last executing test programs: 1m28.49800617s ago: executing program 1 (id=105): socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r4, 0x0, 0x0, 0x8880) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x9d, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffc8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) creat(0x0, 0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000001780), 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x8ed8fd038ecc8dc3, 0x0, r3, 0x0, &(0x7f0000000280)='./file0\x00', 0x88, 0x0, 0x1, {0x0, r5}}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) 1m27.273163599s ago: executing program 1 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1m26.717102427s ago: executing program 1 (id=113): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007bc}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@data_err_ignore}, {@bh}, {@errors_continue}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x9}) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 1m23.349977369s ago: executing program 1 (id=119): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',hide,unhide,hide,\x00'], 0x2, 0x6a0, &(0x7f0000000a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x4, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x3, 0x800, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x9, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xad3]}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000000)={@any, 0x3, 0x1, 0x3ff, 0x2, 0x5, "fe93203187599ae62c7c6590ad9d0a1f0c95a62f8bc5bfb066c96a697fdf0844c362c4c6c68e887dbf1314a787e5ec53d05dedd90ac8a86c0aac974c29de83725465bf5fc722783d97af9a34c64ce3ae98ef89b642fc188da80302bf4f54373039d52d332196ca07dbc7b90c6d74682e0fd1a97d32adbe608cfa2d3d2fe4f52f"}) mmap$binder(&(0x7f000092a000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x18000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0), 0x27, 0x0, &(0x7f0000000b80)="dbe1bd3daea502c50e5f316006d19a6129ec1b6b96aec3c8bdfc33a42e3c68ea9f795babcd14d6"}) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') getdents64(r6, &(0x7f0000000140)=""/50, 0x32) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2800001, 0x10010, r3, 0x22bf3000) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) 1m21.809787354s ago: executing program 1 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a000000120003006861"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000009060102000000009a2b0000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070067"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m20.599242743s ago: executing program 1 (id=127): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x9e, &(0x7f00000006c0)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) 1m20.452970875s ago: executing program 32 (id=127): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x9e, &(0x7f00000006c0)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) 40.176131073s ago: executing program 3 (id=227): syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000340), 0x8, 0x101083) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 39.596454943s ago: executing program 3 (id=229): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000540)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@block_validity}, {@lazytime}, {@nombcache}, {@usrjquota}]}, 0x3, 0x446, &(0x7f0000000ec0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQuFWp26AmSLSqICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dae2Z3nJmvd8ee2YkDGFjj6UMSsSsifo+I0Vq2scB47enm8uXZv5cvzyZRqbz5V1Itd2P58mxeNH/dzjwzFFH4NIkDLepduHgpLVG6kOUnF8+9N7lw8dKzZ87NnC6dLp2fPnHi2NGp549PP9eTONO4buz/cP7gvlffvvr67Mmr7/z8bZLH3xRHj4x3Ovh4pdLj6vqjkD3vrtuXDPWpMXStWOumMVzt/6NRjNWTNxqvfNLXxgGbqlKpVO5rf3ipAtzFkuh3C4D+yL/o0/lvvm3R0OOOcP3F2gQojftmttWODK3MbYeb5re9NB4RJ5f++SrdYnPuQwAANPg+Hf8802r8V4j6+0L/z9ZQxiLinojYExHHI2JvRNwbUS17f0Q80GX9zYska8c/hWsbCmyd0vHfC9naVuP4Lx/9xVgxy+2uxj+cnDpTLh3J3pPDMbwtzU91qOOHl3/7vN2x+vFfuqX152PBrB3XhrY1vmZuZnHmdmKud/3jiP1DreJPVlYCkojYFxH7N1jHmae+Odju2K3j76AH60yVryOeqJ3/pWiKP5d0Xp+c/F+US0cm86tirV9+vfJGu/pvK/4eSM//jpbX/0r8Y0ltvfbsTLlcurDQzV//8sn08cofn7Wd02z0+h9J3mrY98HM4uKFqYiR5LVao+v3TzeVm14tn8Z/+FDr/r8nVt+JAxGRXsQPRsRDEfFw1vZHIuLRiDjU4V346aXH3t14/JsrjX+uq/O/mhiJ5j2tE8WzP37XUOlYN/Gn5/9YNXU427Oez7/1tKvbqxkAAAD+qwoRsSuSwsRKulCYmKj9D//e2FEozy8sPn1q/v3zc7XfCIzFcCG/0zVadz90KpvW5/nppvzR7L7xF8Xt1fzE7Hx5rt/Bw4Db2ab/p/4s9rt1wKbzey0YXPo/DC79HwaX/g+Dq0X/396PdgBbr9X3/0d9aAew9Zr6v2U/GCDm/zC4NtL/fWbA3aFjXx7ZunYAW2phe9z6R/ISEmsSUbgjmiGxSYl+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xr8BAAD//4kK5gE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840) 36.819318456s ago: executing program 3 (id=236): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)) 36.521397301s ago: executing program 3 (id=238): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r0, &(0x7f0000000140)='3', 0x1, 0xfeca) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfffe82) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000006a80)={0x2, 0x7, 0x6, 0x6}) 31.124995604s ago: executing program 3 (id=249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 30.977006757s ago: executing program 3 (id=251): socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x3, 0x1, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) 17.342356279s ago: executing program 4 (id=283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001380)) close_range(r0, 0xffffffffffffffff, 0x0) 15.695993005s ago: executing program 33 (id=251): socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x3, 0x1, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) 15.639394626s ago: executing program 4 (id=286): unshare(0x400) socket$packet(0x11, 0xbf43a118dda5daa, 0x300) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 11.050987587s ago: executing program 4 (id=298): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) mknod$loop(0x0, 0x2000, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 9.5923259s ago: executing program 4 (id=301): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@none, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x840000000002, 0x3, 0x6) connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 8.31108412s ago: executing program 4 (id=305): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) close(0xffffffffffffffff) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) 7.412829914s ago: executing program 4 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x50}, 0x1, 0xba01}, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_clone(0xc0004000, 0x0, 0xffffffffffffff1f, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 6.739468445s ago: executing program 2 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xcf1c, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x400000, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setresgid(0xee00, 0xee01, 0x0) 6.589453516s ago: executing program 5 (id=309): prctl$PR_SCHED_CORE(0x42, 0x4, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) open(0x0, 0x14927e, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0xc0) 5.11350076s ago: executing program 5 (id=311): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 4.923109603s ago: executing program 2 (id=312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xc4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x9c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4.337134932s ago: executing program 2 (id=313): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2b, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="020000000a000200aaaaaaab"], 0x28}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv2(r6, &(0x7f0000000140)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 4.336714562s ago: executing program 0 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.189738164s ago: executing program 0 (id=315): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x15c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x60, "045625cac5216d1c778af0a976902919b9448c5d9f544e9e35d960a2e0f153904ad65a95"}}]}, 0x15c}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24003b84, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) r5 = socket(0x840000000002, 0x3, 0x6) connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 2.751063856s ago: executing program 2 (id=316): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x14, r5, 0x528ea124191aeb57, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) 2.733536457s ago: executing program 0 (id=317): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x5, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x30}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x0, 0x24048005}, 0x0) r5 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) r6 = dup3(r1, r5, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x0, @private=0x10000000}}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e22, @private=0xa010102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) r8 = dup(0xffffffffffffffff) bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) shutdown(r1, 0x0) socket$alg(0x26, 0x5, 0x0) 2.026158118s ago: executing program 2 (id=318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) epoll_create1(0x0) write$sndseq(r1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) pipe2$watch_queue(0x0, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x20, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x1000000, 0x6c}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 2.016372768s ago: executing program 0 (id=319): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 1.825172731s ago: executing program 0 (id=320): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.564881935s ago: executing program 5 (id=321): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 1.375003628s ago: executing program 0 (id=322): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x74ed00, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x404, &(0x7f0000000300), 0x3, 0x434, &(0x7f0000000680)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100080, 0x0) ioctl$TCGETS(r4, 0x5401, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.184004951s ago: executing program 5 (id=323): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x4000000a}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000000}) r4 = dup3(r2, r3, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)={0x30000010}) 1.182800151s ago: executing program 2 (id=324): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 717.117528ms ago: executing program 5 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0xfff1}, {0x2, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 0s ago: executing program 5 (id=326): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x2000c000) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x100) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000007080), 0x40040, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000340)={0x6, {{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0xa5d}}}, 0x84) lseek(r3, 0xffff, 0x1) unshare(0x2a020480) write$rfkill(r0, &(0x7f0000000080)={0xffffffff, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 50.860913][ T4158] cgroup: Unknown subsys name 'net' [ 50.997604][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.128184][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.955628][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 54.040114][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 54.065082][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 54.106520][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.114502][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.122311][ T4168] device bridge_slave_0 entered promiscuous mode [ 54.151835][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.161719][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.170322][ T4168] device bridge_slave_1 entered promiscuous mode [ 54.200652][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 54.237762][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 54.249863][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.287810][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.295128][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.302767][ T4172] device bridge_slave_0 entered promiscuous mode [ 54.311930][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.329244][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.336420][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.344962][ T4175] device bridge_slave_0 entered promiscuous mode [ 54.356551][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.363740][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.371325][ T4175] device bridge_slave_1 entered promiscuous mode [ 54.378526][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.385801][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.393522][ T4172] device bridge_slave_1 entered promiscuous mode [ 54.451179][ T4168] team0: Port device team_slave_0 added [ 54.470270][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.481507][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.492312][ T4168] team0: Port device team_slave_1 added [ 54.510047][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.520690][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.537698][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.545034][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.552837][ T4171] device bridge_slave_0 entered promiscuous mode [ 54.587016][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.594371][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.601932][ T4171] device bridge_slave_1 entered promiscuous mode [ 54.630507][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.637629][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.664095][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.680729][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.688181][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.695979][ T4177] device bridge_slave_0 entered promiscuous mode [ 54.705031][ T4175] team0: Port device team_slave_0 added [ 54.710981][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.718378][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.726167][ T4177] device bridge_slave_1 entered promiscuous mode [ 54.735988][ T4172] team0: Port device team_slave_0 added [ 54.742175][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.749186][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.775266][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.792704][ T4175] team0: Port device team_slave_1 added [ 54.812545][ T4172] team0: Port device team_slave_1 added [ 54.829957][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.860677][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.867731][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.893841][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.907967][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.921945][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.929002][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.955058][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.967498][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.977143][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.984537][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.011236][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.032966][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.040213][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.066320][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.079751][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.120436][ T4168] device hsr_slave_0 entered promiscuous mode [ 55.127644][ T4168] device hsr_slave_1 entered promiscuous mode [ 55.143784][ T4171] team0: Port device team_slave_0 added [ 55.166439][ T4171] team0: Port device team_slave_1 added [ 55.182323][ T4172] device hsr_slave_0 entered promiscuous mode [ 55.189075][ T4172] device hsr_slave_1 entered promiscuous mode [ 55.195852][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.203872][ T4172] Cannot create hsr debugfs directory [ 55.218032][ T4177] team0: Port device team_slave_0 added [ 55.241477][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.248579][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.274621][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.287932][ T4177] team0: Port device team_slave_1 added [ 55.309615][ T4175] device hsr_slave_0 entered promiscuous mode [ 55.316375][ T4175] device hsr_slave_1 entered promiscuous mode [ 55.322854][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.330585][ T4175] Cannot create hsr debugfs directory [ 55.337518][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.344694][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.370698][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.440154][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.448016][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.474146][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.500050][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.507158][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.533101][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.624843][ T4177] device hsr_slave_0 entered promiscuous mode [ 55.631593][ T4177] device hsr_slave_1 entered promiscuous mode [ 55.639072][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 55.645384][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.652958][ T4177] Cannot create hsr debugfs directory [ 55.677784][ T4171] device hsr_slave_0 entered promiscuous mode [ 55.684811][ T4171] device hsr_slave_1 entered promiscuous mode [ 55.691394][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.699358][ T4171] Cannot create hsr debugfs directory [ 55.713813][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 55.713896][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 55.729086][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 55.733391][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 55.893214][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.905156][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.917444][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.930525][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.975034][ T4172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.985549][ T4172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.002207][ T4172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.011208][ T4172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.093588][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.106010][ T4177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.135713][ T4177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.155116][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.164923][ T4177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.175247][ T4177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.185455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.195104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.221851][ T4175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.235353][ T4175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.247922][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.259724][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.269028][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.276224][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.286346][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.295481][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.304842][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.311893][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.319742][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.333643][ T4175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.341908][ T4175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.379262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.406669][ T4171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.419460][ T4171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.437022][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.450807][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.458942][ T4171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.468741][ T4171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.506222][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.529314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.538979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.547934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.557253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.589967][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.600694][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.612172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.620790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.630451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.639175][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.646411][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.654213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.664337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.672732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.681032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.689941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.698841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.707906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.715744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.744061][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.757326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.766220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.775014][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.782199][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.791168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.800572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.814539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.824924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.842598][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.865729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.876976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.887680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.896292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.905771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.918676][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.925812][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.935559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.945198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.953708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.970856][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.984118][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.999338][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.009604][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.016905][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.032039][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.041084][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.084543][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.095036][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.104980][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.116313][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.125165][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.133748][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.142088][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.150362][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.167671][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.177867][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.202285][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.211058][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.219144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.228585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.237908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.247804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.256563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.265394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.272821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.281443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.295818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.305911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.314946][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.322036][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.332825][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.358568][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.372194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.403822][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.423576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.439180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.449387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.466534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.476563][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.483720][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.491648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.517864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.529137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.557030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.566163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.576328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.586070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.595514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.605062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.614015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.622556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.632500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.641472][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.648618][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.662814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.671752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.698085][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.710877][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.718677][ T4212] Bluetooth: hci0: command 0x041b tx timeout [ 57.738169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.751995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.761404][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.768582][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.779654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.788684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.797681][ T1110] Bluetooth: hci2: command 0x041b tx timeout [ 57.798506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.804394][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 57.819081][ T1110] Bluetooth: hci3: command 0x041b tx timeout [ 57.826584][ T4168] device veth0_vlan entered promiscuous mode [ 57.834076][ T1110] Bluetooth: hci4: command 0x041b tx timeout [ 57.860367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.869436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.886107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.896872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.906861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.916903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.925011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.932498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.941049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.948856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.970978][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.984292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.991753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.000293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.009064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.018726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.027665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.040536][ T4168] device veth1_vlan entered promiscuous mode [ 58.050686][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.074245][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.081337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.090938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.117268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.126853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.145511][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.159008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.168897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.207761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.217326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.228002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.238279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.250057][ T4168] device veth0_macvtap entered promiscuous mode [ 58.278969][ T4175] device veth0_vlan entered promiscuous mode [ 58.294369][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.302544][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.317430][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.326399][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.335506][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.344179][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.352187][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.361581][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.369755][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.377905][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.386036][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.396638][ T4168] device veth1_macvtap entered promiscuous mode [ 58.422145][ T4175] device veth1_vlan entered promiscuous mode [ 58.430996][ T4172] device veth0_vlan entered promiscuous mode [ 58.470417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.485654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.494841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.502967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.511320][ T4177] device veth0_vlan entered promiscuous mode [ 58.527004][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.536847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.545129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.552803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.560896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.571489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.588812][ T4172] device veth1_vlan entered promiscuous mode [ 58.599471][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.621641][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.631366][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.640845][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.649789][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.660770][ T4177] device veth1_vlan entered promiscuous mode [ 58.669973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.678565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.688121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.697037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.706209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.715824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.732334][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.740759][ T4175] device veth0_macvtap entered promiscuous mode [ 58.761419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.777501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.789549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.802958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.824966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.836055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.845303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.861397][ T4175] device veth1_macvtap entered promiscuous mode [ 58.882643][ T4172] device veth0_macvtap entered promiscuous mode [ 58.915831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.934854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.943972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.952733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.965346][ T4172] device veth1_macvtap entered promiscuous mode [ 58.985708][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.011201][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.022832][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.037054][ T4177] device veth0_macvtap entered promiscuous mode [ 59.049440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.058212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.066460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.078406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.092100][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.109712][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.122494][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.148244][ T4177] device veth1_macvtap entered promiscuous mode [ 59.164006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.175061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.190867][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.203769][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.212594][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.222461][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.244644][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.255359][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.266614][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.277147][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.290157][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.314265][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.322284][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.349375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.358193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.367022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.381749][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.392459][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.402481][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.413566][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.424532][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.461971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.471761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.483105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.491805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.501509][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.512374][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.524772][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.535482][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.545709][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.557049][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.568007][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.586636][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.591379][ T4172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.603705][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.607476][ T4172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.621195][ T4172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.630062][ T4172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.645675][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.654802][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.663846][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.684929][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.695760][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.706016][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.718445][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.728611][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.739309][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.750134][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.762915][ T4177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.772577][ T4177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.781833][ T4177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.791806][ T4177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.793526][ T4219] Bluetooth: hci0: command 0x040f tx timeout [ 59.807855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.817312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.827344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.836463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.845626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.854327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.865508][ T4171] device veth0_vlan entered promiscuous mode [ 59.874050][ T4219] Bluetooth: hci4: command 0x040f tx timeout [ 59.880812][ T4219] Bluetooth: hci3: command 0x040f tx timeout [ 59.887963][ T4219] Bluetooth: hci1: command 0x040f tx timeout [ 59.894558][ T4219] Bluetooth: hci2: command 0x040f tx timeout [ 59.944454][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.956743][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.962978][ T4171] device veth1_vlan entered promiscuous mode [ 60.012175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.028263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.093432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.519291][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.531219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.556470][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.572111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.720032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.813517][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.854649][ T4171] device veth0_macvtap entered promiscuous mode [ 60.916026][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.949911][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.072517][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.200915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.276286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.354022][ T4171] device veth1_macvtap entered promiscuous mode [ 61.427904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.530369][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.570928][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.620226][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.659889][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.700758][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.735102][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.750096][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.790346][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.833605][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.844855][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.873378][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.882688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.895877][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 61.920221][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.939917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.954660][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 61.962751][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 61.985511][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 62.008794][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.021436][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 62.047647][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.109552][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.117801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.191626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.239800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.435499][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.537210][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.649346][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.790980][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.851783][ T4260] loop2: detected capacity change from 0 to 128 [ 62.868304][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.956700][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.022351][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.033406][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.046701][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.057985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.068623][ T4260] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 63.069506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.094920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.123412][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.131404][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.150016][ T4171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.170261][ T4171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.180018][ T4171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.213054][ T4171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.245282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.314882][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.359544][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.552971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.965401][ T4264] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 