last executing test programs: 1m43.44233087s ago: executing program 1 (id=34): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000000000001eb, 0x40002000, 0x0) 1m42.276500742s ago: executing program 1 (id=37): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$usbmon(&(0x7f0000000000), 0x7ffffffd, 0xc0303) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x640c7600, 0x0, 0x5, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) 1m37.673014672s ago: executing program 1 (id=56): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) eventfd(0x10001) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x9, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m36.687255222s ago: executing program 1 (id=59): prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0xe}, 0x20) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x100000}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x404) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r5, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) 1m35.612877614s ago: executing program 1 (id=63): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 1m35.340352717s ago: executing program 1 (id=66): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$usbmon(&(0x7f0000000000), 0x7ffffffd, 0xc0303) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x640c7600, 0x0, 0x5, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) 1m20.054806311s ago: executing program 32 (id=66): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$usbmon(&(0x7f0000000000), 0x7ffffffd, 0xc0303) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x640c7600, 0x0, 0x5, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) 17.152679176s ago: executing program 0 (id=259): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0xc4, &(0x7f0000000100)={0x0, 0x4c69, 0x2000, 0x5, 0x38f}, 0x0, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x40000, 0x7c6d, 0xffffffff, 0x8001, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x2, 0xd0, 0x0, 0xff}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) geteuid() syz_open_dev$tty1(0xc, 0x4, 0x4) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) madvise(&(0x7f0000b52000/0x3000)=nil, 0x3000, 0x12) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 14.580627503s ago: executing program 0 (id=267): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 13.331368007s ago: executing program 0 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc105) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400df0325010ebc000000000000008000f0fffeffe809035300fff5dd0000001000020008000140040000006da2898e", 0x58}], 0x1) 11.308178149s ago: executing program 2 (id=277): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) 8.061216923s ago: executing program 4 (id=285): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 7.908398905s ago: executing program 5 (id=286): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0xd430, 0x3501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) fcntl$lock(r0, 0x24, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = semget$private(0x0, 0x5, 0x132) semctl$SEM_STAT(r1, 0x4, 0x12, 0x0) 6.850067586s ago: executing program 3 (id=287): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 6.836763516s ago: executing program 2 (id=288): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="05", 0x1, 0x4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$sock_TIOCOUTQ(r4, 0x5411, 0x0) 6.792358277s ago: executing program 4 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800e, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb9a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8003, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0xfffffffd, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x2, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x5, 0x0, 0x9, 0xfffffffd, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0xffff, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x301700, 0x100}, 0x18) mkdirat(r2, &(0x7f0000002040)='./file0\x00', 0x40) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0xedcb, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESHEX]) 6.785859877s ago: executing program 5 (id=290): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, &(0x7f0000000240)=""/157, 0x9d) getdents(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6.576554549s ago: executing program 4 (id=291): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 5.642548349s ago: executing program 2 (id=292): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00)=ANY=[@ANYBLOB="00541f000000ccdd"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.54303488s ago: executing program 3 (id=293): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 5.468058241s ago: executing program 5 (id=294): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in=@empty}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FBIOGETCMAP(r6, 0x4604, 0x0) 5.419703301s ago: executing program 4 (id=295): pipe2(&(0x7f0000000340), 0x80000) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 5.293633253s ago: executing program 0 (id=296): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x6a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000001c0)='./bus\x00', 0x1800840, &(0x7f0000000080)={[{@utf8}, {@fat=@errors_continue}, {@uni_xlate}, {@rodir}, {@fat=@sys_immutable}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x68e}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_winnt}, {@numtail}, {@utf8}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}, {@fat=@tz_utc}]}, 0x1, 0x36f, &(0x7f0000000600)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f00001da000/0x3000)=nil, 0x3000, 0x1d) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) creat(0x0, 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x2) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") r6 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 4.464229662s ago: executing program 4 (id=297): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c910"], 0x15) finit_module(0xffffffffffffffff, 0x0, 0x2) 4.244436184s ago: executing program 3 (id=298): r0 = landlock_create_ruleset(&(0x7f0000000240)={0xc4de, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0xf) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x11, 0x0, 0x4) 3.500371882s ago: executing program 4 (id=299): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) 3.433521693s ago: executing program 5 (id=300): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 3.128540497s ago: executing program 0 (id=301): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x2f5, 0x7b9a, {{0x14, 0x4, 0x3, 0x7, 0x50, 0x66, 0x0, 0x3, 0x4a4da237245e0d73, 0x0, @remote, @loopback, {[@rr={0x7, 0xf, 0x63, [@dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @multicast1]}, @rr={0x7, 0x7, 0xc5, [@broadcast]}, @end, @ssrr={0x89, 0x7, 0x1a, [@remote]}, @ssrr={0x89, 0x1b, 0x99, [@empty, @rand_addr=0x64010101, @loopback, @multicast2, @broadcast, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @local, @private}, &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r1, 0x0, 0x4001098) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80501, 0x0) write$binfmt_aout(r4, &(0x7f0000000300)=ANY=[], 0xff2e) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x267, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) syz_open_pts(r4, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r3, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x2dc00, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x5, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @private=0xa010102}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b70400000000000085000000c3000000", @ANYRES64=0x0], &(0x7f0000000600)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) 3.028365407s ago: executing program 3 (id=302): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="05", 0x1, 0x4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$sock_TIOCOUTQ(r4, 0x5411, 0x0) 2.033601868s ago: executing program 5 (id=303): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2.033299268s ago: executing program 2 (id=304): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, &(0x7f0000000240)=""/157, 0x9d) getdents(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.014115868s ago: executing program 3 (id=305): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1.743247151s ago: executing program 3 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc105) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400df0325010ebc000000000000008000f0fffeffe809035300fff5dd0000001000020008000140040000006da2898e", 0x58}], 0x1) 802.474161ms ago: executing program 2 (id=307): pipe2(&(0x7f0000000340), 0x80000) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 722.260612ms ago: executing program 5 (id=308): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 316.856436ms ago: executing program 2 (id=309): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, 0x0, 0x40890) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2042, 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x0, 0x4, 0x1000000000000}) 0s ago: executing program 0 (id=310): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in=@empty}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FBIOGETCMAP(r6, 0x4604, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. [ 54.139685][ T4175] cgroup: Unknown subsys name 'net' [ 54.294299][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.743698][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.165344][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 57.266132][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 57.335047][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.343447][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.351852][ T4196] device bridge_slave_0 entered promiscuous mode [ 57.360894][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 57.379454][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 57.401203][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.408641][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.416997][ T4196] device bridge_slave_1 entered promiscuous mode [ 57.469509][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 57.513368][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.526691][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.534085][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.542834][ T4188] device bridge_slave_0 entered promiscuous mode [ 57.576360][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.594551][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.603041][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.611787][ T4188] device bridge_slave_1 entered promiscuous mode [ 57.649438][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.656538][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.665043][ T4194] device bridge_slave_0 entered promiscuous mode [ 57.680997][ T4196] team0: Port device team_slave_0 added [ 57.694964][ T4196] team0: Port device team_slave_1 added [ 57.707830][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.715634][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.723868][ T4194] device bridge_slave_1 entered promiscuous mode [ 57.753975][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.765625][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.776407][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.783759][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.791971][ T4198] device bridge_slave_0 entered promiscuous mode [ 57.817219][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.828439][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.836808][ T4191] device bridge_slave_0 entered promiscuous mode [ 57.850323][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.857598][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.866014][ T4198] device bridge_slave_1 entered promiscuous mode [ 57.875251][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.885435][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.892732][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.919086][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.931226][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.938311][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.947209][ T4191] device bridge_slave_1 entered promiscuous mode [ 57.964793][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.975744][ T4188] team0: Port device team_slave_0 added [ 57.990923][ T4188] team0: Port device team_slave_1 added [ 57.997067][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.004307][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.031627][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.088840][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.106094][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.117703][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.134469][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.141883][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.169390][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.192291][ T4194] team0: Port device team_slave_0 added [ 58.212979][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.223700][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.230897][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.257679][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.271073][ T4194] team0: Port device team_slave_1 added [ 58.282098][ T4196] device hsr_slave_0 entered promiscuous mode [ 58.289159][ T4196] device hsr_slave_1 entered promiscuous mode [ 58.322009][ T4191] team0: Port device team_slave_0 added [ 58.348710][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.355821][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.382438][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.395680][ T4191] team0: Port device team_slave_1 added [ 58.404901][ T4198] team0: Port device team_slave_0 added [ 58.417414][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.428204][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.455970][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.486672][ T4198] team0: Port device team_slave_1 added [ 58.495172][ T4188] device hsr_slave_0 entered promiscuous mode [ 58.502997][ T4188] device hsr_slave_1 entered promiscuous mode [ 58.510190][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.517965][ T4188] Cannot create hsr debugfs directory [ 58.568273][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.576243][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.602775][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.614888][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.622167][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.648756][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.661844][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.669748][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.696310][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.723818][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.730954][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.758865][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.798990][ T4194] device hsr_slave_0 entered promiscuous mode [ 58.806186][ T4194] device hsr_slave_1 entered promiscuous mode [ 58.813207][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.824311][ T4194] Cannot create hsr debugfs directory [ 58.909249][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 58.918967][ T3521] Bluetooth: hci3: command 0x0409 tx timeout [ 58.932374][ T3521] Bluetooth: hci2: command 0x0409 tx timeout [ 58.938415][ T4191] device hsr_slave_0 entered promiscuous mode [ 58.941130][ T3521] Bluetooth: hci0: command 0x0409 tx timeout [ 58.951879][ T3521] Bluetooth: hci1: command 0x0409 tx timeout [ 58.954791][ T4191] device hsr_slave_1 entered promiscuous mode [ 58.965532][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.973521][ T4191] Cannot create hsr debugfs directory [ 58.986766][ T4198] device hsr_slave_0 entered promiscuous mode [ 58.994837][ T4198] device hsr_slave_1 entered promiscuous mode [ 59.001598][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.010140][ T4198] Cannot create hsr debugfs directory [ 59.236561][ T4196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.251373][ T4196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.264837][ T4196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.277584][ T4196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.314490][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.334295][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.346065][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.367667][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.426066][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.447454][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.458378][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.477741][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.519709][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.544365][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.554920][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.574154][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.587096][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.626613][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.652154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.662184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.674906][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.684470][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.720473][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.727451][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.745911][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.774200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.783753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.793984][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.801613][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.838250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.847767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.859644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.868353][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.875788][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.886206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.895436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.904171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.912238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.920450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.929462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.939892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.959594][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.980810][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.991823][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.006302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.016965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.025972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.034997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.053353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.062303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.076253][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.085257][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.098886][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.111851][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.120442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.129898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.138519][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.145682][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.153771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.171613][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.183366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.195608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.205084][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.212588][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.229050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.237039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.267161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.277542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.290259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.300106][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.307468][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.315896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.326771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.335877][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.343608][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.352074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.361360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.371872][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.379087][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.386638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.395488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.404713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.413426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.422450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.431835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.442102][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.449508][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.492725][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.502745][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.513718][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.523217][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.534377][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.543432][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.555374][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.564083][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.573227][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.583079][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.591294][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.599503][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.608209][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.617514][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.626926][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.640651][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.672426][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.683940][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.692955][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.702641][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.713103][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.722037][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.731002][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.739956][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.749015][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.756783][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.766779][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.781122][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.791959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.801981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.815070][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.824945][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.841899][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.852242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.861233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.894205][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.921304][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.939289][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.959185][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.975449][ T1433] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.982869][ T1433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.994487][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.997008][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 61.004075][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.015589][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 61.019200][ T1433] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.024141][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 61.031079][ T1433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.032861][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.037681][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 61.051479][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.053710][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 61.065733][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.085332][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.094063][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.118055][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.127824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.153448][ T4196] device veth0_vlan entered promiscuous mode [ 61.180750][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.207439][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.227751][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.266141][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.275319][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.335328][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.346024][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.362345][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.372185][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.380907][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.392204][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.401869][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.411051][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.424109][ T4196] device veth1_vlan entered promiscuous mode [ 61.438232][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.448723][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.466373][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.492312][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.503201][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.517941][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.526536][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.542824][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.553883][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.567948][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.588897][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.615406][ T4196] device veth0_macvtap entered promiscuous mode [ 61.641077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.652025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.667158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.694840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.706754][ T4196] device veth1_macvtap entered promiscuous mode [ 61.740546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.750237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.760033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.769161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.809032][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.816813][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.826480][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.837675][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.846745][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.855495][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.868187][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.879232][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.888343][ T4188] device veth0_vlan entered promiscuous mode [ 61.900670][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.916753][ T4194] device veth0_vlan entered promiscuous mode [ 61.924268][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.932466][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.943719][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.954129][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.974140][ T4188] device veth1_vlan entered promiscuous mode [ 62.007397][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.021486][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.040034][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.048452][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.057198][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.067614][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.078635][ T4194] device veth1_vlan entered promiscuous mode [ 62.099499][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.108452][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.121162][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.130312][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.175383][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.184647][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.193844][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.203529][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.212543][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.221782][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.231818][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.241561][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.273646][ T4188] device veth0_macvtap entered promiscuous mode [ 62.295796][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.306067][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.323363][ T4191] device veth0_vlan entered promiscuous mode [ 62.333547][ T4194] device veth0_macvtap entered promiscuous mode [ 62.349094][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.357430][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.371253][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.380015][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.388389][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.397346][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.405869][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.414005][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.422385][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.441593][ T4198] device veth0_vlan entered promiscuous mode [ 62.451793][ T4188] device veth1_macvtap entered promiscuous mode [ 62.463373][ T4194] device veth1_macvtap entered promiscuous mode [ 62.492641][ T4191] device veth1_vlan entered promiscuous mode [ 62.511031][ T4198] device veth1_vlan entered promiscuous mode [ 62.560338][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.572211][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.584859][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.598213][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.611656][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.623145][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.632592][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.646001][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.656895][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.667927][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.680143][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.692810][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.703113][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.711662][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.721108][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.730050][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.738264][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.747435][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.756628][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.766152][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.775419][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.784620][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.804233][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.814315][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.827459][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.838277][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.852860][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.855150][ T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.872700][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.878622][ T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.888455][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.904675][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.916924][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.931690][ T4191] device veth0_macvtap entered promiscuous mode [ 62.939732][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.948374][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.958164][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.967038][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.976363][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.985729][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.013981][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.023079][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.032522][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.041491][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.054400][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.064287][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.075459][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 63.082697][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 63.085341][ T4191] device veth1_macvtap entered promiscuous mode [ 63.099394][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 63.107133][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 63.123912][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.125750][ T4198] device veth0_macvtap entered promiscuous mode [ 63.132049][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.153397][ T4198] device veth1_macvtap entered promiscuous mode [ 63.161002][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 63.182135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.192865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.201560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.210189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.225358][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.236727][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.247643][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.258337][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.270136][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.280731][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.292379][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.305525][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.317439][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.328794][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.339907][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.350166][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.361666][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.375389][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.399981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.423110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.432848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.442885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.459061][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.471033][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.481752][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.491076][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.517251][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.536661][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.548297][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.572055][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.585433][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.606542][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.617479][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.636327][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.659932][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.761383][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.774529][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.787644][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.799295][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.816354][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.835485][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.846705][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.864883][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.892235][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.905971][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.925460][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.944229][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.962329][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.008924][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.018237][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.028093][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.043981][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.054355][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.069675][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.129207][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.169101][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.189183][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.202726][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.227356][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.282253][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.292184][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.324430][ T452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.351347][ T452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.369880][ T1433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.378999][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.396115][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.408940][ T1433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.421979][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.438971][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.448935][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.503205][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.526740][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.591492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.640530][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.660645][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.685858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.758185][ T4275] loop3: detected capacity change from 0 to 256 [ 65.023375][ T4284] capability: warning: `syz.2.6' uses 32-bit capabilities (legacy support in use) [ 65.158646][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 65.165059][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 65.208625][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 65.208694][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 65.229877][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 65.346612][ T4296] ufs: You didn't specify the type of your ufs filesystem [ 65.346612][ T4296] [ 65.346612][ T4296] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 65.346612][ T4296] [ 65.346612][ T4296] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 65.346730][ T4296] ufs: ufstype=old is supported read-only [ 65.348158][ T4296] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.472024][ T4304] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 66.480939][ T4304] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 66.490219][ T4304] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 66.628960][ T3521] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.738844][ T3521] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 67.766301][ T3521] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 67.791013][ T4315] loop2: detected capacity change from 0 to 64 [ 67.814621][ T3521] usb 2-1: config 220 interface 0 has no altsetting 0 [ 68.618611][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.628538][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.638519][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.648516][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.658508][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.668537][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.678513][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.688516][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.698512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.708508][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.523047][ T4315] MINIX-fs: bad superblock or unable to read bitmaps [ 69.553050][ T3521] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 69.568625][ T3521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.621723][ T3521] usb 2-1: can't set config #220, error -71 [ 69.641052][ T4315] loop2: detected capacity change from 0 to 512 [ 69.653289][ T3521] usb 2-1: USB disconnect, device number 2 [ 69.713849][ T4315] EXT4-fs (loop2): Ignoring removed bh option [ 69.735734][ T4315] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.816134][ T4315] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.15: iget: bad extra_isize 90 (inode size 256) [ 69.850901][ T4315] EXT4-fs (loop2): Remounting filesystem read-only [ 69.863283][ T4315] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.15: error while reading EA inode 11 err=-117 [ 69.887759][ T4315] EXT4-fs (loop2): Remounting filesystem read-only [ 69.936221][ T4315] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.978345][ T4315] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.15: iget: bad extra_isize 90 (inode size 256) [ 70.020107][ T4315] EXT4-fs (loop2): Remounting filesystem read-only [ 70.068736][ T4315] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.15: error while reading EA inode 11 err=-117 [ 70.114508][ T4313] loop0: detected capacity change from 0 to 32768 [ 70.126902][ T4315] EXT4-fs (loop2): Remounting filesystem read-only [ 70.172155][ T4315] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.15: iget: bad extra_isize 90 (inode size 256) [ 70.239486][ T4315] EXT4-fs (loop2): Remounting filesystem read-only [ 70.258405][ T4313] XFS (loop0): Mounting V5 Filesystem [ 70.377497][ T4315] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.15: error while reading EA inode 18 err=-117 [ 70.632030][ T4313] XFS (loop0): Ending clean mount [ 70.681986][ T4196] XFS (loop0): Unmounting Filesystem [ 70.689768][ T4315] EXT4-fs (loop2): Remounting filesystem read-only [ 70.696785][ T4315] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.15: iget: bad extra_isize 90 (inode size 256) [ 70.967531][ T4315] EXT4-fs (loop2): Remounting filesystem read-only [ 71.361730][ T4315] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.15: error while reading EA inode 18 err=-117 [ 71.406674][ T4315] EXT4-fs (loop2): Remounting filesystem read-only [ 71.486694][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.495845][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.725637][ T4315] EXT4-fs (loop2): 1 orphan inode deleted [ 71.736255][ T4315] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,data_err=ignore,nombcache,min_batch_time=0x0000000000000003,. Quota mode: none. [ 72.519673][ T4348] orangefs_mount: mount request failed with -4 [ 72.871861][ T4362] loop2: detected capacity change from 0 to 2048 [ 73.073831][ T4362] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 73.100620][ T4362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.184764][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.549560][ T21] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 73.562078][ T21] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 73.572594][ T21] usb 1-1: config 220 interface 0 has no altsetting 0 [ 73.744260][ T21] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 73.755020][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.768771][ T21] usb 1-1: Product: syz [ 73.773176][ T21] usb 1-1: Manufacturer: syz [ 73.779229][ T21] usb 1-1: SerialNumber: syz [ 74.484081][ T4364] loop4: detected capacity change from 0 to 32768 [ 74.563654][ T21] usb 1-1: Found UVC 7.01 device syz (8086:0b03) [ 74.576677][ T21] usb 1-1: No valid video chain found. [ 74.591617][ T21] usb 1-1: USB disconnect, device number 2 [ 74.655626][ T4364] JBD2: Ignoring recovery information on journal [ 74.817713][ T4364] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 75.209517][ T4379] loop3: detected capacity change from 0 to 32768 [ 75.299874][ T4379] ======================================================= [ 75.299874][ T4379] WARNING: The mand mount option has been deprecated and [ 75.299874][ T4379] and is ignored by this kernel. Remove the mand [ 75.299874][ T4379] option from the mount to silence this warning. [ 75.299874][ T4379] ======================================================= [ 76.127471][ T4379] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 76.171554][ T4379] JBD2: Ignoring recovery information on journal [ 76.286673][ T4379] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 76.466021][ T4198] ocfs2: Unmounting device (7,4) on (node local) [ 77.123188][ T4379] OCFS2: ERROR (device loop3): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8 [ 77.143035][ T4379] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.152936][ T4379] OCFS2: File system is now read-only. [ 77.158728][ T4379] (syz.3.32,4379,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 77.167636][ T4379] (syz.3.32,4379,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 77.177116][ T4379] (syz.3.32,4379,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 77.186289][ T4379] (syz.3.32,4379,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 77.194452][ T4379] (syz.3.32,4379,0):ocfs2_write_begin_nolock:1745 ERROR: status = -30 [ 77.203188][ T4379] (syz.3.32,4379,0):ocfs2_write_begin:1908 ERROR: status = -30 [ 77.971891][ T4379] syz.3.32 (4379) used greatest stack depth: 20056 bytes left [ 78.066224][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 78.086819][ T4394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.007606][ T4428] loop2: detected capacity change from 0 to 256 [ 79.120317][ T4428] FAT-fs (loop2): Directory bread(block 64) failed [ 79.169154][ T4428] FAT-fs (loop2): Directory bread(block 65) failed [ 79.215382][ T4428] FAT-fs (loop2): Directory bread(block 66) failed [ 79.267781][ T4428] FAT-fs (loop2): Directory bread(block 67) failed [ 79.344016][ T4428] FAT-fs (loop2): Directory bread(block 68) failed [ 79.356807][ T4428] FAT-fs (loop2): Directory bread(block 69) failed [ 79.364078][ T4428] FAT-fs (loop2): Directory bread(block 70) failed [ 79.373077][ T4428] FAT-fs (loop2): Directory bread(block 71) failed [ 79.382228][ T4428] FAT-fs (loop2): Directory bread(block 72) failed [ 79.389821][ T4428] FAT-fs (loop2): Directory bread(block 73) failed [ 79.956052][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.641910][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 80.809294][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 81.153553][ T4234] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 81.164174][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.223316][ T4234] usb 4-1: Product: syz [ 81.263360][ T4234] usb 4-1: Manufacturer: syz [ 81.290732][ T4234] usb 4-1: SerialNumber: syz [ 81.830494][ T4234] usb 4-1: config 0 descriptor?? [ 81.930956][ T23] cfg80211: failed to load regulatory.db [ 81.950552][ T4234] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 81.989053][ T4472] loop4: detected capacity change from 0 to 256 [ 82.429597][ T4478] netlink: 'syz.1.59': attribute type 298 has an invalid length. [ 82.521217][ T4234] ssu100: probe of 4-1:0.0 failed with error -110 [ 83.111062][ T4481] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 83.179687][ T4486] loop4: detected capacity change from 0 to 256 [ 83.294254][ T4486] FAT-fs (loop4): Directory bread(block 64) failed [ 83.312707][ T4486] FAT-fs (loop4): Directory bread(block 65) failed [ 83.328770][ T4486] FAT-fs (loop4): Directory bread(block 66) failed [ 83.346670][ T4486] FAT-fs (loop4): Directory bread(block 67) failed [ 83.375005][ T4486] FAT-fs (loop4): Directory bread(block 68) failed [ 83.440216][ T4486] FAT-fs (loop4): Directory bread(block 69) failed [ 83.451903][ T4486] FAT-fs (loop4): Directory bread(block 70) failed [ 83.498896][ T4486] FAT-fs (loop4): Directory bread(block 71) failed [ 83.593139][ T4486] FAT-fs (loop4): Directory bread(block 72) failed [ 84.033716][ T4486] FAT-fs (loop4): Directory bread(block 73) failed [ 84.595213][ T1324] usb 4-1: USB disconnect, device number 2 [ 85.650925][ T4511] loop3: detected capacity change from 0 to 512 [ 85.899822][ T4511] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.69: corrupted in-inode xattr [ 85.968765][ T4511] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.69: couldn't read orphan inode 15 (err -117) [ 86.069088][ T4511] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.544399][ T4528] sched: RT throttling activated [ 87.658523][ T4531] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 88.326619][ T4533] netlink: 'syz.4.73': attribute type 298 has an invalid length. [ 90.805466][ T4564] loop4: detected capacity change from 0 to 256 [ 92.247444][ T4564] FAT-fs (loop4): Directory bread(block 64) failed [ 92.268645][ T4564] FAT-fs (loop4): Directory bread(block 65) failed [ 92.301341][ T4564] FAT-fs (loop4): Directory bread(block 66) failed [ 92.308267][ T4564] FAT-fs (loop4): Directory bread(block 67) failed [ 92.361165][ T4564] FAT-fs (loop4): Directory bread(block 68) failed [ 92.394791][ T4564] FAT-fs (loop4): Directory bread(block 69) failed [ 92.435122][ T4564] FAT-fs (loop4): Directory bread(block 70) failed [ 92.631009][ T4564] FAT-fs (loop4): Directory bread(block 71) failed [ 93.790535][ T4564] FAT-fs (loop4): Directory bread(block 72) failed [ 93.827612][ T4564] FAT-fs (loop4): Directory bread(block 73) failed [ 94.171343][ T4585] netlink: 'syz.3.86': attribute type 298 has an invalid length. [ 99.658785][ T4626] netlink: 'syz.0.99': attribute type 298 has an invalid length. [ 101.047795][ T4640] loop3: detected capacity change from 0 to 256 [ 101.247882][ T4640] FAT-fs (loop3): Directory bread(block 64) failed [ 101.262955][ T4640] FAT-fs (loop3): Directory bread(block 65) failed [ 101.298605][ T4640] FAT-fs (loop3): Directory bread(block 66) failed [ 101.368719][ T4640] FAT-fs (loop3): Directory bread(block 67) failed [ 101.376061][ T4640] FAT-fs (loop3): Directory bread(block 68) failed [ 101.388651][ T4640] FAT-fs (loop3): Directory bread(block 69) failed [ 101.403596][ T4640] FAT-fs (loop3): Directory bread(block 70) failed [ 101.438223][ T4640] FAT-fs (loop3): Directory bread(block 71) failed [ 101.483601][ T4640] FAT-fs (loop3): Directory bread(block 72) failed [ 101.508702][ T4640] FAT-fs (loop3): Directory bread(block 73) failed [ 101.583187][ T4639] chnl_net:caif_netlink_parms(): no params data found [ 102.481438][ T4655] loop2: detected capacity change from 0 to 32768 [ 102.534398][ T4655] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.105 (4655) [ 102.561335][ T4655] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 102.571531][ T4655] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 102.581477][ T4655] BTRFS info (device loop2): force lzo compression, level 0 [ 102.589511][ T4655] BTRFS info (device loop2): turning on async discard [ 102.596686][ T4655] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 102.607606][ T4655] BTRFS info (device loop2): trying to use backup root at mount time [ 102.618050][ T4655] BTRFS info (device loop2): enabling auto defrag [ 102.624948][ T4655] BTRFS info (device loop2): using free space tree [ 102.631827][ T4655] BTRFS info (device loop2): has skinny extents [ 102.767353][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.822425][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.834138][ T4639] device bridge_slave_0 entered promiscuous mode [ 102.849503][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.853594][ T4673] loop3: detected capacity change from 0 to 64 [ 102.857459][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.873523][ T4639] device bridge_slave_1 entered promiscuous mode [ 102.902922][ T4639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.960483][ T4639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.065400][ T4678] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 103.072935][ T4248] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 103.084911][ T4678] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 103.108556][ T4678] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 103.119119][ T4639] team0: Port device team_slave_0 added [ 103.160822][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 103.180440][ T4655] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 103.191944][ T9] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 103.218754][ T4639] team0: Port device team_slave_1 added [ 103.253452][ T4673] Trying to free block not in datazone [ 103.262760][ T4655] BTRFS warning (device loop2): couldn't read tree root [ 103.330280][ T4655] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 103.341699][ T4655] BTRFS warning (device loop2): couldn't read tree root [ 103.421267][ T4655] BTRFS info (device loop2): enabling ssd optimizations [ 103.429615][ T4655] BTRFS info (device loop2): clearing free space tree [ 103.437978][ T4639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.438165][ T4655] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.456212][ T4655] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.506462][ T4639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.511458][ T4655] BTRFS info (device loop2): creating free space tree [ 103.544275][ T4655] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.554738][ T4655] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.573627][ T4639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.595092][ T4639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.602488][ T4639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.632646][ T4639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.972991][ T4639] device hsr_slave_0 entered promiscuous mode [ 104.005215][ T4639] device hsr_slave_1 entered promiscuous mode [ 104.024186][ T4639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.049372][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.078020][ T4639] Cannot create hsr debugfs directory [ 104.344506][ T4707] loop3: detected capacity change from 0 to 256 [ 104.423299][ T1108] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 104.469685][ T1108] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 104.489827][ T1108] usb 5-1: config 220 interface 0 has no altsetting 0 [ 104.569773][ T4714] netlink: 27 bytes leftover after parsing attributes in process `syz.2.114'. [ 104.629106][ T4707] FAT-fs (loop3): Directory bread(block 64) failed [ 104.668919][ T1108] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 104.684407][ T4707] FAT-fs (loop3): Directory bread(block 65) failed [ 104.698289][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.737288][ T1108] usb 5-1: Product: syz [ 104.755058][ T4639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.764532][ T4707] FAT-fs (loop3): Directory bread(block 66) failed [ 104.788756][ T1108] usb 5-1: Manufacturer: syz [ 104.794176][ T1108] usb 5-1: SerialNumber: syz [ 104.812173][ T4639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.868825][ T4639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.879123][ T4707] FAT-fs (loop3): Directory bread(block 67) failed [ 104.885779][ T4707] FAT-fs (loop3): Directory bread(block 68) failed [ 104.923631][ T4639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.961899][ T4707] FAT-fs (loop3): Directory bread(block 69) failed [ 105.000012][ T4707] FAT-fs (loop3): Directory bread(block 70) failed [ 105.006881][ T4707] FAT-fs (loop3): Directory bread(block 71) failed [ 105.068767][ T4707] FAT-fs (loop3): Directory bread(block 72) failed [ 105.111835][ T4707] FAT-fs (loop3): Directory bread(block 73) failed [ 105.149412][ T4639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.183195][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.200097][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.205202][ T1108] usb 5-1: USB disconnect, device