from 0 to 4096 [ 80.436541][ T4440] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 80.498694][ T4440] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 80.573766][ T26] audit: type=1804 audit(1768002211.972:2): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.28" name="/newroot/6/file1/bus" dev="loop1" ino=17058 res=1 errno=0 [ 80.630268][ T4440] ntfs: volume version 3.1. [ 80.640150][ T26] audit: type=1804 audit(1768002211.972:3): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.28" name="/newroot/6/file1/bus" dev="loop1" ino=17058 res=1 errno=0 [ 80.687663][ T4440] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 80.708316][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.759323][ T4440] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 80.783142][ T4440] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 80.905870][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 81.261790][ T4450] loop4: detected capacity change from 0 to 128 [ 81.393664][ T4450] FAT-fs (loop4): Unrecognized mount option "shortname=Æ)«˜gsnÒwinnt" or missing value [ 81.524469][ T4456] netlink: 176 bytes leftover after parsing attributes in process `syz.2.38'. [ 81.569769][ T4462] netlink: 32 bytes leftover after parsing attributes in process `syz.3.39'. [ 81.691455][ T4196] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.961473][ T4196] usb 2-1: Using ep0 maxpacket: 8 [ 82.091856][ T4196] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 82.153663][ T4196] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 82.502209][ T4196] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=f4.40 [ 82.564122][ T4196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.691356][ T4196] usb 2-1: Product: syz [ 82.721556][ T4196] usb 2-1: Manufacturer: syz [ 82.741303][ T4196] usb 2-1: SerialNumber: syz [ 83.068948][ T4492] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 83.143243][ T4196] usb 2-1: interface 1 not found [ 83.180880][ T4196] usb 2-1: USB disconnect, device number 2 [ 83.263984][ T4491] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 83.292826][ T4493] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 83.350236][ T4495] loop4: detected capacity change from 0 to 4096 [ 83.371405][ T4258] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.436229][ T26] audit: type=1326 audit(1768002214.832:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 83.458226][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.475450][ T4497] process 'syz.3.50' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.560383][ T26] audit: type=1326 audit(1768002214.832:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 83.673926][ T4467] loop2: detected capacity change from 0 to 40427 [ 83.680613][ T4258] usb 1-1: device descriptor read/64, error -71 [ 83.735237][ T4467] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 83.787356][ T4467] F2FS-fs (loop2): invalid crc value [ 83.801719][ T4467] F2FS-fs (loop2): invalid crc value [ 83.807130][ T4467] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 83.808080][ T26] audit: type=1326 audit(1768002214.832:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 83.867708][ T4504] loop1: detected capacity change from 0 to 256 [ 83.951520][ T4258] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.953182][ T4504] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 83.998068][ T4508] fuse: Unknown parameter 'g' [ 84.006041][ T4504] exFAT-fs (loop1): hint_cluster is invalid (17) [ 84.171435][ T4258] usb 1-1: device descriptor read/64, error -71 [ 84.178642][ T4514] loop4: detected capacity change from 0 to 128 [ 84.255352][ T4514] FAT-fs (loop4): count of clusters too big (9830398) [ 84.276338][ T4514] FAT-fs (loop4): Can't find a valid FAT filesystem [ 84.291507][ T4258] usb usb1-port1: attempt power cycle [ 84.403459][ T4514] loop4: detected capacity change from 0 to 128 [ 84.871511][ T21] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 84.879183][ T4258] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.972656][ T4258] usb 1-1: device descriptor read/8, error -71 [ 85.071448][ T21] usb 3-1: device descriptor read/64, error -71 [ 85.409464][ T4258] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.428602][ T4543] sctp: failed to load transform for md5: -2 [ 85.485506][ T21] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 85.501583][ T4258] usb 1-1: device descriptor read/8, error -71 [ 85.539679][ T4553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 85.569578][ T4553] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 85.587307][ T4553] nbd: error processing sock list [ 85.621548][ T4258] usb usb1-port1: unable to enumerate USB device [ 85.683195][ T4532] loop4: detected capacity change from 0 to 32768 [ 85.738365][ T4532] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.61 (4532) [ 85.778880][ T4555] loop2: detected capacity change from 0 to 8192 [ 85.810811][ T4555] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 85.833934][ T4532] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 85.835354][ T4555] REISERFS (device loop2): using ordered data mode [ 85.849594][ T4555] reiserfs: using flush barriers [ 85.865353][ T4532] BTRFS info (device loop4): enabling auto defrag [ 85.873657][ T4555] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.901649][ T4555] REISERFS (device loop2): checking transaction log (loop2) [ 85.912449][ T4532] BTRFS info (device loop4): use no compression [ 85.918737][ T4532] BTRFS info (device loop4): force clearing of disk cache [ 85.926064][ T4532] BTRFS info (device loop4): max_inline at 4096 [ 85.932945][ T4532] BTRFS info (device loop4): disabling free space tree [ 85.939926][ T4532] BTRFS info (device loop4): has skinny extents [ 86.121406][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.185438][ T4532] BTRFS info (device loop4): enabling ssd optimizations [ 86.210225][ T4532] BTRFS info (device loop4): clearing free space tree [ 86.240977][ T4532] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.280029][ T4555] REISERFS (device loop2): Using tea hash to sort names [ 86.289726][ T4532] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.317579][ T4555] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 86.412315][ T4196] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.461972][ T7] usb 2-1: too many configurations: 71, using maximum allowed: 8 [ 86.541643][ T7] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 238 [ 86.557338][ T7] usb 2-1: can't read configurations, error -22 [ 86.614503][ T4196] usb 1-1: device descriptor read/64, error -71 [ 86.727096][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.916995][ T4196] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 87.067350][ T7] usb 2-1: too many configurations: 71, using maximum allowed: 8 [ 87.155514][ T4196] usb 1-1: device descriptor read/64, error -71 [ 87.221569][ T7] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 238 [ 87.262615][ T7] usb 2-1: can't read configurations, error -22 [ 87.301523][ T4196] usb usb1-port1: attempt power cycle [ 87.307238][ T7] usb usb2-port1: attempt power cycle [ 87.619276][ T4617] loop4: detected capacity change from 0 to 1764 [ 87.741364][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.748981][ T4196] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 87.847102][ T4196] usb 1-1: device descriptor read/8, error -71 [ 87.897133][ T7] usb 2-1: too many configurations: 71, using maximum allowed: 8 [ 87.991749][ T7] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 238 [ 88.000444][ T7] usb 2-1: can't read configurations, error -22 [ 88.038555][ T4624] loop2: detected capacity change from 0 to 256 [ 88.122380][ T4624] exfat: Deprecated parameter 'namecase' [ 88.175209][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 88.183283][ T4196] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 88.205045][ T4624] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 88.272437][ T4196] usb 1-1: device descriptor read/8, error -71 [ 88.298423][ T4631] loop4: detected capacity change from 0 to 128 [ 88.356921][ T4635] syz.3.87 uses obsolete (PF_INET,SOCK_PACKET) [ 88.365495][ T4631] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.382413][ T7] usb 2-1: too many configurations: 71, using maximum allowed: 8 [ 88.391910][ T4631] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.407096][ T4196] usb usb1-port1: unable to enumerate USB device [ 88.471631][ T7] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 238 [ 88.494989][ T7] usb 2-1: can't read configurations, error -22 [ 88.532827][ T7] usb usb2-port1: unable to enumerate USB device [ 88.796289][ T4644] loop4: detected capacity change from 0 to 256 [ 89.048154][ T4640] loop2: detected capacity change from 0 to 32768 [ 89.213878][ T4640] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 89.265705][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 89.265721][ T26] audit: type=1800 audit(1768002220.662:19): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.86" name="file2" dev="loop2" ino=9554 res=0 errno=0 [ 89.464671][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 89.583126][ T4658] loop0: detected capacity change from 0 to 16 [ 89.676852][ T4658] erofs: (device loop0): mounted with root inode @ nid 36. [ 89.873810][ T4644] loop4: detected capacity change from 0 to 32768 [ 90.051384][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 90.334965][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 90.453523][ T4258] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.467486][ T4675] loop4: detected capacity change from 0 to 1024 [ 90.481673][ T13] usb 1-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config [ 90.506806][ T13] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.516820][ T4258] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.559760][ T13] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.694404][ T4660] loop2: detected capacity change from 0 to 32768 [ 90.735481][ T4660] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.93 (4660) [ 90.801657][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.822803][ T4678] hfsplus: invalid catalog entry type in lookup [ 90.824061][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.862523][ T13] usb 1-1: Product: syz [ 90.867751][ T13] usb 1-1: Manufacturer: syz [ 90.881820][ T13] usb 1-1: SerialNumber: syz [ 90.907538][ T4660] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 90.935615][ T4660] BTRFS info (device loop2): using free space tree [ 90.949770][ T13] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 90.958650][ T4660] BTRFS info (device loop2): has skinny extents [ 90.969792][ T13] cdc_ncm 1-1:1.0: bind() failure [ 91.001193][ T13] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 91.032890][ T13] cdc_ncm 1-1:1.1: bind() failure [ 91.153195][ T7] usb 1-1: USB disconnect, device number 10 [ 91.285056][ T4411] BTRFS warning (device loop2): checksum verify failed on 5287936 wanted 0xba2f3320fe4f0dfed931d5a5c7a64dbbccc1fca522c14bbe02198145e0728966 found 0xb3a55baeeaea4006ff4e61b6d0f3bc26a653b1c668cc957cbbff06b61ff2c8cc level 0 [ 91.475076][ T4660] BTRFS warning (device loop2): failed to read root (objectid=7): -5 [ 91.722922][ T4660] BTRFS error (device loop2): open_ctree failed: -22 [ 91.827517][ T4411] hfsplus: b-tree write err: -5, ino 4 [ 91.918781][ T4736] tmpfs: Bad value for 'mpol' [ 91.926880][ T4707] loop1: detected capacity change from 0 to 32768 [ 92.089243][ T4707] JBD2: Ignoring recovery information on journal [ 92.364886][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 92.392740][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 92.522834][ T4707] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 92.559674][ T4740] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 92.711233][ T4751] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 92.912087][ T4751] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 93.022355][ T4751] OCFS2: File system is now read-only. [ 93.027894][ T4751] (syz.1.101,4751,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 93.037345][ T4751] (syz.1.101,4751,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 93.046065][ T4751] (syz.1.101,4751,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 93.063155][ T4751] (syz.1.101,4751,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 93.071195][ T4751] (syz.1.101,4751,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 93.127335][ T4755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.168869][ T4751] (syz.1.101,4751,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 93.179163][ T4756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.230026][ T4751] (syz.1.101,4751,0):ocfs2_mknod:385 ERROR: status = -30 [ 93.260895][ T4751] (syz.1.101,4751,0):ocfs2_mknod:502 ERROR: status = -30 [ 93.296866][ T4751] (syz.1.101,4751,0):ocfs2_mkdir:659 ERROR: status = -30 [ 93.319147][ T4758] loop2: detected capacity change from 0 to 1024 [ 94.129793][ T4738] loop0: detected capacity change from 0 to 32768 [ 94.142840][ T4756] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 94.154657][ T4756] wlan1: No legacy rates in association response [ 94.165871][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 94.582086][ T4738] [ 94.582086][ T4738] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.582086][ T4738] [ 94.894200][ T4763] netlink: 84 bytes leftover after parsing attributes in process `syz.4.116'. [ 94.997319][ T4768] tmpfs: Unknown parameter 'mpö&ö‰šjhr' [ 95.125767][ T4771] syz.0.108 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 95.141703][ T4771] netlink: 132 bytes leftover after parsing attributes in process `syz.0.108'. [ 95.167836][ T4771] ERROR: (device loop0): diWrite: ixpxd invalid [ 95.167836][ T4771] [ 95.180918][ T4771] ERROR: (device loop0): txCommit: [ 95.180918][ T4771] [ 95.188951][ T4771] ERROR: (device loop0): diFree: invalid inoext [ 95.188951][ T4771] [ 95.435025][ T4777] loop2: detected capacity change from 0 to 128 [ 95.610294][ T4405] JFS: metapage_get_blocks failed [ 95.643800][ T4405] [ 95.643800][ T4405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.643800][ T4405] [ 95.675735][ T4405] [ 95.675735][ T4405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.675735][ T4405] [ 95.697822][ T4405] [ 95.697822][ T4405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.697822][ T4405] [ 95.722755][ T278] [ 95.722755][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.722755][ T278] [ 95.801768][ T4405] ERROR: (device loop0): diWrite: ixpxd invalid [ 95.801768][ T4405] [ 95.819288][ T4405] ERROR: (device loop0): txCommit: [ 95.819288][ T4405] [ 95.837076][ T4405] jfs_write_inode: jfs_commit_inode failed! [ 95.847236][ T4182] [ 95.847236][ T4182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.847236][ T4182] [ 95.882931][ T4182] [ 95.882931][ T4182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.882931][ T4182] [ 95.934249][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.061332][ T4728] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 96.191400][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 96.260968][ T26] audit: type=1326 audit(1768002227.652:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 96.291114][ T26] audit: type=1326 audit(1768002227.682:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 96.321733][ T13] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 96.322770][ T26] audit: type=1326 audit(1768002227.712:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 96.329976][ T13] usb 2-1: config 0 has no interface number 0 [ 96.363059][ T26] audit: type=1326 audit(1768002227.712:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 96.406147][ T13] usb 2-1: config 0 interface 175 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 96.425134][ T26] audit: type=1326 audit(1768002227.712:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 96.458262][ T26] audit: type=1326 audit(1768002227.712:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 96.481139][ T4728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.640045][ T4728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.649122][ T26] audit: type=1326 audit(1768002227.712:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 96.672180][ T26] audit: type=1326 audit(1768002227.712:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 96.672621][ T4728] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 96.695125][ T26] audit: type=1326 audit(1768002227.712:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f24e573d749 code=0x7ffc0000 [ 96.729434][ T13] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0313, bcdDevice=5b.a8 [ 96.739796][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.753693][ T13] usb 2-1: Product: syz [ 96.757901][ T13] usb 2-1: Manufacturer: syz [ 96.765583][ T13] usb 2-1: SerialNumber: syz [ 96.778728][ T13] usb 2-1: config 0 descriptor?? [ 96.784246][ T4728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.803732][ T4728] usb 3-1: config 0 descriptor?? [ 96.811943][ T4786] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.851072][ T4806] 9pnet_virtio: no channels available for device syz [ 96.910580][ T4806] ubi31: attaching mtd0 [ 96.927196][ T4806] ubi31: scanning is finished [ 96.932663][ T4806] ubi31: empty MTD device detected [ 97.221067][ T4806] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 97.282951][ T13] option 2-1:0.175: GSM modem (1-port) converter detected [ 97.296418][ T4728] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 97.351635][ T13] usb 2-1: USB disconnect, device number 7 [ 97.372338][ T4728] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 97.392093][ T13] option 2-1:0.175: device disconnected [ 97.491543][ T4728] cp2112 0003:10C4:EA90.0002: error requesting version [ 97.513412][ T4728] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 97.578702][ T4728] usb 3-1: USB disconnect, device number 8 [ 97.828320][ T4817] fido_id[4817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 100.261281][ C1] sched: RT throttling activated [ 101.830874][ T4875] overlayfs: failed to clone upperpath [ 105.661518][ T4923] tipc: Enabling not permitted [ 105.667502][ T4923] tipc: Enabling of bearer rejected, failed to enable media [ 108.672531][ T4946] crypto_alloc_aead failed rc=-2 [ 114.921737][ T26] audit: type=1326 audit(1768002246.322:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5012 comm="syz.4.185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e24a63749 code=0x0 [ 115.837022][ T5029] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.770126][ T4483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.922335][ T5040] ODEBUG: Out of memory. ODEBUG disabled [ 117.022306][ T5040] syz.1.192 (5040): drop_caches: 2 [ 117.182767][ T4483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.218351][ T5056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 117.340723][ T4483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.473095][ T4184] Bluetooth: hci1: link tx timeout [ 117.478614][ T4184] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.250615][ T4483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.328796][ T5078] 9pnet_virtio: no channels available for device syz [ 118.458826][ T5082] 9pnet_virtio: no channels available for device syz [ 118.954580][ T4729] Bluetooth: hci0: command 0x0409 tx timeout [ 119.152890][ T5043] chnl_net:caif_netlink_parms(): no params data found [ 119.715673][ T4598] Bluetooth: hci1: command 0x0406 tx timeout [ 119.813432][ T5043] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.830792][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.938199][ T5043] device bridge_slave_0 entered promiscuous mode [ 119.982555][ T5043] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.030548][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.091802][ T5043] device bridge_slave_1 entered promiscuous mode [ 120.317131][ T5043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.380212][ T5043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.490206][ T5043] team0: Port device team_slave_0 added [ 120.539478][ T5043] team0: Port device team_slave_1 added [ 120.675065][ T5043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.724829][ T5043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.766132][ T5043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.831512][ T4729] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 120.843246][ T5043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.871439][ T5043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.975081][ T4253] Bluetooth: hci0: command 0x041b tx timeout [ 120.992571][ T5043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.154859][ T5142] team0: No ports can be present during mode change [ 121.218124][ T5043] device hsr_slave_0 entered promiscuous mode [ 121.241556][ T4729] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.292969][ T5043] device hsr_slave_1 entered promiscuous mode [ 121.320690][ T4729] usb 2-1: config 0 has no interfaces? [ 121.350982][ T5043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.357564][ T4729] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.377290][ T4729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.377317][ T5043] Cannot create hsr debugfs directory [ 121.427108][ T4729] usb 2-1: config 0 descriptor?? [ 121.685145][ T4729] usb 2-1: USB disconnect, device number 8 [ 121.927114][ T5126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 122.114408][ T4483] device hsr_slave_0 left promiscuous mode [ 122.140407][ T4483] device hsr_slave_1 left promiscuous mode [ 122.150594][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.158854][ T4483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.167694][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.191519][ T4483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.202646][ T4483] device bridge_slave_1 left promiscuous mode [ 122.210465][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.376687][ T4483] device bridge_slave_0 left promiscuous mode [ 122.393547][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.464405][ T4483] device veth1_macvtap left promiscuous mode [ 122.520859][ T4483] device veth0_macvtap left promiscuous mode [ 122.581519][ T4483] device veth1_vlan left promiscuous mode [ 122.609366][ T4483] device veth0_vlan left promiscuous mode [ 122.917011][ T5187] netlink: 144 bytes leftover after parsing attributes in process `syz.3.231'. [ 123.062516][ T4598] Bluetooth: hci0: command 0x040f tx timeout [ 123.414090][ T4483] team0 (unregistering): Port device team_slave_1 removed [ 123.447966][ T4483] team0 (unregistering): Port device team_slave_0 removed [ 123.482197][ T4483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.530570][ T4483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.885534][ T4483] bond0 (unregistering): Released all slaves [ 124.041476][ T5174] device syzkaller0 entered promiscuous mode [ 124.383089][ T5197] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 124.423070][ T5197] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 124.584578][ T5207] 9pnet_virtio: no channels available for device syz [ 124.827211][ T5043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.854680][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 124.865835][ T4184] CPU: 0 PID: 4184 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 124.873439][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.883525][ T4184] Workqueue: hci2 hci_rx_work [ 124.888271][ T4184] Call Trace: [ 124.891613][ T4184] [ 124.894578][ T4184] dump_stack_lvl+0x168/0x230 [ 124.899303][ T4184] ? show_regs_print_info+0x20/0x20 [ 124.904537][ T4184] ? load_image+0x3b0/0x3b0 [ 124.909092][ T4184] sysfs_create_dir_ns+0x252/0x280 [ 124.914248][ T4184] ? __lock_acquire+0x7c60/0x7c60 [ 124.919328][ T4184] ? sysfs_warn_dup+0xa0/0xa0 [ 124.924040][ T4184] ? le_conn_complete_evt+0xcbc/0x1590 [ 124.929548][ T4184] ? hci_event_packet+0xe05/0x12f0 [ 124.934698][ T4184] ? process_one_work+0x863/0x1000 [ 124.939910][ T4184] ? do_raw_spin_unlock+0x11d/0x230 [ 124.945188][ T4184] kobject_add_internal+0x662/0xd00 [ 124.950433][ T4184] kobject_add+0x152/0x210 [ 124.954902][ T4184] ? kobject_init+0x1d0/0x1d0 [ 124.959627][ T4184] ? klist_children_get+0x50/0x50 [ 124.964683][ T4184] ? get_device_parent+0x121/0x3f0 [ 124.969848][ T4184] device_add+0x483/0xfb0 [ 124.974243][ T4184] hci_conn_add_sysfs+0xd1/0x1e0 [ 124.979251][ T4184] le_conn_complete_evt+0xcbc/0x1590 [ 124.984578][ T4184] ? asm_sysvec_call_function_single+0x16/0x20 [ 124.990962][ T4184] ? cs_le_create_conn+0x5e0/0x5e0 [ 124.996129][ T4184] ? __mutex_trylock_common+0x80/0x250 [ 125.001626][ T4184] ? __mutex_trylock_common+0x95/0x250 [ 125.007130][ T4184] ? __mutex_trylock_common+0x14f/0x250 [ 125.012720][ T4184] hci_le_meta_evt+0x289/0x3b80 [ 125.017607][ T4184] ? hci_event_packet+0x36d/0x12f0 [ 125.022745][ T4184] ? hci_event_packet+0x2e2/0x12f0 [ 125.027894][ T4184] ? __lock_acquire+0x7c60/0x7c60 [ 125.032981][ T4184] ? hci_remote_host_features_evt+0x280/0x280 [ 125.039131][ T4184] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 125.044801][ T4184] ? mark_lock+0x94/0x320 [ 125.049169][ T4184] ? mutex_unlock+0x10/0x10 [ 125.053714][ T4184] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 125.059754][ T4184] ? lock_chain_count+0x20/0x20 [ 125.064646][ T4184] ? __rwlock_init+0x140/0x140 [ 125.069489][ T4184] hci_event_packet+0xe05/0x12f0 [ 125.074454][ T4184] ? lockdep_hardirqs_on+0x94/0x140 [ 125.079688][ T4184] ? rcu_lock_release+0x20/0x20 [ 125.084576][ T4184] ? hci_send_to_monitor+0x9c/0x4a0 [ 125.089828][ T4184] hci_rx_work+0x255/0xa10 [ 125.094333][ T4184] process_one_work+0x863/0x1000 [ 125.099326][ T4184] ? worker_detach_from_pool+0x240/0x240 [ 125.104986][ T4184] ? lockdep_hardirqs_off+0x70/0x100 [ 125.110334][ T4184] ? _raw_spin_lock_irq+0xab/0xe0 [ 125.115393][ T4184] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 125.120798][ T4184] ? wq_worker_running+0x97/0x170 [ 125.125879][ T4184] worker_thread+0xaa8/0x12a0 [ 125.130627][ T4184] kthread+0x436/0x520 [ 125.131554][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 125.134741][ T4184] ? rcu_lock_release+0x20/0x20 [ 125.145638][ T4184] ? kthread_blkcg+0xd0/0xd0 [ 125.150402][ T4184] ret_from_fork+0x1f/0x30 [ 125.154912][ T4184] [ 125.166030][ T4184] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 125.179688][ T4184] Bluetooth: hci2: failed to register connection device [ 125.186594][ T5043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.308389][ T5043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.417154][ T5043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.899268][ T5043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.947550][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.964789][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.996626][ T5043] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.037073][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.063637][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.099959][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.107135][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.160774][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.202104][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.222175][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.274166][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.281299][ T4970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.350039][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.422152][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.471863][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.573681][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.633015][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.656320][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.687706][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.731895][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.760169][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 126.782128][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.800916][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.850166][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.904489][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.511035][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.521758][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.551479][ T4728] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 127.587136][ T5043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.617178][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.673198][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.712661][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.744962][ T5300] device bridge_slave_0 left promiscuous mode [ 127.796666][ T5300] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.849524][ T5300] device bridge_slave_1 left promiscuous mode [ 127.876650][ T5300] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.931393][ T4598] Bluetooth: hci4: command 0x2016 tx timeout [ 127.941932][ T4728] usb 2-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x43, skipping [ 128.003053][ T4728] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.043860][ T5300] bond0: (slave bond_slave_0): Releasing backup interface [ 128.127216][ T5300] bond0: (slave bond_slave_1): Releasing backup interface [ 128.212686][ T4728] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.242911][ T4728] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.301385][ T4728] usb 2-1: Product: syz [ 128.305603][ T4728] usb 2-1: Manufacturer: syz [ 128.346690][ T4728] usb 2-1: SerialNumber: syz [ 128.395607][ T4728] usb 2-1: config 0 descriptor?? [ 128.439576][ T5300] team0: Port device team_slave_0 removed [ 128.445901][ T5291] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.479029][ T5300] team0: Port device team_slave_1 removed [ 128.512081][ T5300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.519550][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.657199][ T5300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.691347][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.710950][ T4728] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 128.740142][ T5300] syz.4.259 (5300) used greatest stack depth: 20032 bytes left [ 128.749554][ T5303] team0: Mode changed to "activebackup" [ 128.780714][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.810779][ T4728] usb 2-1: USB disconnect, device number 9 [ 128.868923][ T5305] device vlan0 entered promiscuous mode [ 128.956718][ T5305] team0: Port device vlan0 added [ 129.014174][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.055846][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.153330][ T5305] syz.4.259 (5305) used greatest stack depth: 19872 bytes left [ 129.171349][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.193853][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.252179][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.341968][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.392926][ T5043] device veth0_vlan entered promiscuous mode [ 129.433687][ T5043] device veth1_vlan entered promiscuous mode [ 129.578342][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.597292][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.608388][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.624584][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.639982][ T5043] device veth0_macvtap entered promiscuous mode [ 129.660345][ T5043] device veth1_macvtap entered promiscuous mode [ 129.686599][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.724614][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.778870][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.810904][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.888287][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.946361][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.997805][ T5043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.030910][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.063397][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.138663][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.192287][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.236545][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.277671][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.361553][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.415859][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.453034][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.498831][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.545801][ T5043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.562223][ T5342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.270'. [ 130.625207][ T5343] team0: No ports can be present during mode change [ 130.670129][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.693836][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.991389][ T4728] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.361553][ T4728] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.370255][ T4728] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.441828][ T4728] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.482850][ T4728] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 131.535609][ T4253] Bluetooth: hci2: command 0x0406 tx timeout [ 131.541705][ T4728] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 131.555587][ T5043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.591490][ T5043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.641400][ T5043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.677431][ T5043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.732384][ T4728] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.756555][ T4728] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.786586][ T4728] usb 3-1: Product: syz [ 131.805185][ T4728] usb 3-1: Manufacturer: syz [ 131.891128][ T4728] cdc_wdm 3-1:1.0: skipping garbage [ 131.961368][ T4728] cdc_wdm 3-1:1.0: skipping garbage [ 132.051135][ T4728] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 132.095124][ T4728] cdc_wdm 3-1:1.0: Unknown control protocol [ 132.142823][ T4728] usb 3-1: USB disconnect, device number 9 [ 132.201605][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.247525][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.290686][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.312919][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.332682][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.360645][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.638150][ T4253] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 132.735756][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742115][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.181765][ T4253] usb 2-1: device descriptor read/all, error -71 [ 142.455914][ T5412] netlink: 260 bytes leftover after parsing attributes in process `syz.3.293'. [ 144.839812][ T26] audit: type=1326 audit(2000000024.820:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.3.307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24e573d749 code=0x0 [ 145.982069][ T5453] device syzkaller0 entered promiscuous mode [ 146.791484][ T5476] comedi comedi2: dt2814: I/O port conflict (0x6,2) [ 147.662366][ T5483] syz.0.317 (5483) used greatest stack depth: 17152 bytes left [ 147.746093][ T5488] [ 147.748483][ T5488] ====================================================== [ 147.755518][ T5488] WARNING: possible circular locking dependency detected [ 147.762616][ T5488] syzkaller #0 Not tainted [ 147.767053][ T5488] ------------------------------------------------------ [ 147.774175][ T5488] syz.2.318/5488 is trying to acquire lock: [ 147.780080][ T5488] ffff88801a9f4c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 147.791364][ T5488] [ 147.791364][ T5488] but task is already holding lock: [ 147.798744][ T5488] ffffffff8d4ba7e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 147.808555][ T5488] [ 147.808555][ T5488] which lock already depends on the new lock. [ 147.808555][ T5488] [ 147.819051][ T5488] [ 147.819051][ T5488] the existing dependency chain (in reverse order) is: [ 147.828091][ T5488] [ 147.828091][ T5488] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 147.836079][ T5488] __mutex_lock_common+0x1eb/0x2390 [ 147.841807][ T5488] mutex_lock_nested+0x17/0x20 [ 147.847095][ T5488] rfkill_register+0x33/0x8a0 [ 147.852392][ T5488] hci_register_dev+0x452/0x970 [ 147.857788][ T5488] vhci_create_device+0x32c/0x5c0 [ 147.863376][ T5488] vhci_write+0x391/0x450 [ 147.868280][ T5488] vfs_write+0x712/0xd00 [ 147.873044][ T5488] ksys_write+0x14d/0x250 [ 147.878069][ T5488] do_syscall_64+0x4c/0xa0 [ 147.883042][ T5488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.889487][ T5488] [ 147.889487][ T5488] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 147.897309][ T5488] __mutex_lock_common+0x1eb/0x2390 [ 147.903040][ T5488] mutex_lock_nested+0x17/0x20 [ 147.908352][ T5488] vhci_send_frame+0x88/0x100 [ 147.914105][ T5488] hci_send_frame+0x1a9/0x2e0 [ 147.919327][ T5488] hci_tx_work+0x9f9/0x1710 [ 147.924353][ T5488] process_one_work+0x863/0x1000 [ 147.929833][ T5488] worker_thread+0xaa8/0x12a0 [ 147.935043][ T5488] kthread+0x436/0x520 [ 147.939641][ T5488] ret_from_fork+0x1f/0x30 [ 147.944577][ T5488] [ 147.944577][ T5488] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 147.953791][ T5488] __flush_work+0xdd/0x1b0 [ 147.958739][ T5488] hci_dev_do_close+0x1e7/0x1030 [ 147.964211][ T5488] hci_unregister_dev+0x2d7/0x580 [ 147.969903][ T5488] vhci_release+0x73/0xc0 [ 147.974789][ T5488] __fput+0x234/0x930 [ 147.979296][ T5488] task_work_run+0x125/0x1a0 [ 147.984406][ T5488] do_exit+0x61e/0x20a0 [ 147.989113][ T5488] do_group_exit+0x12e/0x300 [ 147.994225][ T5488] __x64_sys_exit_group+0x3b/0x40 [ 147.999774][ T5488] do_syscall_64+0x4c/0xa0 [ 148.004722][ T5488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.011559][ T5488] [ 148.011559][ T5488] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 148.019245][ T5488] __mutex_lock_common+0x1eb/0x2390 [ 148.024963][ T5488] mutex_lock_nested+0x17/0x20 [ 148.030255][ T5488] bg_scan_update+0x44/0x3b0 [ 148.035362][ T5488] process_one_work+0x863/0x1000 [ 148.040829][ T5488] worker_thread+0xaa8/0x12a0 [ 148.046028][ T5488] kthread+0x436/0x520 [ 148.050624][ T5488] ret_from_fork+0x1f/0x30 [ 148.055565][ T5488] [ 148.055565][ T5488] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 148.065382][ T5488] __lock_acquire+0x2c33/0x7c60 [ 148.070864][ T5488] lock_acquire+0x197/0x3f0 [ 148.075916][ T5488] __flush_work+0xdd/0x1b0 [ 148.080874][ T5488] __cancel_work_timer+0x3ac/0x520 [ 148.086526][ T5488] hci_request_cancel_all+0xcc/0x300 [ 148.092335][ T5488] hci_dev_do_close+0x4e/0x1030 [ 148.097707][ T5488] hci_rfkill_set_block+0x10a/0x190 [ 148.103444][ T5488] rfkill_set_block+0x1c6/0x420 [ 148.108839][ T5488] rfkill_fop_write+0x458/0x560 [ 148.114243][ T5488] vfs_write+0x300/0xd00 [ 148.119206][ T5488] ksys_write+0x14d/0x250 [ 148.124156][ T5488] do_syscall_64+0x4c/0xa0 [ 148.129099][ T5488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.135615][ T5488] [ 148.135615][ T5488] other info that might help us debug this: [ 148.135615][ T5488] [ 148.145874][ T5488] Chain exists of: [ 148.145874][ T5488] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 148.145874][ T5488] [ 148.161717][ T5488] Possible unsafe locking scenario: [ 148.161717][ T5488] [ 148.169166][ T5488] CPU0 CPU1 [ 148.174530][ T5488] ---- ---- [ 148.179887][ T5488] lock(rfkill_global_mutex); [ 148.184642][ T5488] lock(&data->open_mutex); [ 148.191745][ T5488] lock(rfkill_global_mutex); [ 148.199024][ T5488] lock((work_completion)(&hdev->bg_scan_update)); [ 148.205608][ T5488] [ 148.205608][ T5488] *** DEADLOCK *** [ 148.205608][ T5488] [ 148.213779][ T5488] 1 lock held by syz.2.318/5488: [ 148.218857][ T5488] #0: ffffffff8d4ba7e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 148.229023][ T5488] [ 148.229023][ T5488] stack backtrace: [ 148.234918][ T5488] CPU: 0 PID: 5488 Comm: syz.2.318 Not tainted syzkaller #0 [ 148.242203][ T5488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.252261][ T5488] Call Trace: [ 148.255737][ T5488] [ 148.258836][ T5488] dump_stack_lvl+0x168/0x230 [ 148.263550][ T5488] ? load_image+0x3b0/0x3b0 [ 148.268086][ T5488] ? show_regs_print_info+0x20/0x20 [ 148.273317][ T5488] ? print_circular_bug+0x12b/0x1a0 [ 148.278689][ T5488] check_noncircular+0x274/0x310 [ 148.283681][ T5488] ? add_chain_block+0x940/0x940 [ 148.288621][ T5488] ? lockdep_lock+0xdc/0x1e0 [ 148.293217][ T5488] ? __lock_acquire+0x12d9/0x7c60 [ 148.298243][ T5488] ? lockdep_lock+0x1e0/0x1e0 [ 148.302921][ T5488] ? mark_lock+0x94/0x320 [ 148.307252][ T5488] __lock_acquire+0x2c33/0x7c60 [ 148.312114][ T5488] ? psi_task_switch+0x495/0x810 [ 148.317053][ T5488] ? verify_lock_unused+0x140/0x140 [ 148.322259][ T5488] lock_acquire+0x197/0x3f0 [ 148.326777][ T5488] ? __flush_work+0xc1/0x1b0 [ 148.331370][ T5488] ? __lock_acquire+0x7c60/0x7c60 [ 148.336415][ T5488] ? read_lock_is_recursive+0x10/0x10 [ 148.341895][ T5488] ? start_flush_work+0x776/0x820 [ 148.346924][ T5488] __flush_work+0xdd/0x1b0 [ 148.351358][ T5488] ? __flush_work+0xc1/0x1b0 [ 148.355956][ T5488] ? flush_work+0x20/0x20 [ 148.360280][ T5488] ? try_to_grab_pending+0xf3/0x7e0 [ 148.365475][ T5488] ? lockdep_hardirqs_off+0x70/0x100 [ 148.370768][ T5488] ? mark_lock+0x94/0x320 [ 148.375098][ T5488] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 148.381081][ T5488] ? lock_chain_count+0x20/0x20 [ 148.385929][ T5488] ? mark_lock+0x94/0x320 [ 148.390257][ T5488] ? __cancel_work_timer+0x331/0x520 [ 148.395540][ T5488] __cancel_work_timer+0x3ac/0x520 [ 148.400672][ T5488] ? cancel_work_sync+0x20/0x20 [ 148.405521][ T5488] ? __cancel_work+0x1f4/0x2d0 [ 148.410279][ T5488] ? lockdep_hardirqs_on+0x94/0x140 [ 148.415477][ T5488] ? __cancel_work+0x26f/0x2d0 [ 148.420324][ T5488] ? cancel_work+0x20/0x20 [ 148.424754][ T5488] ? lock_chain_count+0x20/0x20 [ 148.429605][ T5488] hci_request_cancel_all+0xcc/0x300 [ 148.434914][ T5488] hci_dev_do_close+0x4e/0x1030 [ 148.439786][ T5488] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 148.445682][ T5488] ? _raw_spin_unlock+0x40/0x40 [ 148.450535][ T5488] hci_rfkill_set_block+0x10a/0x190 [ 148.455741][ T5488] ? rcu_lock_release+0x20/0x20 [ 148.460587][ T5488] rfkill_set_block+0x1c6/0x420 [ 148.465433][ T5488] rfkill_fop_write+0x458/0x560 [ 148.470281][ T5488] ? rfkill_fop_read+0x4b0/0x4b0 [ 148.475220][ T5488] ? common_file_perm+0xc0/0x1c0 [ 148.480160][ T5488] ? fsnotify_perm+0x5d/0x560 [ 148.484852][ T5488] ? security_file_permission+0x75/0xa0 [ 148.490417][ T5488] ? rfkill_fop_read+0x4b0/0x4b0 [ 148.495362][ T5488] vfs_write+0x300/0xd00 [ 148.499603][ T5488] ? file_end_write+0x250/0x250 [ 148.504451][ T5488] ? __fget_files+0x40f/0x480 [ 148.509152][ T5488] ? __fdget_pos+0x1e2/0x370 [ 148.513749][ T5488] ? ksys_write+0x71/0x250 [ 148.518163][ T5488] ksys_write+0x14d/0x250 [ 148.522490][ T5488] ? __ia32_sys_read+0x80/0x80 [ 148.527277][ T5488] ? lockdep_hardirqs_on+0x94/0x140 [ 148.532474][ T5488] do_syscall_64+0x4c/0xa0 [ 148.536892][ T5488] ? clear_bhb_loop+0x30/0x80 [ 148.541590][ T5488] ? clear_bhb_loop+0x30/0x80 [ 148.546271][ T5488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.552170][ T5488] RIP: 0033:0x7fbf4b7b2749 [ 148.556582][ T5488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.576210][ T5488] RSP: 002b:00007fbf49a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.584627][ T5488] RAX: ffffffffffffffda RBX: 00007fbf4ba08fa0 RCX: 00007fbf4b7b2749 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 148.592603][ T5488] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000004 [ 148.600572][ T5488] RBP: 00007fbf4b836f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.608572][ T5488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.616549][ T5488] R13: 00007fbf4ba09038 R14: 00007fbf4ba08fa0 R15: 00007ffd07805fe8 [ 148.624545][ T5488] [ 148.627609][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.107336][ T4302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.200367][ T4302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.268083][ T4302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.436221][ T4302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.359213][ T4302] device hsr_slave_0 left promiscuous mode [ 150.367312][ T4302] device hsr_slave_1 left promiscuous mode [ 150.374342][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.381819][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.389373][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.397278][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.404939][ T4302] device bridge_slave_1 left promiscuous mode [ 150.411089][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.419119][ T4302] device bridge_slave_0 left promiscuous mode [ 150.425813][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.435594][ T4302] device veth1_macvtap left promiscuous mode [ 150.442128][ T4302] device veth0_macvtap left promiscuous mode [ 150.448197][ T4302] device veth1_vlan left promiscuous mode [ 150.454096][ T4302] device veth0_vlan left promiscuous mode [ 150.548759][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 150.559974][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 150.570123][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.585341][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.629683][ T4302] bond0 (unregistering): Released all slaves [ 151.481136][ T4302] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.546590][ T4302] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.606031][ T4302] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.664819][ T4302] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.746558][ T4302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.804674][ T4302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.855955][ T4302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.906183][ T4302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.987364][ T4302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.045629][ T4302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.094864][ T4302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.155332][ T4302] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.225728][ T4302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.286926][ T4302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.326832][ T4302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.405906][ T4302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.768776][ T4302] device hsr_slave_0 left promiscuous mode [ 153.781964][ T4302] device hsr_slave_1 left promiscuous mode [ 153.790943][ T4302] device hsr_slave_0 left promiscuous mode [ 153.797842][ T4302] device hsr_slave_1 left promiscuous mode [ 153.804333][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.812088][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.819713][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.827422][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.835233][ T4302] device bridge_slave_1 left promiscuous mode [ 153.841633][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.849812][ T4302] device bridge_slave_0 left promiscuous mode [ 153.860156][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.871418][ T4302] device hsr_slave_0 left promiscuous mode [ 153.877666][ T4302] device hsr_slave_1 left promiscuous mode [ 153.884393][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.892057][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.899687][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.907480][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.915415][ T4302] device bridge_slave_1 left promiscuous mode [ 153.921770][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.929962][ T4302] device bridge_slave_0 left promiscuous mode [ 153.936537][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.947417][ T4302] device hsr_slave_0 left promiscuous mode [ 153.953759][ T4302] device hsr_slave_1 left promiscuous mode [ 153.960043][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.968780][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.976668][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.984261][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.992132][ T4302] device bridge_slave_1 left promiscuous mode [ 153.998306][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.006785][ T4302] device bridge_slave_0 left promiscuous mode [ 154.013317][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.028627][ T4302] device veth1_macvtap left promiscuous mode [ 154.034755][ T4302] device veth0_macvtap left promiscuous mode [ 154.040808][ T4302] device veth1_vlan left promiscuous mode [ 154.047536][ T4302] device veth1_macvtap left promiscuous mode [ 154.053753][ T4302] device veth0_macvtap left promiscuous mode [ 154.059802][ T4302] device veth1_vlan left promiscuous mode [ 154.066148][ T4302] device veth0_vlan left promiscuous mode [ 154.073840][ T4302] device veth1_macvtap left promiscuous mode [ 154.079874][ T4302] device veth0_macvtap left promiscuous mode [ 154.086629][ T4302] device veth1_vlan left promiscuous mode [ 154.093585][ T4302] device veth0_vlan left promiscuous mode [ 154.099954][ T4302] device veth1_macvtap left promiscuous mode [ 154.106065][ T4302] device veth0_macvtap left promiscuous mode [ 154.112459][ T4302] device veth1_vlan left promiscuous mode [ 154.118222][ T4302] device veth0_vlan left promiscuous mode [ 154.324620][ T4302] team0 (unregistering): Port device vlan0 removed [ 154.398133][ T4302] bond0 (unregistering): Released all slaves [ 154.482585][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 154.493389][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 154.504063][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.516441][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.561931][ T4302] bond0 (unregistering): Released all slaves [ 154.649978][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 154.660557][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 154.670563][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.684791][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.727608][ T4302] bond0 (unregistering): Released all slaves [ 154.822133][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 154.835368][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 154.846013][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.858192][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.901420][ T4302] bond0 (unregistering): Released all slaves [ 154.976075][ T4302] bond0 (unregistering): Released all slaves