64.201824][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.212855][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.268833][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.280278][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.293205][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.863044][ T4272] Zero length message leads to an empty skb [ 65.742561][ T4267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.060267][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.872049][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 67.013395][ T4286] device hsr_slave_1 left promiscuous mode [ 67.015074][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.197939][ T4290] loop2: detected capacity change from 0 to 1024 [ 67.208944][ T26] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.274234][ T4290] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 67.323205][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.723581][ T4290] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 67.746333][ T4290] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.788827][ T4290] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 68.103651][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.113063][ T26] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 68.574030][ T26] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 68.579568][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.582382][ T26] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 68.593365][ T13] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 68.685177][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.699909][ T13] usb 4-1: config 0 descriptor?? [ 68.749813][ T26] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 68.762274][ T26] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 68.773526][ T26] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 68.853951][ T4310] loop2: detected capacity change from 0 to 164 [ 69.899141][ T25] audit: type=1326 audit(1750060552.419:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d25414929 code=0x7ffc0000 [ 69.921567][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.941979][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.004999][ T4309] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 70.047066][ T25] audit: type=1326 audit(1750060552.439:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d25414929 code=0x7ffc0000 [ 70.081094][ T25] audit: type=1326 audit(1750060552.439:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f2d25414929 code=0x7ffc0000 [ 70.103106][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.103841][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 70.115824][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 70.163429][ T26] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 70.207331][ T13] usb 4-1: USB disconnect, device number 2 [ 70.268011][ T4312] loop3: detected capacity change from 0 to 8192 [ 70.277261][ T4314] loop4: detected capacity change from 0 to 1024 [ 70.291739][ T26] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 70.422790][ T25] audit: type=1326 audit(1750060552.439:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d25414929 code=0x7ffc0000 [ 70.440005][ T26] usb 2-1: Product: syz [ 70.469801][ T4321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.556847][ T26] usb 2-1: Manufacturer: syz [ 70.562001][ T26] usb 2-1: SerialNumber: syz [ 71.181120][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.187807][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.247019][ T4312] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 71.293103][ T26] usb 2-1: config 0 descriptor?? [ 71.300950][ T25] audit: type=1326 audit(1750060552.439:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d25414929 code=0x7ffc0000 [ 71.304004][ T4312] REISERFS (device loop3): using ordered data mode [ 71.322877][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.323308][ T26] usb 2-1: can't set config #0, error -71 [ 71.331113][ T4312] reiserfs: using flush barriers [ 71.351540][ T4312] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.370249][ T4312] REISERFS (device loop3): checking transaction log (loop3) [ 71.400060][ T25] audit: type=1326 audit(1750060552.439:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2d25414929 code=0x7ffc0000 [ 71.516462][ T26] usb 2-1: USB disconnect, device number 2 [ 71.684063][ T25] audit: type=1326 audit(1750060552.439:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d25414929 code=0x7ffc0000 [ 72.448278][ T4259] hfsplus: b-tree write err: -5, ino 4 [ 73.556340][ T25] audit: type=1326 audit(1750060552.439:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d25414929 code=0x7ffc0000 [ 73.798274][ T25] audit: type=1326 audit(1750060552.439:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d25414929 code=0x7ffc0000 [ 73.866583][ T4312] REISERFS (device loop3): Using tea hash to sort names [ 73.916664][ T4312] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 73.980582][ T25] audit: type=1326 audit(1750060552.439:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d25414929 code=0x7ffc0000 [ 74.264673][ T4353] loop0: detected capacity change from 0 to 1024 [ 74.392339][ T4227] hfsplus: b-tree write err: -5, ino 4 [ 74.424729][ T4227] hfsplus: b-tree write err: -5, ino 4 [ 74.550899][ T4346] loop2: detected capacity change from 0 to 32768 [ 74.822590][ T4346] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.22 (4346) [ 75.192760][ T4364] loop0: detected capacity change from 0 to 16 [ 75.656220][ T4364] erofs: (device loop0): mounted with root inode @ nid 36. [ 75.694407][ T4346] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 75.794218][ T4369] loop4: detected capacity change from 0 to 1024 [ 75.801849][ T4346] BTRFS info (device loop2): enabling auto defrag [ 75.824410][ T4346] BTRFS info (device loop2): setting nodatacow, compression disabled [ 76.034905][ T4346] BTRFS info (device loop2): turning on async discard [ 76.042587][ T4346] BTRFS info (device loop2): using free space tree [ 76.050903][ T4346] BTRFS info (device loop2): has skinny extents [ 76.161706][ T7] cfg80211: failed to load regulatory.db [ 76.170983][ T4369] EXT4-fs (loop4): Ignoring removed orlov option [ 76.307590][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 76.317233][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 76.326506][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 76.335695][ T4373] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 311295 of nid 36 [ 76.345821][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 76.355119][ T4373] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 76.365276][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 76.374529][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 76.384284][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 76.393612][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 76.402873][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 76.412076][ T4373] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 76.422340][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 76.431470][ T4373] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 76.440436][ T4369] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 76.441624][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 76.473651][ T4373] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36 [ 76.483696][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 76.492803][ T4373] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 249855 of nid 36 [ 76.502862][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 76.512169][ T4373] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 245759 of nid 36 [ 76.522262][ T4373] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 76.531612][ T4373] attempt to access beyond end of device [ 76.531612][ T4373] loop0: rw=524288, want=1183616, limit=16 [ 76.543086][ T4373] attempt to access beyond end of device [ 76.543086][ T4373] loop0: rw=524288, want=312, limit=16 [ 76.554153][ T4373] attempt to access beyond end of device [ 76.554153][ T4373] loop0: rw=524288, want=1048992, limit=16 [ 76.565671][ T4373] attempt to access beyond end of device [ 76.565671][ T4373] loop0: rw=524288, want=24, limit=16 [ 76.576811][ T4373] attempt to access beyond end of device [ 76.576811][ T4373] loop0: rw=524288, want=688, limit=16 [ 77.128986][ T4346] BTRFS error (device loop2): open_ctree failed: -12 [ 77.271296][ T4293] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4293) [ 78.128057][ T4398] ODEBUG: Out of memory. ODEBUG disabled [ 78.488989][ T4415] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET) [ 82.654161][ T4439] loop3: detected capacity change from 0 to 512 [ 82.765667][ T4439] ======================================================= [ 82.765667][ T4439] WARNING: The mand mount option has been deprecated and [ 82.765667][ T4439] and is ignored by this kernel. Remove the mand [ 82.765667][ T4439] option from the mount to silence this warning. [ 82.765667][ T4439] ======================================================= [ 82.938449][ T4439] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 82.965086][ T4439] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.061654][ T4434] loop1: detected capacity change from 0 to 32768 [ 83.305507][ T4449] loop0: detected capacity change from 0 to 40427 [ 83.315774][ T4449] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 83.322884][ T4449] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 83.335719][ T4449] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x1ffff [ 83.344906][ T4449] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 83.386758][ T4449] F2FS-fs (loop0): invalid crc value [ 83.918881][ T4449] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.978893][ T4434] XFS (loop1): Mounting V5 Filesystem [ 84.031979][ T4449] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 84.035610][ T4460] loop3: detected capacity change from 0 to 512 [ 84.039407][ T4449] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.716456][ T4177] attempt to access beyond end of device [ 84.716456][ T4177] loop0: rw=2049, want=45104, limit=40427 [ 84.729425][ T4460] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 84.738228][ T4460] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 84.781178][ T4460] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 84.817021][ T4434] XFS (loop1): Ending clean mount [ 84.906869][ T4460] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 84.947308][ T4460] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 85.015795][ T4460] EXT4-fs (loop3): 1 truncate cleaned up [ 85.023125][ T25] kauditd_printk_skb: 18 callbacks suppressed [ 85.023141][ T25] audit: type=1804 audit(1750060568.607:30): pid=4470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.35" name="/newroot/9/bus/file1" dev="loop1" ino=9286 res=1 errno=0 [ 85.052518][ T4460] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,nomblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 85.111157][ T25] audit: type=1804 audit(1750060568.697:31): pid=4434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.35" name="/newroot/9/bus/file1" dev="loop1" ino=9286 res=1 errno=0 [ 85.151768][ T4168] XFS (loop1): Unmounting Filesystem [ 85.235306][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.335226][ T4460] EXT4-fs (loop3): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpquota,noquota,quota,noload,noload,. Quota mode: writeback. [ 85.595553][ T1110] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 85.615679][ T4474] loop0: detected capacity change from 0 to 256 [ 85.651545][ T1110] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 85.662255][ T4474] exfat: Deprecated parameter 'namecase' [ 85.675285][ T4474] exfat: Deprecated parameter 'utf8' [ 85.677481][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.685451][ T4474] exfat: Unknown parameter 'keep_last_dots' [ 85.971448][ T1110] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 87.286773][ T4293] udevd[4293]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.630363][ T4498] overlayfs: overlapping lowerdir path [ 89.001752][ T1110] usb 3-1: USB disconnect, device number 2 [ 90.236008][ T4520] loop3: detected capacity change from 0 to 1024 [ 90.366850][ T4520] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.505840][ T25] audit: type=1800 audit(1750060574.086:32): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 91.561985][ T4506] loop0: detected capacity change from 0 to 32768 [ 91.779334][ T4506] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 91.779334][ T4506] [ 91.838581][ T4506] ERROR: (device loop0): remounting filesystem as read-only [ 91.870046][ T4506] ERROR: (device loop0): jfs_rename: [ 91.870046][ T4506] [ 91.891815][ T4506] ERROR: (device loop0): remounting filesystem as read-only [ 91.986543][ T4548] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.59: Allocating blocks 497-513 which overlap fs metadata [ 92.009774][ T4548] EXT4-fs (loop3): pa ffff888060aaf620: logic 256, phys. 385, len 8 [ 92.018299][ T4548] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 92.212339][ T4177] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 92.212339][ T4177] [ 92.406396][ T4552] loop3: detected capacity change from 0 to 128 [ 92.428990][ T4552] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 92.656741][ T4552] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 92.773237][ T4558] loop1: detected capacity change from 0 to 128 [ 93.755328][ T4545] loop2: detected capacity change from 0 to 32768 [ 95.075705][ T4587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.77'. [ 96.171249][ T4600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.80'. [ 97.105095][ T4603] loop2: detected capacity change from 0 to 40427 [ 97.813022][ T4603] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 97.820817][ T4603] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 97.830116][ T4603] F2FS-fs (loop2): build fault injection attr: rate: 351, type: 0x1ffff [ 97.977325][ T4603] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 98.021514][ T4603] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 98.044633][ C1] F2FS-fs (loop2) : inject read IO error in f2fs_read_end_io of blk_update_request+0x876/0x1200 [ 98.082525][ C0] F2FS-fs (loop2) : inject read IO error in f2fs_read_end_io of blk_update_request+0x876/0x1200 [ 98.151023][ C1] F2FS-fs (loop2) : inject read IO error in f2fs_read_end_io of blk_update_request+0x876/0x1200 [ 98.162845][ T4603] attempt to access beyond end of device [ 98.162845][ T4603] loop2: rw=8192, want=40432, limit=40427 [ 98.175087][ T4603] attempt to access beyond end of device [ 98.175087][ T4603] loop2: rw=8192, want=40440, limit=40427 [ 98.186952][ T4603] attempt to access beyond end of device [ 98.186952][ T4603] loop2: rw=8192, want=40448, limit=40427 [ 98.199125][ T4603] attempt to access beyond end of device [ 98.199125][ T4603] loop2: rw=8192, want=40456, limit=40427 [ 98.211127][ T4603] attempt to access beyond end of device [ 98.211127][ T4603] loop2: rw=8192, want=40464, limit=40427 [ 98.222646][ T4603] attempt to access beyond end of device [ 98.222646][ T4603] loop2: rw=8192, want=40472, limit=40427 [ 98.234070][ T4603] attempt to access beyond end of device [ 98.234070][ T4603] loop2: rw=8192, want=40480, limit=40427 [ 98.245568][ T4603] attempt to access beyond end of device [ 98.245568][ T4603] loop2: rw=8192, want=40488, limit=40427 [ 98.257066][ T4603] attempt to access beyond end of device [ 98.257066][ T4603] loop2: rw=8192, want=40496, limit=40427 [ 98.268550][ T4603] attempt to access beyond end of device [ 98.268550][ T4603] loop2: rw=8192, want=40504, limit=40427 [ 98.274560][ T4612] loop4: detected capacity change from 0 to 2048 [ 98.287043][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.314113][ T4603] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-5) [ 98.452061][ T4612] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.488225][ T4612] NILFS (loop4): mounting unchecked fs [ 98.494450][ T4612] NILFS (loop4): recovery required for readonly filesystem [ 98.503385][ T4612] NILFS (loop4): write access will be enabled during recovery [ 98.536761][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 98.567516][ T4612] NILFS (loop4): recovery complete [ 98.658439][ T4347] udevd[4347]: incorrect nilfs2 checksum on /dev/loop4 [ 98.847119][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.255668][ T4347] udevd[4347]: incorrect nilfs2 checksum on /dev/loop4 [ 99.367378][ T1108] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 99.376481][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.386348][ T1108] usb 1-1: config 0 descriptor?? [ 99.774403][ T4630] loop2: detected capacity change from 0 to 16 [ 99.856703][ T4630] erofs: (device loop2): mounted with root inode @ nid 36. [ 100.410225][ T1108] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 101.069928][ T4636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 101.304221][ T4633] usb 1-1: USB disconnect, device number 2 [ 102.667244][ T4633] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.107991][ T4633] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.211767][ T4633] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 103.247403][ T4633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.340237][ T4633] usb 4-1: config 0 descriptor?? [ 103.378717][ T4633] pwc: Askey VC010 type 2 USB webcam detected. [ 103.627593][ T4215] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.057398][ T4215] usb 3-1: Using ep0 maxpacket: 16 [ 104.067624][ T4633] pwc: recv_control_msg error -71 req 02 val 2700 [ 104.154630][ T4633] pwc: recv_control_msg error -71 req 02 val 2c00 [ 104.182140][ T4633] pwc: recv_control_msg error -71 req 04 val 1000 [ 104.182741][ T4677] loop1: detected capacity change from 0 to 16 [ 104.303553][ T4633] pwc: recv_control_msg error -71 req 04 val 1300 [ 104.310355][ T4215] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.323089][ T4215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.334245][ T4215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.344696][ T4633] pwc: recv_control_msg error -71 req 04 val 1400 [ 104.351357][ T4215] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.008505][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.032287][ T4677] erofs: (device loop1): mounted with root inode @ nid 36. [ 105.047617][ T4633] pwc: recv_control_msg error -71 req 02 val 2000 [ 105.108495][ T4215] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.200409][ T4633] pwc: recv_control_msg error -71 req 02 val 2100 [ 105.237741][ T4633] pwc: recv_control_msg error -71 req 04 val 1500 [ 105.257921][ T4633] pwc: recv_control_msg error -71 req 02 val 2500 [ 105.277657][ T4633] pwc: recv_control_msg error -71 req 02 val 2400 [ 106.105059][ T4215] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 106.142443][ T4215] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 106.150761][ T4633] pwc: recv_control_msg error -71 req 02 val 2600 [ 106.157325][ T4215] usb 3-1: Manufacturer: syz [ 106.164319][ T4215] usb 3-1: config 0 descriptor?? [ 106.169645][ T4633] pwc: recv_control_msg error -71 req 02 val 2900 [ 106.207753][ T4633] pwc: recv_control_msg error -71 req 02 val 2800 [ 106.221113][ T4686] loop4: detected capacity change from 0 to 512 [ 106.257730][ T1108] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 106.275689][ T4633] pwc: recv_control_msg error -71 req 04 val 1100 [ 106.286831][ T1108] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 106.298894][ T4686] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.104: corrupted in-inode xattr [ 106.327752][ T4633] pwc: recv_control_msg error -71 req 04 val 1200 [ 106.354501][ T4686] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.104: couldn't read orphan inode 15 (err -117) [ 106.398232][ T4686] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,i_version,auto_da_alloc,nobarrier,noblock_validity,,errors=continue. Quota mode: none. [ 106.449199][ T1108] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.549048][ T4633] pwc: Registered as video103. [ 106.678448][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.724835][ T4633] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 107.289687][ T4633] usb 4-1: USB disconnect, device number 3 [ 107.517808][ T4215] rc_core: IR keymap rc-hauppauge not found [ 107.523751][ T4215] Registered IR keymap rc-empty [ 107.592933][ T4710] process 'syz.3.108' launched './file0' with NULL argv: empty string added [ 107.841985][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.880163][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.066831][ T4215] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 108.093042][ T4215] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 108.198690][ T4727] Cannot find add_set index 0 as target [ 108.437485][ T4723] loop1: detected capacity change from 0 to 1024 [ 108.558866][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 108.918165][ T4723] EXT4-fs (loop1): Ignoring removed nobh option [ 108.927997][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.008700][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.019665][ T4723] EXT4-fs (loop1): Ignoring removed bh option [ 109.868385][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.898132][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.938212][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.988142][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.028235][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.068157][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.068378][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 110.108156][ T4215] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.126517][ T4723] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007bc,data_err=ignore,grpquota,nobh,data_err=ignore,bh,errors=continue,,errors=continue. Quota mode: writeback. [ 110.179616][ T4215] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 110.187648][ T4215] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 110.272137][ T4215] usb 3-1: USB disconnect, device number 3 [ 110.338309][ T1108] usb 1-1: can't set config #27, error -71 [ 110.356848][ T4723] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.113: Allocating blocks 497-513 which overlap fs metadata [ 110.385143][ T1108] usb 1-1: USB disconnect, device number 3 [ 110.392665][ T4748] loop4: detected capacity change from 0 to 16 [ 110.423422][ T4748] erofs: (device loop4): mounted with root inode @ nid 36. [ 110.431528][ T4723] EXT4-fs (loop1): pa ffff888060aafc40: logic 256, phys. 385, len 8 [ 110.439699][ T4723] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 110.455865][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.644875][ T4744] device bridge_slave_1 left promiscuous mode [ 111.366564][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.045938][ T4760] loop1: detected capacity change from 0 to 164 [ 112.134242][ T4760] Unable to read rock-ridge attributes [ 112.318020][ T4766] Unable to read rock-ridge attributes [ 112.888268][ T4766] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 112.921581][ T4168] Unable to read rock-ridge attributes [ 112.927624][ T4168] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 113.020720][ T4168] Unable to read rock-ridge attributes [ 113.100305][ T4168] Unable to read rock-ridge attributes [ 113.106712][ T4168] Unable to read rock-ridge attributes [ 113.127344][ T4168] Unable to read rock-ridge attributes [ 113.155790][ T4168] Unable to read rock-ridge attributes [ 113.295165][ T4168] Unable to read rock-ridge attributes [ 113.360563][ T4168] Unable to read rock-ridge attributes [ 113.398277][ T4168] Unable to read rock-ridge attributes [ 113.411979][ T4633] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.455562][ T4168] ISOFS: unable to read i-node block [ 113.484503][ T4168] Unable to read rock-ridge attributes [ 113.530729][ T4168] ISOFS: unable to read i-node block [ 113.788619][ T4633] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 113.838671][ T4633] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.910770][ T4633] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.978665][ T4633] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.008133][ T4633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.119686][ T4633] usb 3-1: invalid MIDI out EP 0 [ 114.138435][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.303244][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.478068][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.573652][ T4633] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 114.617815][ T4162] udevd[4162]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.719924][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.658637][ T4795] loop0: detected capacity change from 0 to 128 [ 116.180170][ T4782] chnl_net:caif_netlink_parms(): no params data found [ 116.759092][ T4211] Bluetooth: hci0: command 0x0409 tx timeout [ 118.082966][ T4782] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.139176][ T4782] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.147774][ T4782] device bridge_slave_0 entered promiscuous mode [ 118.192663][ T4782] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.223261][ T4782] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.236346][ T4782] device bridge_slave_1 entered promiscuous mode [ 118.302578][ T4782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.343773][ T4211] usb 3-1: USB disconnect, device number 4 [ 118.345642][ T4782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.507214][ T4782] team0: Port device team_slave_0 added [ 118.528771][ T4782] team0: Port device team_slave_1 added [ 118.644071][ T4782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.656955][ T4782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.720396][ T4782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.767556][ T4782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.814790][ T4782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.842235][ T4406] Bluetooth: hci0: command 0x041b tx timeout [ 118.986011][ T4782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.189467][ T9] device hsr_slave_0 left promiscuous mode [ 119.199235][ T1108] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 119.225869][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.245527][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.266949][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.296535][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.352035][ T9] device bridge_slave_1 left promiscuous mode [ 119.377255][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.415201][ T9] device bridge_slave_0 left promiscuous mode [ 119.466688][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.539400][ T1108] usb 1-1: not running at top speed; connect to a high speed hub [ 119.566666][ T9] device veth1_macvtap left promiscuous mode [ 119.629609][ T1108] usb 1-1: config 1 has an invalid interface number: 78 but max is 0 [ 119.629715][ T1108] usb 1-1: config 1 has no interface number 0 [ 119.629908][ T1108] usb 1-1: config 1 interface 78 has no altsetting 0 [ 119.989760][ T1108] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 119.989924][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.990027][ T1108] usb 1-1: Product: syz [ 119.990124][ T1108] usb 1-1: Manufacturer: syz [ 119.990221][ T1108] usb 1-1: SerialNumber: syz [ 120.123011][ T9] device veth0_macvtap left promiscuous mode [ 120.124848][ T9] device veth1_vlan left promiscuous mode [ 120.126776][ T9] device veth0_vlan left promiscuous mode [ 120.461517][ T1108] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 120.486821][ T1108] usb 1-1: selecting invalid altsetting 0 [ 120.686496][ T1108] usb 1-1: USB disconnect, device number 4 [ 120.694378][ T2421] pvrusb2: control-write URB failure, status=-71 [ 120.701386][ T2421] pvrusb2: Device being rendered inoperable [ 120.778801][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 120.824420][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 120.877181][ T9] team0 (unregistering): Port device team_slave_1 removed [ 120.909074][ T9] team0 (unregistering): Port device team_slave_0 removed [ 120.920340][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 120.955266][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.987254][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.155937][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 123.235508][ T9] bond0 (unregistering): Released all slaves [ 123.342203][ T4867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.145'. [ 123.414505][ T4782] device hsr_slave_0 entered promiscuous mode [ 123.473148][ T4782] device hsr_slave_1 entered promiscuous mode [ 123.513102][ T25] audit: type=1800 audit(1750060607.092:33): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.149" name="/" dev="fuse" ino=1 res=0 errno=0 [ 124.953028][ T4897] loop3: detected capacity change from 0 to 2048 [ 125.110972][ T4905] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.138441][ T4897] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 125.218584][ T4897] Remounting filesystem read-only [ 125.316439][ T4782] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.376638][ T4782] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.464318][ T4782] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.492753][ T4327] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.518304][ T4782] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.940439][ T4327] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 126.076696][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.105799][ T4327] usb 1-1: config 0 descriptor?? [ 126.308144][ T4782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.381097][ T150] block nbd2: Attempted send on invalid socket [ 126.387741][ T150] blk_update_request: I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 126.399499][ T150] gfs2: error 10 reading superblock [ 126.470114][ T4327] kaweth 1-1:0.0: Firmware present in device. [ 126.487157][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.549375][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.593367][ T4782] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.640259][ T4327] kaweth 1-1:0.0: Statistics collection: 0 [ 126.646330][ T4327] kaweth 1-1:0.0: Multicast filter limit: 0 [ 126.683133][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.701964][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.770217][ T4327] kaweth 1-1:0.0: MTU: 0 [ 126.774525][ T4327] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 126.785980][ T514] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.793199][ T514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.827172][ T4903] loop4: detected capacity change from 0 to 32768 [ 126.834707][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.913877][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.951249][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.969028][ T4813] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.976215][ T4813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.006040][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.038906][ T4903] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 127.048988][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.215523][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.272771][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.287218][ T25] audit: type=1800 audit(1750060610.862:34): pid=4903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.157" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 127.313259][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.370275][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.400676][ T4327] kaweth 1-1:0.0: kaweth interface created at eth5 [ 127.417317][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.441115][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.449909][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.488648][ T4171] ocfs2: Unmounting device (7,4) on (node local) [ 127.514894][ T4782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.537118][ T4327] usb 1-1: USB disconnect, device number 5 [ 127.581582][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.627932][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.656583][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.805223][ T4212] Process accounting resumed [ 130.245840][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.259065][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.296280][ T4782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.497770][ T4980] loop0: detected capacity change from 0 to 1024 [ 131.916184][ T4981] netlink: 128 bytes leftover after parsing attributes in process `syz.4.168'. [ 131.942255][ T4980] hfsplus: unable to change nls mapping [ 131.948234][ T4980] hfsplus: unable to parse mount options [ 132.520699][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.529592][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.715062][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.789863][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.813490][ T4999] loop4: detected capacity change from 0 to 32768 [ 133.932862][ T4999] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 134.392363][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.434478][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.504049][ T4782] device veth0_vlan entered promiscuous mode [ 134.527103][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.569241][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.658851][ T4782] device veth1_vlan entered promiscuous mode [ 134.933999][ T4171] ocfs2: Unmounting device (7,4) on (node local) [ 135.432187][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.473183][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.534662][ T4782] device veth0_macvtap entered promiscuous mode [ 135.612706][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.724236][ T5016] loop0: detected capacity change from 0 to 4096 [ 135.843246][ T4782] device veth1_macvtap entered promiscuous mode [ 136.260496][ T5016] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.574788][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.819907][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.062033][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.292770][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.485252][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.611680][ T1110] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.746382][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.963788][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.001779][ T1110] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 138.096961][ T1110] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.192490][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.358379][ T1110] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.447184][ T4782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.491964][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.508676][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.530822][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.619566][ T5039] loop3: detected capacity change from 0 to 1024 [ 138.628478][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.661277][ T1110] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 138.689817][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.711261][ T5041] loop4: detected capacity change from 0 to 256 [ 138.737967][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.759209][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.779523][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.800521][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.820862][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.843412][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.865464][ T4782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.894600][ T4782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.913908][ T4782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.933442][ T4782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.971288][ T4782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.027416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.038236][ T5041] exfat: Deprecated parameter 'utf8' [ 139.064476][ T5041] exfat: Deprecated parameter 'utf8' [ 139.124819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.317418][ T5041] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 139.975761][ T4293] udevd[4293]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.034942][ T5047] loop0: detected capacity change from 0 to 1024 [ 140.110159][ T5047] EXT4-fs (loop0): Ignoring removed orlov option [ 140.167251][ T5047] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 140.331072][ T514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.605302][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.641333][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.719131][ T514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.732042][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.768400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.911165][ T4633] usb 3-1: USB disconnect, device number 5 [ 143.093944][ T5088] loop4: detected capacity change from 0 to 16 [ 143.211403][ T5088] erofs: (device loop4): mounted with root inode @ nid 36. [ 144.222433][ T5100] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 144.364688][ T25] audit: type=1800 audit(1750060627.940:35): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.191" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 144.455574][ T4181] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 146.012693][ T5115] device bond_slave_0 entered promiscuous mode [ 146.019446][ T5115] device bond_slave_1 entered promiscuous mode [ 146.085655][ T5118] loop2: detected capacity change from 0 to 1024 [ 146.180429][ T5116] netlink: 'syz.5.199': attribute type 1 has an invalid length. [ 146.188402][ T5116] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.199'. [ 146.311149][ T5115] device bond_slave_0 left promiscuous mode [ 146.317586][ T5115] device bond_slave_1 left promiscuous mode [ 146.375179][ T5118] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 146.434545][ T5118] EXT4-fs (loop2): orphan cleanup on readonly fs [ 146.534444][ T5118] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 146.602561][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.659441][ T5118] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 146.691441][ T5118] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.200: Freeing blocks not in datazone - block = 0, count = 4096 [ 146.734728][ T5118] EXT4-fs (loop2): Remounting filesystem read-only [ 146.745149][ T5118] EXT4-fs (loop2): 1 orphan inode deleted [ 146.759186][ T5118] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000313b,init_itable,errors=remount-ro,grpid,. Quota mode: writeback. [ 146.852566][ T4211] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.862566][ T1108] usb 6-1: Using ep0 maxpacket: 8 [ 147.009256][ T5124] loop3: detected capacity change from 0 to 32768 [ 147.044982][ T5124] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.202 (5124) [ 147.102840][ T4211] usb 5-1: Using ep0 maxpacket: 8 [ 147.142729][ T1108] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 147.159725][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.176741][ T1108] usb 6-1: Product: syz [ 147.191073][ T5149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.208'. [ 147.208076][ T1108] usb 6-1: Manufacturer: syz [ 147.214822][ T5124] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 147.238566][ T1108] usb 6-1: SerialNumber: syz [ 147.243663][ T5124] BTRFS info (device loop3): using free space tree [ 147.277604][ T5124] BTRFS info (device loop3): has skinny extents [ 147.288936][ T1108] usb 6-1: config 0 descriptor?? [ 147.344594][ T1108] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 147.382757][ T4211] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 147.398374][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.431445][ T1108] usb 6-1: setting power ON [ 147.476342][ T1108] dvb-usb: bulk message failed: -22 (2/0) [ 147.519982][ T4211] usb 5-1: Product: syz [ 147.549510][ T5122] dvb-usb: bulk message failed: -22 (3/0) [ 147.573886][ T5122] usb 6-1: gpio_write failed. [ 147.577680][ T4211] usb 5-1: Manufacturer: syz [ 147.582665][ T5122] cxusb: i2c wr: len=79 is too big! [ 147.582665][ T5122] [ 147.600643][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.610725][ T4211] usb 5-1: SerialNumber: syz [ 147.616979][ T5124] BTRFS info (device loop3): enabling ssd optimizations [ 147.634454][ T4211] usb 5-1: config 0 descriptor?? [ 147.652409][ T5158] loop2: detected capacity change from 0 to 4096 [ 147.656397][ T1108] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 147.697562][ T5158] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 147.724750][ T4211] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 147.763465][ T1108] usb 6-1: media controller created [ 147.811969][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.879371][ T1108] usb 6-1: selecting invalid altsetting 6 [ 147.886362][ T1108] usb 6-1: digital interface selection failed (-22) [ 147.893651][ T1108] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 147.914780][ T5158] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 147.943213][ T1108] usb 6-1: setting power OFF [ 147.950051][ T1108] dvb-usb: bulk message failed: -22 (2/0) [ 147.993480][ T1108] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 148.025881][ T1108] (NULL device *): no alternate interface [ 148.241834][ T1108] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 148.262473][ T1108] usb 6-1: USB disconnect, device number 2 [ 148.903776][ T4175] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 149.000116][ T5186] loop5: detected capacity change from 0 to 128 [ 149.136691][ T5186] EXT4-fs (loop5): Ignoring removed nobh option [ 149.980197][ T5186] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 150.024205][ T5186] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.050201][ T5212] device team_slave_0 entered promiscuous mode [ 150.057079][ T5212] device team_slave_1 entered promiscuous mode [ 150.064203][ T5212] device vlan2 entered promiscuous mode [ 150.069890][ T5212] device team0 entered promiscuous mode [ 150.233140][ T4399] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 150.523159][ T4399] usb 3-1: Using ep0 maxpacket: 32 [ 150.643216][ T4399] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 150.664871][ T4399] usb 3-1: config 0 has no interface number 0 [ 150.689477][ T4399] usb 3-1: config 0 interface 12 has no altsetting 0 [ 150.873629][ T4399] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 150.893584][ T4399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.935930][ T4399] usb 3-1: Product: syz [ 150.949716][ T4399] usb 3-1: Manufacturer: syz [ 150.966999][ T4399] usb 3-1: SerialNumber: syz [ 151.005116][ T4399] usb 3-1: config 0 descriptor?? [ 151.055247][ T5217] loop0: detected capacity change from 0 to 32768 [ 151.109410][ T5217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.214 (5217) [ 151.248263][ T5217] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 151.283049][ T4211] gspca_sonixj: i2c_w8 err -71 [ 151.315693][ T5217] BTRFS info (device loop0): use no compression [ 151.339105][ T5217] BTRFS info (device loop0): disabling tree log [ 151.343141][ T4211] sonixj: probe of 5-1:0.0 failed with error -71 [ 151.375963][ T5217] BTRFS info (device loop0): using free space tree [ 151.413632][ T4211] usb 5-1: USB disconnect, device number 2 [ 151.419816][ T5217] BTRFS info (device loop0): has skinny extents [ 153.059322][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.219'. [ 153.072045][ T5261] netlink: 'syz.5.219': attribute type 5 has an invalid length. [ 153.081511][ T5261] netlink: 28 bytes leftover after parsing attributes in process `syz.5.219'. [ 153.427491][ T5261] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 153.468039][ T5261] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 153.477278][ T5261] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 153.486684][ T5261] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 153.496462][ T5261] device geneve2 entered promiscuous mode [ 153.756310][ T4347] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4347) [ 154.643595][ T4399] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 154.652736][ T4399] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 154.660446][ T4399] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 154.668618][ T4399] f81534: probe of 3-1:0.12 failed with error -71 [ 154.970324][ T4399] usb 3-1: USB disconnect, device number 6 [ 155.260995][ T5298] loop3: detected capacity change from 0 to 512 [ 156.084778][ T5298] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.103873][ T5298] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.747157][ T5298] EXT4-fs (loop3): 1 truncate cleaned up [ 156.752844][ T5298] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 156.978456][ T5298] EXT4-fs (loop3): shut down requested (1) [ 157.823226][ T5319] loop0: detected capacity change from 0 to 131072 [ 158.053300][ T5319] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.124505][ T5319] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.141283][ T5325] loop2: detected capacity change from 0 to 32768 [ 159.373874][ T5364] netlink: 20 bytes leftover after parsing attributes in process `syz.5.240'. [ 160.054113][ T1110] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 160.374128][ T1110] usb 6-1: Using ep0 maxpacket: 8 [ 160.450404][ T5372] loop0: detected capacity change from 0 to 164 [ 160.807715][ T5372] ISOFS: unable to read i-node block [ 160.810079][ T5372] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 161.334574][ T1110] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 161.344052][ T1110] usb 6-1: config 0 has no interface number 0 [ 161.555092][ T1110] usb 6-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 162.863661][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.264994][ T1110] usb 6-1: Product: syz [ 163.349765][ T1110] usb 6-1: Manufacturer: syz [ 163.429246][ T1110] usb 6-1: SerialNumber: syz [ 163.585798][ T1110] usb 6-1: config 0 descriptor?? [ 163.663638][ T1110] usb 6-1: can't set config #0, error -71 [ 163.712546][ T1110] usb 6-1: USB disconnect, device number 3 [ 165.699630][ T5404] sched: RT throttling activated [ 166.566242][ T5397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.611814][ T4259] Bluetooth: hci5: Frame reassembly failed (-84) [ 167.240394][ T5423] loop5: detected capacity change from 0 to 40427 [ 167.309970][ T5423] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 167.319125][ T5423] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 167.338297][ T5423] F2FS-fs (loop5): invalid crc value [ 167.353440][ T5423] F2FS-fs (loop5): Found nat_bits in checkpoint [ 167.399477][ T5423] F2FS-fs (loop5): Start checkpoint disabled! [ 167.429133][ T5433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.257'. [ 167.445050][ T5423] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 168.213412][ T4179] Bluetooth: hci0: link tx timeout [ 168.219250][ T4179] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.468524][ T5446] loop2: detected capacity change from 0 to 512 [ 168.508796][ T5446] EXT4-fs (loop2): Ignoring removed nobh option [ 168.564724][ T5446] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.585223][ T5446] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 168.615356][ T5446] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.261: Corrupt directory, running e2fsck is recommended [ 168.676084][ T5446] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 168.685238][ T4327] Bluetooth: hci5: command 0x1003 tx timeout [ 168.691338][ T4179] Bluetooth: hci5: sending frame failed (-49) [ 168.747995][ T5446] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.261: corrupted in-inode xattr [ 168.789045][ T5446] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.261: couldn't read orphan inode 15 (err -117) [ 168.837315][ T5446] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,auto_da_alloc,grpjquota=.journal_checksum,barrier=0x0000000000000007,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 170.770699][ T5446] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 170.900039][ T5446] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 170.928509][ T4211] Bluetooth: hci0: command 0x0406 tx timeout [ 170.935513][ T1108] Bluetooth: hci5: command 0x1001 tx timeout [ 170.941685][ T4179] Bluetooth: hci5: sending frame failed (-49) [ 170.974804][ T5446] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.261: Corrupt directory, running e2fsck is recommended [ 171.073219][ T5446] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.261: path /58/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 171.219802][ T5446] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 8: comm syz.2.261: path /58/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 171.422179][ T5459] loop5: detected capacity change from 0 to 32768 [ 171.526598][ T5486] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.557835][ T5486] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 171.596228][ T5486] bridge_slave_0: default FDB implementation only supports local addresses [ 171.696996][ T5494] smc: net device bond0 applied user defined pnetid SYZ0 [ 171.712209][ T5494] smc: net device bond0 erased user defined pnetid SYZ0 [ 173.015916][ T4327] Bluetooth: hci5: command 0x1009 tx timeout [ 175.003099][ T5561] netlink: 'syz.5.278': attribute type 4 has an invalid length. [ 177.832915][ T5577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.089190][ T5586] loop5: detected capacity change from 0 to 4096 [ 180.000480][ T4307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.118430][ T4307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.443457][ T5599] loop2: detected capacity change from 0 to 32768 [ 180.475320][ T4307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.489439][ T5599] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.288 (5599) [ 180.605483][ T5619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'. [ 180.616034][ T4212] Bluetooth: hci4: command 0x0406 tx timeout [ 180.990202][ T4212] Bluetooth: hci2: command 0x0406 tx timeout [ 181.185702][ T4212] Bluetooth: hci3: command 0x0406 tx timeout [ 181.215788][ T5621] loop0: detected capacity change from 0 to 1024 [ 181.304933][ T5599] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 181.316338][ T5599] BTRFS info (device loop2): using free space tree [ 181.324263][ T5599] BTRFS info (device loop2): has skinny extents [ 181.354273][ T4307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.377684][ T5621] EXT4-fs (loop0): Ignoring removed oldalloc option [ 181.384890][ T5621] EXT4-fs (loop0): Ignoring removed orlov option [ 181.607887][ T5621] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 181.746016][ T5621] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.292: Allocating blocks 273-513 which overlap fs metadata [ 181.818759][ T5604] chnl_net:caif_netlink_parms(): no params data found [ 182.136748][ T4212] Bluetooth: hci1: command 0x0409 tx timeout [ 182.202221][ T5599] BTRFS info (device loop2): enabling ssd optimizations [ 182.278072][ T5654] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 182.348258][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.355385][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.458331][ T5604] device bridge_slave_0 entered promiscuous mode [ 182.474490][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.492415][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.966426][ T5604] device bridge_slave_1 entered promiscuous mode [ 184.434732][ T5703] Bluetooth: hci1: command 0x041b tx timeout [ 184.545921][ T5707] netlink: 88 bytes leftover after parsing attributes in process `syz.2.299'. [ 185.098911][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.153933][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.602118][ T5700] Bluetooth: hci1: command 0x040f tx timeout [ 187.252824][ T5604] team0: Port device team_slave_0 added [ 187.263912][ T5604] team0: Port device team_slave_1 added [ 187.316314][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.330127][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.376213][ T5735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.384330][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.436095][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.445041][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.474868][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.574947][ T5604] device hsr_slave_0 entered promiscuous mode [ 187.593051][ T5604] device hsr_slave_1 entered promiscuous mode [ 187.638203][ T5604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.672484][ T5604] Cannot create hsr debugfs directory [ 187.955973][ T4307] device hsr_slave_0 left promiscuous mode [ 188.005048][ T4307] device hsr_slave_1 left promiscuous mode [ 188.028512][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.048969][ T5751] input: syz0 as /devices/virtual/input/input8 [ 188.057507][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.104998][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.108219][ T5717] loop0: detected capacity change from 0 to 32768 [ 188.119646][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.189705][ T4307] device bridge_slave_0 left promiscuous mode [ 188.197914][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.018577][ T5759] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 189.026088][ T5759] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.328802][ T5693] Bluetooth: hci1: command 0x0419 tx timeout [ 189.374970][ T4307] device veth1_macvtap left promiscuous mode [ 189.383110][ T4307] device veth0_macvtap left promiscuous mode [ 189.392112][ T4307] device veth1_vlan left promiscuous mode [ 189.398773][ T4307] device veth0_vlan left promiscuous mode [ 189.939770][ T4307] device team_slave_1 left promiscuous mode [ 189.953189][ T4307] team0 (unregistering): Port device team_slave_1 removed [ 189.969293][ T4307] device team_slave_0 left promiscuous mode [ 189.978944][ T4307] team0 (unregistering): Port device team_slave_0 removed [ 190.008892][ T4307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.037871][ T4307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.177856][ T4307] bond0 (unregistering): Released all slaves [ 191.245390][ T5778] netlink: 108 bytes leftover after parsing attributes in process `syz.0.315'. [ 192.020879][ T5604] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 192.056034][ T5604] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 192.056834][ T5789] netlink: 165 bytes leftover after parsing attributes in process `syz.0.317'. [ 192.093947][ T5604] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 192.112583][ T5604] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.925397][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.007806][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.030447][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.093565][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.159898][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.195449][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.218500][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.225723][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.274285][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.282314][ T5810] program syz.5.