number 2 [ 105.221627][ T4639] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.266346][ T4703] Bluetooth: hci5: command 0x041b tx timeout [ 105.419855][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.449208][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.847499][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.854759][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.946567][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.163279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.216826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.260384][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.267729][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.314791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.358610][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.380498][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.408649][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.453141][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.469819][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.504585][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.558677][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.580408][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.620295][ T4639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.656561][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.686200][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.703244][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.093961][ T4734] netlink: 'syz.3.120': attribute type 30 has an invalid length. [ 107.118904][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.142991][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 107.183977][ T4734] bond0: option arp_missed_max: invalid value (0) [ 107.218304][ T4734] bond0: option arp_missed_max: allowed values 1 - 255 [ 107.274870][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.284688][ T4736] loop4: detected capacity change from 0 to 1024 [ 107.292952][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.309106][ T4703] Bluetooth: hci5: command 0x040f tx timeout [ 107.332477][ T4639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.498946][ T1108] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.538532][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.598559][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.607798][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.798988][ T1108] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.854376][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.908600][ T1108] usb 1-1: Product: syz [ 108.638321][ T1108] usb 1-1: Manufacturer: syz [ 108.679705][ T1108] cdc_wdm 1-1:1.0: skipping garbage [ 108.685176][ T1108] cdc_wdm 1-1:1.0: skipping garbage [ 108.725359][ T1108] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 108.731674][ T1108] cdc_wdm 1-1:1.0: Unknown control protocol [ 108.877190][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.891079][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.051893][ T4639] device veth0_vlan entered promiscuous mode [ 109.564979][ T4755] loop4: detected capacity change from 0 to 131072 [ 109.579243][ T4730] udc-core: couldn't find an available UDC or it's busy [ 109.586629][ T4730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.642333][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 109.657907][ T4755] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 109.667016][ T4755] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 109.683717][ T4755] F2FS-fs (loop4): invalid crc value [ 109.727402][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.745635][ T4755] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.778644][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.784546][ T4268] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.816921][ T4755] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 109.824420][ T4755] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 109.835342][ T4230] usb 1-1: USB disconnect, device number 3 [ 109.869351][ T4639] device veth1_vlan entered promiscuous mode [ 109.889488][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.908735][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.920698][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.026336][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.037858][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.086527][ T4639] device veth0_macvtap entered promiscuous mode [ 110.132499][ T4639] device veth1_macvtap entered promiscuous mode [ 110.208768][ T4268] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 110.374329][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.392424][ T4268] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 110.403422][ T4268] usb 4-1: config 220 interface 0 has no altsetting 0 [ 110.454405][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.978666][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.030317][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.078739][ T4268] usb 4-1: string descriptor 0 read error: -71 [ 113.085861][ T4268] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 113.106209][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.168171][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.205907][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.231012][ T4781] loop3: detected capacity change from 0 to 64 [ 113.265563][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.309018][ T4268] usb 4-1: can't set config #220, error -71 [ 113.327149][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.338372][ T4268] usb 4-1: USB disconnect, device number 3 [ 113.413208][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.424414][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.437513][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.447231][ T4773] netlink: 'syz.2.130': attribute type 298 has an invalid length. [ 113.457304][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.611698][ T4783] loop0: detected capacity change from 0 to 2048 [ 114.064950][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.306624][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.358888][ T4787] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.429408][ T26] audit: type=1800 audit(1778557083.265:2): pid=4782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="bus" dev="loop0" ino=2097152 res=0 errno=0 [ 114.453721][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.483469][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.542023][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.597538][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.675849][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.737239][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.798525][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.830168][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.868566][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.898525][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.930679][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.995745][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.306941][ T4639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.379006][ T4639] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.420616][ T4639] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.580000][ T4639] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.743039][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.861576][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.516475][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.525079][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.549320][ T4703] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.579490][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.715830][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.730646][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.827427][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.928881][ T4703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.980623][ T4703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.022926][ T4703] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.078945][ T4230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.151583][ T4703] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.352589][ T4703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.738804][ T4703] usb 1-1: config 0 descriptor?? [ 118.508994][ T4230] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 118.537357][ T4230] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 118.575383][ T4230] usb 4-1: config 220 interface 0 has no altsetting 0 [ 118.756860][ T4703] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 118.767483][ T4703] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 118.816882][ T4703] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 118.840160][ T4230] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 118.868117][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.882208][ T4230] usb 4-1: Product: syz [ 118.886716][ T4230] usb 4-1: Manufacturer: syz [ 118.907258][ T4230] usb 4-1: SerialNumber: syz [ 118.959035][ T4703] usb 1-1: USB disconnect, device number 4 [ 119.332974][ T4832] fido_id[4832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 120.057204][ T4230] usb 4-1: USB disconnect, device number 4 [ 120.600130][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.369025][ T1108] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.379115][ T1108] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 121.396956][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.440892][ T4307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.571610][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 121.583937][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 121.619442][ T4863] loop3: detected capacity change from 0 to 1024 [ 121.709505][ T1108] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.743886][ T4307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.913002][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.933480][ T1108] usb 1-1: Product: syz [ 121.937699][ T1108] usb 1-1: Manufacturer: syz [ 122.019736][ T1108] cdc_wdm 1-1:1.0: skipping garbage [ 122.038545][ T1108] cdc_wdm 1-1:1.0: skipping garbage [ 122.076031][ T1108] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 122.116399][ T1108] cdc_wdm 1-1:1.0: Unknown control protocol [ 122.368912][ T4307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.406264][ T4299] hfsplus: b-tree write err: -5, ino 25 [ 122.423600][ T4299] hfsplus: b-tree write err: -5, ino 4 [ 122.445676][ T4299] hfsplus: b-tree write err: -5, ino 2 [ 122.455480][ T4703] usb 1-1: USB disconnect, device number 5 [ 122.485075][ T4307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.399352][ T4264] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.849234][ T4264] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 123.910263][ T4264] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 123.972801][ T4264] usb 1-1: config 220 interface 0 has no altsetting 0 [ 124.008514][ T4264] usb 1-1: config 220 interface 1 has no altsetting 0 [ 124.239460][ T4264] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 124.335125][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.480003][ T4264] usb 1-1: Product: syz [ 124.548385][ T4264] usb 1-1: Manufacturer: syz [ 124.617200][ T4264] usb 1-1: SerialNumber: syz [ 125.187085][ T4264] usb 1-1: USB disconnect, device number 6 [ 125.191750][ T4908] loop3: detected capacity change from 0 to 164 [ 125.648922][ T4268] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 127.017363][ T4916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.036380][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.225798][ T4268] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 127.245298][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 127.274417][ T4268] usb 4-1: Product: syz [ 127.286076][ T4268] usb 4-1: Manufacturer: syz [ 127.302954][ T4268] usb 4-1: SerialNumber: syz [ 127.342287][ T4268] usb 4-1: config 0 descriptor?? [ 127.460404][ T4920] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.718714][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.741836][ T1108] usb 4-1: USB disconnect, device number 5 [ 128.188640][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 128.319472][ T7] usb 5-1: config 84 has an invalid interface number: 237 but max is 0 [ 128.517992][ T7] usb 5-1: config 84 has no interface number 0 [ 128.691565][ T7] usb 5-1: config 84 interface 237 has no altsetting 0 [ 128.974178][ T4268] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 129.379462][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 129.511532][ T4268] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 129.648890][ T7] usb 5-1: New USB device found, idVendor=78ce, idProduct=71c6, bcdDevice= b.b3 [ 129.661197][ T4268] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 129.668338][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.684958][ T7] usb 5-1: Product: syz [ 129.689281][ T7] usb 5-1: Manufacturer: syz [ 129.700091][ T7] usb 5-1: SerialNumber: syz [ 129.738663][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.844431][ T4268] usb 1-1: config 0 descriptor?? [ 129.980813][ T4934] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.298360][ T4963] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.883323][ T4268] usbhid 1-1:0.0: can't add hid device: -71 [ 131.909313][ T7] usb-storage 5-1:84.237: USB Mass Storage device detected [ 131.929209][ T4268] usbhid: probe of 1-1:0.0 failed with error -71 [ 131.968826][ T4268] usb 1-1: USB disconnect, device number 7 [ 132.741798][ T4972] loop4: detected capacity change from 0 to 131072 [ 132.765172][ T4307] device hsr_slave_0 left promiscuous mode [ 132.813307][ T7] usb 5-1: USB disconnect, device number 3 [ 132.838017][ T4972] F2FS-fs (loop4): invalid crc value [ 132.875193][ T4972] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.912779][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.921340][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.942184][ T4307] device hsr_slave_1 left promiscuous mode [ 132.954998][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.966018][ T4972] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 132.966206][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.050655][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.088549][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.138749][ T4307] device bridge_slave_1 left promiscuous mode [ 133.153042][ T4268] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.187682][ T26] audit: type=1800 audit(1778557102.025:3): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.180" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 133.193227][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.286935][ T4307] device bridge_slave_0 left promiscuous mode [ 133.310544][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.372209][ T4307] device veth1_macvtap left promiscuous mode [ 133.391634][ T4307] device veth0_macvtap left promiscuous mode [ 133.397962][ T4307] device veth1_vlan left promiscuous mode [ 133.420226][ T4307] device veth0_vlan left promiscuous mode [ 133.488946][ T4268] usb 1-1: Using ep0 maxpacket: 32 [ 133.629401][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.660992][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.676739][ T4268] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.689515][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.720040][ T4268] usb 1-1: config 0 descriptor?? [ 133.768245][ T4268] hub 1-1:0.0: USB hub found [ 134.054939][ T4307] team0 (unregistering): Port device team_slave_1 removed [ 134.095628][ T4307] team0 (unregistering): Port device team_slave_0 removed [ 134.120335][ T4268] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 134.147724][ T4307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.171672][ T4307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.286156][ T4307] bond0 (unregistering): Released all slaves [ 134.377982][ T4994] Zero length message leads to an empty skb [ 134.430773][ T4268] usbhid 1-1:0.0: can't add hid device: -71 [ 134.444637][ T4268] usbhid: probe of 1-1:0.0 failed with error -71 [ 134.521826][ T4268] usb 1-1: USB disconnect, device number 8 [ 141.168536][ T1108] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.589402][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 141.709306][ T1108] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.948944][ T1108] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 142.045701][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.232506][ T1108] usb 1-1: Product: syz [ 142.236923][ T1108] usb 1-1: Manufacturer: syz [ 142.282756][ T1108] usb 1-1: SerialNumber: syz [ 142.529476][ T1108] usb 1-1: config 0 descriptor?? [ 143.665210][ T7] usb 1-1: USB disconnect, device number 9 [ 145.468578][ T5004] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 145.959568][ T5004] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.258913][ T5004] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 146.313002][ T5004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.362190][ T5004] usb 4-1: Product: syz [ 146.397344][ T5004] usb 4-1: Manufacturer: syz [ 146.428546][ T5004] usb 4-1: SerialNumber: syz [ 147.320104][ T5004] usb 4-1: config 0 descriptor?? [ 147.588885][ T5004] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 147.626169][ T5004] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 147.709017][ T5004] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 147.738556][ T5004] usb 4-1: media controller created [ 147.777211][ T5004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.044922][ T5004] DVB: Unable to find symbol dib7000p_attach() [ 148.058490][ T5004] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 148.088400][ T5004] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 148.138856][ T5004] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 148.183091][ T5004] usb 4-1: media controller created [ 148.250602][ T5004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.301675][ T5004] dib0700: the master dib7090 has to be initialized first [ 148.338642][ T5004] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 148.578732][ T5004] rc_core: IR keymap rc-dib0700-rc5 not found [ 148.585187][ T5004] Registered IR keymap rc-empty [ 148.649060][ T5004] dvb-usb: could not initialize remote control. [ 148.774572][ T5004] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 149.199082][ T5004] usb 4-1: USB disconnect, device number 6 [ 149.721829][ T5004] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 150.647885][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 150.658365][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 150.659543][ T5188] __sock_release: fasync list not empty! [ 150.666054][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.666113][ T146] Workqueue: hci1 hci_rx_work [ 150.687304][ T146] Call Trace: [ 150.690697][ T146] [ 150.693919][ T146] dump_stack_lvl+0x188/0x250 [ 150.698651][ T146] ? show_regs_print_info+0x20/0x20 [ 150.704070][ T146] ? load_image+0x400/0x400 [ 150.705258][ T4189] Bluetooth: Unexpected start frame (len 12) [ 150.708618][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 150.708649][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 150.708666][ T146] ? process_one_work+0x85f/0x1010 [ 150.708690][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 150.708715][ T146] kobject_add_internal+0x6e0/0xd90 [ 150.708745][ T146] kobject_add+0x160/0x230 [ 150.708771][ T146] ? kobject_init+0x1d0/0x1d0 [ 150.708797][ T146] ? klist_children_get+0x50/0x50 [ 150.708818][ T146] ? get_device_parent+0x121/0x3f0 [ 150.708843][ T146] device_add+0x483/0xfb0 [ 150.708873][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 150.715295][ T4189] Bluetooth: Frame is too long (len 12, expected len 4) [ 150.720201][ T146] le_conn_complete_evt+0xc48/0x15c0 [ 150.720241][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 150.720271][ T146] ? __mutex_trylock_common+0x155/0x260 [ 150.794594][ T146] hci_le_meta_evt+0x285/0x3c90 [ 150.799604][ T146] ? hci_event_packet+0x37b/0x1370 [ 150.804924][ T146] ? __lock_acquire+0x7d10/0x7d10 [ 150.810153][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 150.816234][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 150.821963][ T146] ? mark_lock+0x94/0x320 [ 150.826472][ T146] ? mutex_unlock+0x10/0x10 [ 150.831249][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 150.837242][ T146] ? lock_chain_count+0x20/0x20 [ 150.842230][ T146] ? __rwlock_init+0x140/0x140 [ 150.847114][ T146] hci_event_packet+0xe48/0x1370 [ 150.852063][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 150.857390][ T146] ? rcu_lock_release+0x20/0x20 [ 150.862249][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 150.867544][ T146] hci_rx_work+0x255/0xa10 [ 150.872042][ T146] process_one_work+0x85f/0x1010 [ 150.877348][ T146] ? worker_detach_from_pool+0x240/0x240 [ 150.883163][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 150.888674][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 150.893703][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 150.899438][ T146] ? wq_worker_running+0x97/0x170 [ 150.904818][ T146] worker_thread+0xaa6/0x1290 [ 150.909639][ T146] kthread+0x436/0x520 [ 150.913795][ T146] ? rcu_lock_release+0x20/0x20 [ 150.918757][ T146] ? kthread_blkcg+0xd0/0xd0 [ 150.923348][ T146] ret_from_fork+0x1f/0x30 [ 150.927778][ T146] [ 150.932023][ T146] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 150.948658][ T146] Bluetooth: hci1: failed to register connection device [ 151.452814][ T5203] overlayfs: overlapping lowerdir path [ 155.928315][ T5250] ufs: You didn't specify the type of your ufs filesystem [ 155.928315][ T5250] [ 155.928315][ T5250] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 155.928315][ T5250] [ 155.928315][ T5250] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 155.960607][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.970732][ T5250] ufs: ufstype=old is supported read-only [ 155.979808][ T5250] blk_update_request: I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.771610][ T5257] loop4: detected capacity change from 0 to 256 [ 157.010624][ T5257] FAT-fs (loop4): Directory bread(block 64) failed [ 157.017418][ T5257] FAT-fs (loop4): Directory bread(block 65) failed [ 157.105520][ T5257] FAT-fs (loop4): Directory bread(block 66) failed [ 157.144561][ T5257] FAT-fs (loop4): Directory bread(block 67) failed [ 157.202989][ T5257] FAT-fs (loop4): Directory bread(block 68) failed [ 157.239079][ T5257] FAT-fs (loop4): Directory bread(block 69) failed [ 157.245928][ T5257] FAT-fs (loop4): Directory bread(block 70) failed [ 157.271727][ T5257] FAT-fs (loop4): Directory bread(block 71) failed [ 157.284871][ T5257] FAT-fs (loop4): Directory bread(block 72) failed [ 157.309415][ T5257] FAT-fs (loop4): Directory bread(block 73) failed [ 157.334707][ T5266] loop2: detected capacity change from 0 to 1024 [ 157.598101][ T5266] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 161.881666][ T5313] ufs: You didn't specify the type of your ufs filesystem [ 161.881666][ T5313] [ 161.881666][ T5313] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 161.881666][ T5313] [ 161.881666][ T5313] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 161.914423][ T5313] ufs: ufstype=old is supported read-only [ 161.923791][ T5313] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.160778][ T5328] overlayfs: overlapping lowerdir path [ 168.254658][ T5388] loop4: detected capacity change from 0 to 1024 [ 171.929101][ T5440] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 173.620399][ T4235] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 174.562704][ T5463] loop0: detected capacity change from 0 to 256 [ 174.628045][ T146] Bluetooth: Unexpected continuation frame (len 16) [ 175.045141][ T5463] FAT-fs (loop0): Directory bread(block 64) failed [ 175.052288][ T5463] FAT-fs (loop0): Directory bread(block 65) failed [ 175.059337][ T5463] FAT-fs (loop0): Directory bread(block 66) failed [ 175.066528][ T5463] FAT-fs (loop0): Directory bread(block 67) failed [ 175.074110][ T5463] FAT-fs (loop0): Directory bread(block 68) failed [ 175.081129][ T5463] FAT-fs (loop0): Directory bread(block 69) failed [ 175.088174][ T5463] FAT-fs (loop0): Directory bread(block 70) failed [ 175.095091][ T5463] FAT-fs (loop0): Directory bread(block 71) failed [ 175.102253][ T5463] FAT-fs (loop0): Directory bread(block 72) failed [ 175.108990][ T5463] FAT-fs (loop0): Directory bread(block 73) failed [ 176.009216][ T4235] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 176.089049][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.420365][ T4235] usb 3-1: config 0 descriptor?? [ 176.665635][ T4235] usb 3-1: can't set config #0, error -71 [ 177.128714][ T4235] usb 3-1: USB disconnect, device number 2 [ 178.540759][ T5532] loop2: detected capacity change from 0 to 2048 [ 178.738101][ T5532] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 178.856958][ T5532] [ 178.859642][ T5532] ====================================================== [ 178.867205][ T5532] WARNING: possible circular locking dependency detected [ 178.874339][ T5532] syzkaller #0 Not tainted [ 178.878956][ T5532] ------------------------------------------------------ [ 178.886091][ T5532] syz.2.309/5532 is trying to acquire lock: [ 178.892582][ T5532] ffff88805e1194b8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 178.902645][ T5532] [ 178.902645][ T5532] but task is already holding lock: [ 178.910559][ T5532] ffff88807e3d4c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 178.920821][ T5532] [ 178.920821][ T5532] which lock already depends on the new lock. [ 178.920821][ T5532] [ 178.931427][ T5532] [ 178.931427][ T5532] the existing dependency chain (in reverse order) is: [ 178.940484][ T5532] [ 178.940484][ T5532] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 178.949488][ T5532] percpu_down_read+0x46/0x1b0 [ 178.954936][ T5532] ext4_writepages+0x20f/0x2df0 [ 178.960424][ T5532] do_writepages+0x476/0x6e0 [ 178.965562][ T5532] __writeback_single_inode+0x153/0xda0 [ 178.971896][ T5532] writeback_single_inode+0x3cb/0x8e0 [ 178.977808][ T5532] write_inode_now+0x23b/0x2c0 [ 178.983278][ T5532] iput+0x5ab/0x8a0 [ 178.987708][ T5532] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 178.993790][ T5532] ext4_xattr_block_set+0x4fd/0x2d20 [ 178.999617][ T5532] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 179.005969][ T5532] __ext4_expand_extra_isize+0x301/0x3e0 [ 179.012670][ T5532] __ext4_mark_inode_dirty+0x469/0x700 [ 179.018782][ T5532] ext4_evict_inode+0xa8d/0x1090 [ 179.024273][ T5532] evict+0x4c9/0x8d0 [ 179.028886][ T5532] ext4_orphan_cleanup+0xad2/0x1320 [ 179.034810][ T5532] ext4_fill_super+0x8d6e/0x94f0 [ 179.040476][ T5532] mount_bdev+0x287/0x3c0 [ 179.045539][ T5532] legacy_get_tree+0xe6/0x180 [ 179.050871][ T5532] vfs_get_tree+0x88/0x270 [ 179.055867][ T5532] do_new_mount+0x24a/0xa40 [ 179.061011][ T5532] __se_sys_mount+0x2e3/0x3d0 [ 179.066508][ T5532] do_syscall_64+0x4c/0xa0 [ 179.074020][ T5532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.080655][ T5532] [ 179.080655][ T5532] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 179.088444][ T5532] __lock_acquire+0x2c42/0x7d10 [ 179.094153][ T5532] lock_acquire+0x19e/0x400 [ 179.099501][ T5532] down_write+0x38/0x60 [ 179.104560][ T5532] ext4_destroy_inline_data+0x24/0xe0 [ 179.110832][ T5532] ext4_writepages+0x670/0x2df0 [ 179.116252][ T5532] do_writepages+0x476/0x6e0 [ 179.121783][ T5532] filemap_fdatawrite_wbc+0x1eb/0x240 [ 179.127734][ T5532] file_write_and_wait_range+0x14d/0x220 [ 179.133951][ T5532] ext4_sync_file+0x1ff/0xae0 [ 179.139186][ T5532] ext4_buffered_write_iter+0x338/0x3b0 [ 179.145381][ T5532] ext4_file_write_iter+0x74d/0x1700 [ 179.151308][ T5532] vfs_write+0x745/0xd60 [ 179.156094][ T5532] __x64_sys_pwrite64+0x19a/0x220 [ 179.161745][ T5532] do_syscall_64+0x4c/0xa0 [ 179.166791][ T5532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.173327][ T5532] [ 179.173327][ T5532] other info that might help us debug this: [ 179.173327][ T5532] [ 179.183940][ T5532] Possible unsafe locking scenario: [ 179.183940][ T5532] [ 179.191763][ T5532] CPU0 CPU1 [ 179.197323][ T5532] ---- ---- [ 179.202890][ T5532] lock(&sbi->s_writepages_rwsem); [ 179.208213][ T5532] lock(&ei->xattr_sem); [ 179.215173][ T5532] lock(&sbi->s_writepages_rwsem); [ 179.223067][ T5532] lock(&ei->xattr_sem); [ 179.227945][ T5532] [ 179.227945][ T5532] *** DEADLOCK *** [ 179.227945][ T5532] [ 179.236596][ T5532] 2 locks held by syz.2.309/5532: [ 179.241735][ T5532] #0: ffff88807e3d2460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 179.251364][ T5532] #1: ffff88807e3d4c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 179.262269][ T5532] [ 179.262269][ T5532] stack backtrace: [ 179.268185][ T5532] CPU: 0 PID: 5532 Comm: syz.2.309 Not tainted syzkaller #0 [ 179.275499][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.285671][ T5532] Call Trace: [ 179.288975][ T5532] [ 179.292012][ T5532] dump_stack_lvl+0x188/0x250 [ 179.296736][ T5532] ? load_image+0x400/0x400 [ 179.301526][ T5532] ? show_regs_print_info+0x20/0x20 [ 179.306854][ T5532] ? print_circular_bug+0x12b/0x1a0 [ 179.312524][ T5532] check_noncircular+0x296/0x330 [ 179.317494][ T5532] ? add_chain_block+0x940/0x940 [ 179.322719][ T5532] ? lockdep_lock+0xf1/0x1f0 [ 179.327606][ T5532] ? mark_lock+0x94/0x320 [ 179.332432][ T5532] __lock_acquire+0x2c42/0x7d10 [ 179.337346][ T5532] ? verify_lock_unused+0x140/0x140 [ 179.342757][ T5532] ? mark_lock+0x94/0x320 [ 179.347216][ T5532] ? verify_lock_unused+0x140/0x140 [ 179.352534][ T5532] ? __lock_acquire+0x12e8/0x7d10 [ 179.357689][ T5532] lock_acquire+0x19e/0x400 [ 179.362341][ T5532] ? ext4_destroy_inline_data+0x24/0xe0 [ 179.367935][ T5532] ? read_lock_is_recursive+0x10/0x10 [ 179.373521][ T5532] ? rcu_read_lock_any_held+0xb0/0x130 [ 179.379107][ T5532] ? ext4_journal_check_start+0x180/0x250 [ 179.385043][ T5532] down_write+0x38/0x60 [ 179.389228][ T5532] ? ext4_destroy_inline_data+0x24/0xe0 [ 179.395093][ T5532] ext4_destroy_inline_data+0x24/0xe0 [ 179.400589][ T5532] ext4_writepages+0x670/0x2df0 [ 179.405875][ T5532] ? verify_lock_unused+0x140/0x140 [ 179.411195][ T5532] ? mark_lock+0x94/0x320 [ 179.415753][ T5532] ? __might_sleep+0xf0/0xf0 [ 179.420462][ T5532] ? ext4_readpage+0x2e0/0x2e0 [ 179.425534][ T5532] ? __lock_acquire+0x7d10/0x7d10 [ 179.430951][ T5532] ? do_raw_spin_lock+0x128/0x2f0 [ 179.436091][ T5532] ? do_raw_spin_unlock+0x11d/0x230 [ 179.441402][ T5532] ? ext4_readpage+0x2e0/0x2e0 [ 179.446449][ T5532] do_writepages+0x476/0x6e0 [ 179.451335][ T5532] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 179.456898][ T5532] ? __writepage+0x130/0x130 [ 179.461867][ T5532] ? __lock_acquire+0x7d10/0x7d10 [ 179.466914][ T5532] ? __rwlock_init+0x140/0x140 [ 179.474454][ T5532] ? generic_write_end+0x24d/0x3d0 [ 179.479689][ T5532] ? do_raw_spin_unlock+0x11d/0x230 [ 179.485096][ T5532] filemap_fdatawrite_wbc+0x1eb/0x240 [ 179.490784][ T5532] file_write_and_wait_range+0x14d/0x220 [ 179.496734][ T5532] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 179.502325][ T5532] ext4_sync_file+0x1ff/0xae0 [ 179.507145][ T5532] ext4_buffered_write_iter+0x338/0x3b0 [ 179.512893][ T5532] ext4_file_write_iter+0x74d/0x1700 [ 179.518436][ T5532] ? rcu_read_lock_any_held+0xb0/0x130 [ 179.524223][ T5532] ? ext4_file_read_iter+0x700/0x700 [ 179.529715][ T5532] ? end_current_label_crit_section+0x14b/0x170 [ 179.536105][ T5532] ? memset+0x1e/0x40 [ 179.540215][ T5532] ? iov_iter_init+0xb4/0x170 [ 179.545070][ T5532] vfs_write+0x745/0xd60 [ 179.549553][ T5532] ? file_end_write+0x250/0x250 [ 179.554769][ T5532] ? __fget_files+0x40f/0x480 [ 179.559480][ T5532] ? __fdget+0x18b/0x210 [ 179.563921][ T5532] ? __x64_sys_pwrite64+0xf2/0x220 [ 179.569149][ T5532] __x64_sys_pwrite64+0x19a/0x220 [ 179.574462][ T5532] ? ksys_pwrite64+0x1c0/0x1c0 [ 179.579805][ T5532] ? lockdep_hardirqs_on+0x94/0x140 [ 179.585209][ T5532] do_syscall_64+0x4c/0xa0 [ 179.590033][ T5532] ? clear_bhb_loop+0x30/0x80 [ 179.595164][ T5532] ? clear_bhb_loop+0x30/0x80 [ 179.599969][ T5532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.605888][ T5532] RIP: 0033:0x7f822a07ddd9 [ 179.610415][ T5532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.630946][ T5532] RSP: 002b:00007f82282d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 179.639655][ T5532] RAX: ffffffffffffffda RBX: 00007f822a2f6fa0 RCX: 00007f822a07ddd9 [ 179.647818][ T5532] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005 [ 179.656077][ T5532] RBP: 00007f822a113d69 R08: 0000000000000000 R09: 0000000000000000 [ 179.664156][ T5532] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 179.672338][ T5532] R13: 00007f822a2f7038 R14: 00007f822a2f6fa0 R15: 00007fff8fda7818 [ 179.680529][ T5532] [ 179.710234][ T5532] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 179.732357][ T5555] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 179.743517][ T5555] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 179.753478][ T5532] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 179.766334][ T5532] EXT4-fs (loop2): This should not happen!! Data will be lost [ 179.766334][ T5532] [ 179.778665][ T5532] EXT4-fs (loop2): Total free blocks count 0 [ 179.784813][ T5532] EXT4-fs (loop2): Free/Dirty block details [ 179.792829][ T5532] EXT4-fs (loop2): free_blocks=2415919504 [ 179.802044][ T5532] EXT4-fs (loop2): dirty_blocks=48 [ 179.807731][ T5532] EXT4-fs (loop2): Block reservation details [ 179.816510][ T5532] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 181.068847][ T4235] Bluetooth: hci1: command 0x0406 tx timeout [ 181.074899][ T4235] Bluetooth: hci0: command 0x0406 tx timeout [ 181.083088][ T5004] Bluetooth: hci3: command 0x0406 tx timeout [ 181.708612][ T5004] Bluetooth: hci4: command 0x0406 tx timeout