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.326204][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.368582][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.375733][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.382825][ T5813] loop0: detected capacity change from 0 to 512 [ 193.431179][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.457455][ T5813] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.463144][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.540738][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.592069][ T5813] EXT4-fs (loop0): 1 truncate cleaned up [ 193.597911][ T5813] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.698993][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.720584][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.762274][ T5604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.791572][ T5604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.900781][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.907310][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.954421][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.973633][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.093129][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.189119][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.251387][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.306363][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.359958][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.410489][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.094189][ T5838] [ 195.096744][ T5838] ====================================================== [ 195.103787][ T5838] WARNING: possible circular locking dependency detected [ 195.110788][ T5838] 5.15.185-syzkaller #0 Not tainted [ 195.115966][ T5838] ------------------------------------------------------ [ 195.122980][ T5838] syz.5.326/5838 is trying to acquire lock: [ 195.129055][ T5838] ffff88807d904c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 195.140184][ T5838] [ 195.140184][ T5838] but task is already holding lock: [ 195.147527][ T5838] ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 195.157201][ T5838] [ 195.157201][ T5838] which lock already depends on the new lock. [ 195.157201][ T5838] [ 195.167680][ T5838] [ 195.167680][ T5838] the existing dependency chain (in reverse order) is: [ 195.176802][ T5838] [ 195.176802][ T5838] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 195.184856][ T5838] __mutex_lock_common+0x1eb/0x2390 [ 195.190561][ T5838] mutex_lock_nested+0x17/0x20 [ 195.195839][ T5838] rfkill_register+0x33/0x8a0 [ 195.201031][ T5838] hci_register_dev+0x452/0x970 [ 195.206387][ T5838] vhci_create_device+0x32c/0x5c0 [ 195.211915][ T5838] vhci_write+0x391/0x450 [ 195.216771][ T5838] vfs_write+0x712/0xd00 [ 195.221540][ T5838] ksys_write+0x14d/0x250 [ 195.226385][ T5838] do_syscall_64+0x4c/0xa0 [ 195.231322][ T5838] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.237716][ T5838] [ 195.237716][ T5838] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 195.245518][ T5838] __mutex_lock_common+0x1eb/0x2390 [ 195.251237][ T5838] mutex_lock_nested+0x17/0x20 [ 195.256506][ T5838] vhci_send_frame+0x88/0x100 [ 195.261803][ T5838] hci_send_frame+0x1a9/0x2e0 [ 195.267074][ T5838] hci_tx_work+0x9f9/0x1710 [ 195.272096][ T5838] process_one_work+0x863/0x1000 [ 195.277641][ T5838] worker_thread+0xaa8/0x12a0 [ 195.282831][ T5838] kthread+0x436/0x520 [ 195.287432][ T5838] ret_from_fork+0x1f/0x30 [ 195.292358][ T5838] [ 195.292358][ T5838] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 195.301559][ T5838] __flush_work+0xdd/0x1b0 [ 195.306523][ T5838] hci_dev_do_close+0x1e7/0x1030 [ 195.311993][ T5838] hci_unregister_dev+0x2d7/0x580 [ 195.317542][ T5838] vhci_release+0x73/0xc0 [ 195.322380][ T5838] __fput+0x234/0x930 [ 195.326897][ T5838] task_work_run+0x125/0x1a0 [ 195.332014][ T5838] do_exit+0x616/0x20a0 [ 195.336691][ T5838] do_group_exit+0x12e/0x300 [ 195.341787][ T5838] __x64_sys_exit_group+0x3b/0x40 [ 195.347356][ T5838] do_syscall_64+0x4c/0xa0 [ 195.352288][ T5838] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.358689][ T5838] [ 195.358689][ T5838] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 195.366361][ T5838] __mutex_lock_common+0x1eb/0x2390 [ 195.372248][ T5838] mutex_lock_nested+0x17/0x20 [ 195.377619][ T5838] bg_scan_update+0x44/0x3b0 [ 195.382722][ T5838] process_one_work+0x863/0x1000 [ 195.388184][ T5838] worker_thread+0xaa8/0x12a0 [ 195.393391][ T5838] kthread+0x436/0x520 [ 195.397972][ T5838] ret_from_fork+0x1f/0x30 [ 195.403166][ T5838] [ 195.403166][ T5838] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 195.413158][ T5838] __lock_acquire+0x2c33/0x7c60 [ 195.418619][ T5838] lock_acquire+0x197/0x3f0 [ 195.423619][ T5838] __flush_work+0xdd/0x1b0 [ 195.428542][ T5838] __cancel_work_timer+0x3ac/0x520 [ 195.434289][ T5838] hci_request_cancel_all+0xcc/0x300 [ 195.440085][ T5838] hci_dev_do_close+0x4e/0x1030 [ 195.445439][ T5838] hci_rfkill_set_block+0x10a/0x190 [ 195.451177][ T5838] rfkill_set_block+0x1c6/0x420 [ 195.456528][ T5838] rfkill_fop_write+0x458/0x560 [ 195.461872][ T5838] vfs_write+0x300/0xd00 [ 195.466633][ T5838] ksys_write+0x14d/0x250 [ 195.471471][ T5838] do_syscall_64+0x4c/0xa0 [ 195.476418][ T5838] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.482851][ T5838] [ 195.482851][ T5838] other info that might help us debug this: [ 195.482851][ T5838] [ 195.493254][ T5838] Chain exists of: [ 195.493254][ T5838] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 195.493254][ T5838] [ 195.508982][ T5838] Possible unsafe locking scenario: [ 195.508982][ T5838] [ 195.516418][ T5838] CPU0 CPU1 [ 195.521761][ T5838] ---- ---- [ 195.527106][ T5838] lock(rfkill_global_mutex); [ 195.531855][ T5838] lock(&data->open_mutex); [ 195.539027][ T5838] lock(rfkill_global_mutex); [ 195.546922][ T5838] lock((work_completion)(&hdev->bg_scan_update)); [ 195.553514][ T5838] [ 195.553514][ T5838] *** DEADLOCK *** [ 195.553514][ T5838] [ 195.561859][ T5838] 1 lock held by syz.5.326/5838: [ 195.566789][ T5838] #0: ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 195.576862][ T5838] [ 195.576862][ T5838] stack backtrace: [ 195.582729][ T5838] CPU: 0 PID: 5838 Comm: syz.5.326 Not tainted 5.15.185-syzkaller #0 [ 195.590778][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.600828][ T5838] Call Trace: [ 195.604100][ T5838] [ 195.607191][ T5838] dump_stack_lvl+0x168/0x230 [ 195.611850][ T5838] ? load_image+0x3b0/0x3b0 [ 195.616365][ T5838] ? show_regs_print_info+0x20/0x20 [ 195.621638][ T5838] ? print_circular_bug+0x12b/0x1a0 [ 195.626817][ T5838] check_noncircular+0x274/0x310 [ 195.631730][ T5838] ? add_chain_block+0x940/0x940 [ 195.636638][ T5838] ? lockdep_lock+0xdc/0x1e0 [ 195.641331][ T5838] ? __lock_acquire+0x12d9/0x7c60 [ 195.646347][ T5838] ? mark_lock+0x94/0x320 [ 195.650683][ T5838] __lock_acquire+0x2c33/0x7c60 [ 195.655575][ T5838] ? mark_lock+0x94/0x320 [ 195.659943][ T5838] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 195.666049][ T5838] ? verify_lock_unused+0x140/0x140 [ 195.671267][ T5838] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 195.676926][ T5838] lock_acquire+0x197/0x3f0 [ 195.681444][ T5838] ? __flush_work+0xc1/0x1b0 [ 195.686058][ T5838] ? __lock_acquire+0x7c60/0x7c60 [ 195.691198][ T5838] ? read_lock_is_recursive+0x10/0x10 [ 195.696698][ T5838] ? start_flush_work+0x776/0x820 [ 195.701804][ T5838] __flush_work+0xdd/0x1b0 [ 195.706226][ T5838] ? __flush_work+0xc1/0x1b0 [ 195.710789][ T5838] ? flush_work+0x20/0x20 [ 195.715092][ T5838] ? try_to_grab_pending+0xf3/0x7e0 [ 195.720293][ T5838] ? lockdep_hardirqs_off+0x70/0x100 [ 195.725555][ T5838] ? mark_lock+0x94/0x320 [ 195.729878][ T5838] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 195.735858][ T5838] ? lock_chain_count+0x20/0x20 [ 195.740788][ T5838] ? mark_lock+0x94/0x320 [ 195.745130][ T5838] ? __cancel_work_timer+0x331/0x520 [ 195.750396][ T5838] __cancel_work_timer+0x3ac/0x520 [ 195.755494][ T5838] ? cancel_work_sync+0x20/0x20 [ 195.760447][ T5838] ? __cancel_work+0x1f4/0x2d0 [ 195.765203][ T5838] ? lockdep_hardirqs_on+0x94/0x140 [ 195.770399][ T5838] ? __cancel_work+0x26f/0x2d0 [ 195.775227][ T5838] ? cancel_work+0x20/0x20 [ 195.779625][ T5838] ? lock_chain_count+0x20/0x20 [ 195.784537][ T5838] hci_request_cancel_all+0xcc/0x300 [ 195.789799][ T5838] hci_dev_do_close+0x4e/0x1030 [ 195.794644][ T5838] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 195.800526][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 195.805357][ T5838] hci_rfkill_set_block+0x10a/0x190 [ 195.810529][ T5838] ? rcu_lock_release+0x20/0x20 [ 195.815349][ T5838] rfkill_set_block+0x1c6/0x420 [ 195.820202][ T5838] rfkill_fop_write+0x458/0x560 [ 195.825052][ T5838] ? rfkill_fop_read+0x4b0/0x4b0 [ 195.829963][ T5838] ? common_file_perm+0x160/0x1c0 [ 195.834961][ T5838] ? fsnotify_perm+0x5d/0x560 [ 195.839612][ T5838] ? security_file_permission+0x75/0xa0 [ 195.845132][ T5838] ? rfkill_fop_read+0x4b0/0x4b0 [ 195.850049][ T5838] vfs_write+0x300/0xd00 [ 195.854278][ T5838] ? file_end_write+0x250/0x250 [ 195.859441][ T5838] ? __context_tracking_exit+0x4c/0x80 [ 195.865058][ T5838] ? __lock_acquire+0x7c60/0x7c60 [ 195.870072][ T5838] ? __fdget_pos+0x1e2/0x370 [ 195.874656][ T5838] ksys_write+0x14d/0x250 [ 195.878966][ T5838] ? __ia32_sys_read+0x80/0x80 [ 195.883715][ T5838] ? lockdep_hardirqs_on+0x94/0x140 [ 195.888893][ T5838] do_syscall_64+0x4c/0xa0 [ 195.893287][ T5838] ? clear_bhb_loop+0x30/0x80 [ 195.898032][ T5838] ? clear_bhb_loop+0x30/0x80 [ 195.902696][ T5838] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.908569][ T5838] RIP: 0033:0x7fbeb284c929 [ 195.912959][ T5838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.932743][ T5838] RSP: 002b:00007fbeb0693038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.941142][ T5838] RAX: ffffffffffffffda RBX: 00007fbeb2a74080 RCX: 00007fbeb284c929 [ 195.949127][ T5838] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 195.957238][ T5838] RBP: 00007fbeb28ceb39 R08: 0000000000000000 R09: 0000000000000000 [ 195.965199][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.973152][ T5838] R13: 0000000000000000 R14: 00007fbeb2a74080 R15: 00007ffc338b74d8 [ 195.981240][ T5838] [ 196.036685][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.057354][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.101191][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.642858][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.670880][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.704083][ T5604] device veth0_vlan entered promiscuous mode [ 196.721513][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.734463][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.768079][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.776897][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.792353][ T5604] device veth1_vlan entered promiscuous mode [ 196.813725][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.825327][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.834010][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.844334][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.855069][ T5604] device veth0_macvtap entered promiscuous mode [ 196.891649][ T5604] device veth1_macvtap entered promiscuous mode [ 196.919640][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.931797][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.942452][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.952973][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.963071][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.973534][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.985458][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.995905][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.006537][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.016534][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.025336][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.033298][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.041704][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.051983][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.062517][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.072630][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.083710][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.095881][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.106869][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.117210][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.127824][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.138764][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.147512][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.156130][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.166498][ T5604] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.176499][ T5604] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.185382][ T5604] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.194590][ T5604] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.251777][ T5604] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 197.277253][ T4813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.281228][ T5604] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 197.287535][ T4813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.305118][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.314594][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.317656][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.331329][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready