last executing test programs: 25.826849762s ago: executing program 1 (id=496): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x20000) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00\x00\f\x00', "030100", "e859ad13", ["8bada940edff000a00", "f460734b0000008000", "000000ff0000000000000020", "0000000000000000000100"]}) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2440, 0x0) fcntl$setlease(r4, 0x400, 0x0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r3) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x4) 20.98405064s ago: executing program 3 (id=509): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udp(0x2, 0x2, 0x0) r0 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x5000, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000500)={0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.627300268s ago: executing program 3 (id=511): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f0000000080), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x5, @vbi={0x0, 0x0, 0x2, 0x0, [], [], 0x108}}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x4}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044881}, 0x0) 18.704695613s ago: executing program 1 (id=514): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) 15.992464128s ago: executing program 3 (id=518): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15.948035499s ago: executing program 1 (id=519): socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x5) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, r3) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000019000000200012800b00010067656e657665000010000280060005004e200000040006"], 0x40}}, 0x0) 14.326041748s ago: executing program 3 (id=521): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udp(0x2, 0x2, 0x0) r0 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x5000, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000500)={0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.671261807s ago: executing program 0 (id=523): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0xfffffffc, 0x6]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) 12.568920078s ago: executing program 3 (id=524): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x20000) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00\x00\f\x00', "030100", "e859ad13", ["8bada940edff000a00", "f460734b0000008000", "000000ff0000000000000020", "0000000000000000000100"]}) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2440, 0x0) fcntl$setlease(r4, 0x400, 0x0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r3) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x4) 12.22258415s ago: executing program 0 (id=525): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r0, &(0x7f0000001a00)=""/177, 0xb1) 11.715356783s ago: executing program 2 (id=526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000800000009500"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f00000003c0)=ANY=[@ANYBLOB="007a82172a555a40aab70dbafd964fb9397462479d049a7f42f01c6e0b9381e3d310cb4727681c641464ab77a498e6ec737f2789b012fceb4eaee0a34ca77a718c725e863b0b028b81cd8789124fb58818d4637c74f1d91a8e331bf8b3ee5bc3c233fcbbb79ed04c26b18a5787deff22c9631497662d"], 0x2, 0x2f0, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_io_uring_setup(0x8004269, 0x0, &(0x7f0000000440), 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000300)="1a1e0000000000005fd47d9b996a7b3e72ac21038621115124e1939ed42a", 0x1e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000180)=0x8) write$FUSE_LSEEK(r1, &(0x7f00000021c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x53, 0xffffffffffffff26) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000780)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 11.660410203s ago: executing program 0 (id=527): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0xfffffffc, 0x6]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r8}) 11.049999867s ago: executing program 1 (id=529): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) 10.104080502s ago: executing program 2 (id=531): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.215325237s ago: executing program 2 (id=533): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x26041, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187013, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x6}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4084, 0xff4}], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 8.342446242s ago: executing program 2 (id=534): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udp(0x2, 0x2, 0x0) r0 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x5000, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.416148233s ago: executing program 2 (id=536): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000580)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003080)={{{@in=@broadcast, @in6=@private0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000003180)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5453, 0x0) 6.119607045s ago: executing program 4 (id=537): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x8002, &(0x7f0000000180)=ANY=[@ANYBLOB="7569643d666f726765742c696f636861727365743d69736f383835392d342c6769643d666f726765742c6c6f6e6761642c6d6f64653d30303030303030303030303030303030303131373630372c696f636861727365743d63703836342c646d6f64653d30303030303030303030303030303030303030303030342c6769643d666f726765742c006cb385766740aceb6803507769c248d307a9e90de54bd34f1e17c7e6bde2e4bc9b97d89c3bd9dfce4b9c54baf9e5a5ae79520ba02efbea696611af1bd4c6e3b73718f8bcdc65fe4d9344da718e5c50326ae903ec2bbb80b78b81a6cfaa59c3e220fa07b17b2426a6e4986f9addacb30f599a9fe816127ad086c68d3e06bf9399af952680ab759977cb3c9c74f81f221d1011d00780d37012c0c2df760b1c1a16f4b28a156114a806eb3226ccf75149b1e5d3ae445993e60bf58d0cd7eda9c9800a538c068880f4d242c74cf4379b4b881cffd58742fb40cdb3a8b57337aeac8431970f3d7891a8e19098012112d46065d2de22af02cf594d9f45d0770d2da2f34be08bac111617f3fdfebae1c664c1ac4d309fad207f3f607a78549360d48cae737da171c8ce99e70da2f892e41818de4c3c8f3d3ae5958d5abbbe7cfa645fdd156800"/474], 0x1, 0xc46, &(0x7f00000021c0)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) 5.599062758s ago: executing program 1 (id=538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000400006"], 0x54}}, 0x0) 4.713669083s ago: executing program 4 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r4, &(0x7f0000001a00)=""/177, 0xb1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) 4.612381023s ago: executing program 2 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) 3.625076839s ago: executing program 4 (id=541): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f0000000080), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x5, @vbi={0x0, 0x0, 0x2, 0x0, [], [], 0x108}}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x4}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044881}, 0x0) 3.45784981s ago: executing program 0 (id=542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000800000009500"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f00000003c0)=ANY=[@ANYBLOB="007a82172a555a40aab70dbafd964fb9397462479d049a7f42f01c6e0b9381e3d310cb4727681c641464ab77a498e6ec737f2789b012fceb4eaee0a34ca77a718c725e863b0b028b81cd8789124fb58818d4637c74f1d91a8e331bf8b3ee5bc3c233fcbbb79ed04c26b18a5787deff22c9631497662d"], 0x2, 0x2f0, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_io_uring_setup(0x8004269, 0x0, &(0x7f0000000440), 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000300)="1a1e0000000000005fd47d9b996a7b3e72ac21038621115124e1939ed42a", 0x1e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000180)=0x8) write$FUSE_LSEEK(r1, &(0x7f00000021c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x53, 0xffffffffffffff26) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000780)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.194804167s ago: executing program 4 (id=543): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.172370397s ago: executing program 0 (id=544): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x26041, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187013, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x6}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4084, 0xff4}], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 1.299908363s ago: executing program 0 (id=545): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x32, 0x62, 0x65, 0x61, 0x66, 0x33, 0x27], 0x2d, [0x30, 0x36, 0x65, 0x33], 0x2d, [0x36, 0x30, 0x31, 0x62], 0x2d, [0x0, 0x31, 0x0, 0x39], 0x2d, [0x30, 0x65, 0x38, 0x36, 0x32, 0x32, 0x65, 0x38]}}}, {@dont_measure}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, 0x0) getpeername(r0, 0x0, 0x0) 1.191125743s ago: executing program 4 (id=546): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x5522, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 65.92616ms ago: executing program 1 (id=547): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0xfffffffc, 0x6]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) 27.58617ms ago: executing program 4 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x1407, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 3 (id=549): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',version=9p200\x00\x00']) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) tkill(0x0, 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.202' (ED25519) to the list of known hosts. [ 59.816173][ T4153] cgroup: Unknown subsys name 'net' [ 59.972965][ T4153] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.460846][ T4153] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.886835][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 62.969787][ T4165] chnl_net:caif_netlink_parms(): no params data found [ 63.017884][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 63.032610][ T4164] chnl_net:caif_netlink_parms(): no params data found [ 63.071427][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 63.147970][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.155168][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.164325][ T4165] device bridge_slave_0 entered promiscuous mode [ 63.173278][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.180914][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.189354][ T4177] device bridge_slave_0 entered promiscuous mode [ 63.220232][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.227510][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.235350][ T4165] device bridge_slave_1 entered promiscuous mode [ 63.243160][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.250362][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.259151][ T4177] device bridge_slave_1 entered promiscuous mode [ 63.301877][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.309225][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.317314][ T4166] device bridge_slave_0 entered promiscuous mode [ 63.363595][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.370825][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.378951][ T4166] device bridge_slave_1 entered promiscuous mode [ 63.388727][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.399719][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.417457][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.424724][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.433129][ T4172] device bridge_slave_0 entered promiscuous mode [ 63.450777][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.461566][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.471309][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.478780][ T4164] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.487380][ T4164] device bridge_slave_0 entered promiscuous mode [ 63.495357][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.503466][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.511754][ T4172] device bridge_slave_1 entered promiscuous mode [ 63.540909][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.548212][ T4164] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.556335][ T4164] device bridge_slave_1 entered promiscuous mode [ 63.572385][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.600615][ T4177] team0: Port device team_slave_0 added [ 63.622596][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.634856][ T4165] team0: Port device team_slave_0 added [ 63.643067][ T4177] team0: Port device team_slave_1 added [ 63.657997][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.677324][ T4165] team0: Port device team_slave_1 added [ 63.693335][ T4164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.704117][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.736982][ T4164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.757325][ T4166] team0: Port device team_slave_0 added [ 63.778980][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.785958][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.812001][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.833532][ T4166] team0: Port device team_slave_1 added [ 63.851595][ T4172] team0: Port device team_slave_0 added [ 63.858432][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.865394][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.891817][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.903576][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.910902][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.938007][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.964348][ T4172] team0: Port device team_slave_1 added [ 63.979465][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.986725][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.013096][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.039584][ T4164] team0: Port device team_slave_0 added [ 64.048396][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.055358][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.081495][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.112111][ T4164] team0: Port device team_slave_1 added [ 64.118465][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.125430][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.151865][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.163549][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.170795][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.197029][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.231614][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.238728][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.265153][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.291702][ T4165] device hsr_slave_0 entered promiscuous mode [ 64.298847][ T4165] device hsr_slave_1 entered promiscuous mode [ 64.336542][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.343507][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.369540][ T4164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.382744][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.389897][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.416348][ T4164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.432987][ T4177] device hsr_slave_0 entered promiscuous mode [ 64.440584][ T4177] device hsr_slave_1 entered promiscuous mode [ 64.447955][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.455795][ T4177] Cannot create hsr debugfs directory [ 64.509314][ T4166] device hsr_slave_0 entered promiscuous mode [ 64.517076][ T4166] device hsr_slave_1 entered promiscuous mode [ 64.523961][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.531734][ T4166] Cannot create hsr debugfs directory [ 64.548895][ T4172] device hsr_slave_0 entered promiscuous mode [ 64.555718][ T4172] device hsr_slave_1 entered promiscuous mode [ 64.562745][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.570537][ T4172] Cannot create hsr debugfs directory [ 64.577095][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 64.586306][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 64.592709][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 64.599303][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 64.605463][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 64.645596][ T4164] device hsr_slave_0 entered promiscuous mode [ 64.652661][ T4164] device hsr_slave_1 entered promiscuous mode [ 64.659612][ T4164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.667511][ T4164] Cannot create hsr debugfs directory [ 64.954380][ T4165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.967850][ T4165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.979328][ T4165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.995582][ T4165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.037319][ T4177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.055052][ T4177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.071497][ T4177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.085142][ T4177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.144566][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.154718][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.187690][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.227312][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.242589][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.272494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.282636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.295686][ T4172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.305371][ T4172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.319462][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.328170][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.342884][ T4172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.352925][ T4172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.394474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.404681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.414318][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.421731][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.431291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.439721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.447613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.461683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.471838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.480876][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.488000][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.500302][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.511860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.523261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.532573][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.539701][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.550607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.578892][ T4164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.605759][ T4164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.617069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.625920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.634990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.644062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.652940][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.660063][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.668370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.679063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.709181][ T4164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.720412][ T4164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.740816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.751508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.760946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.769565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.779068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.788212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.796983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.804964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.817117][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.835389][ T4165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.847429][ T4165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.861265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.870522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.880266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.888722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.898276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.907285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.915488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.933666][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.952853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.962882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.972841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.989096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.998195][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.005260][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.014677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.059696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.073684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.083169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.092771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.103226][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.110355][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.119149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.127850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.154099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.164773][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.197544][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.204434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.214657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.224183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.234003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.243228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.252865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.261985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.270644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.279757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.288924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.311166][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.332592][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.342071][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.351752][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.362504][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.375649][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.389607][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.405371][ T4164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.420701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.431311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.460363][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.467683][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.512642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.523701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.534184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.545461][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.552578][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.562828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.572263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.581643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.591201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.600315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.608634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.616427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.623856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.639503][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.650778][ T4164] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.658271][ T4212] Bluetooth: hci1: command 0x041b tx timeout [ 66.664652][ T4212] Bluetooth: hci0: command 0x041b tx timeout [ 66.671402][ T4212] Bluetooth: hci2: command 0x041b tx timeout [ 66.677741][ T4212] Bluetooth: hci4: command 0x041b tx timeout [ 66.683831][ T4212] Bluetooth: hci3: command 0x041b tx timeout [ 66.690341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.700586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.709581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.717768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.733200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.741764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.751109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.760643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.769248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.777654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.785858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.803920][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.813853][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.828264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.838095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.847395][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.854462][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.864755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.874218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.884168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.920403][ T4165] device veth0_vlan entered promiscuous mode [ 66.929166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.944063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.952905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.966723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.975605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.985455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.994407][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.001789][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.010508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.035525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.045086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.054431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.066496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.074987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.084563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.099331][ T4165] device veth1_vlan entered promiscuous mode [ 67.121243][ T4177] device veth0_vlan entered promiscuous mode [ 67.134451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.144357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.154516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.163328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.171986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.180705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.189075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.197916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.221116][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.229607][ T4164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.247066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.255806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.265172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.273350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.281276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.292574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.301441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.309956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.335102][ T4177] device veth1_vlan entered promiscuous mode [ 67.344031][ T4166] device veth0_vlan entered promiscuous mode [ 67.366737][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.374940][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.392217][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.418022][ T4166] device veth1_vlan entered promiscuous mode [ 67.425439][ T4165] device veth0_macvtap entered promiscuous mode [ 67.468893][ T4165] device veth1_macvtap entered promiscuous mode [ 67.507312][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.524041][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.533808][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.542953][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.562984][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.571660][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.580545][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.589820][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.598997][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.611112][ T4166] device veth0_macvtap entered promiscuous mode [ 67.627176][ T4177] device veth0_macvtap entered promiscuous mode [ 67.645790][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.655259][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.665006][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.673688][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.685277][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.694204][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.703138][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.717386][ T4166] device veth1_macvtap entered promiscuous mode [ 67.732947][ T4177] device veth1_macvtap entered promiscuous mode [ 67.751379][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.762190][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.773750][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.803604][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.814087][ T4165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.823286][ T4165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.832975][ T4165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.842188][ T4165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.855312][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.864643][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.873018][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.881829][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.890671][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.901741][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.910203][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.919097][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.928138][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.935897][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.950878][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.961503][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.972964][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.986492][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.997510][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.007468][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.019122][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.031366][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.040756][ T4172] device veth0_vlan entered promiscuous mode [ 68.048751][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.059196][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.068444][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.077754][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.095782][ T4164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.115334][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.124280][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.137799][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.146597][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.158052][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.170826][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.182194][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.192678][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.204516][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.216791][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.224266][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.232620][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.242300][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.264491][ T4172] device veth1_vlan entered promiscuous mode [ 68.322048][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.331683][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.341124][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.350709][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.388300][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.399026][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.408741][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.418843][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.433927][ T4172] device veth0_macvtap entered promiscuous mode [ 68.474460][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.485132][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.493656][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.504716][ T4172] device veth1_macvtap entered promiscuous mode [ 68.524848][ T4164] device veth0_vlan entered promiscuous mode [ 68.534257][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.542576][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.550440][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.561654][ T419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.579401][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.587952][ T419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.600427][ T4164] device veth1_vlan entered promiscuous mode [ 68.609377][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.633099][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.642831][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.651561][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.663440][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.675586][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.685505][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.697161][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.707711][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.719518][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.731197][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.739307][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 68.745570][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 68.763191][ T4212] Bluetooth: hci2: command 0x040f tx timeout [ 68.770340][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 68.776766][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 68.782045][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.791461][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.801419][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.830110][ T419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.838670][ T419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.860094][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.871075][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.881398][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.892188][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.904952][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.915427][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.927138][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.946705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.954696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.964009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.973473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.983101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.994116][ T4164] device veth0_macvtap entered promiscuous mode [ 69.016408][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.022398][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.040948][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.051468][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.063564][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.065999][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.103355][ T4164] device veth1_macvtap entered promiscuous mode [ 69.122146][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.143305][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.156469][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.199195][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.216146][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.240147][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.252824][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.385168][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.418485][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.449512][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.462217][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.473210][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.484275][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.494679][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.518527][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.542426][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.554704][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.573910][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.593185][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.604816][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.615212][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.627106][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.638121][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.649302][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.659492][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.670121][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.681812][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.907937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.407020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.421521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.431325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.443943][ T4164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.465649][ T4164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.474976][ T4164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.484582][ T4164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.500735][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.509681][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.518526][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.527360][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 71.571435][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.592323][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.619598][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.626307][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.637315][ T4212] Bluetooth: hci1: command 0x0419 tx timeout [ 71.643801][ T4212] Bluetooth: hci0: command 0x0419 tx timeout [ 71.652152][ T4212] Bluetooth: hci2: command 0x0419 tx timeout [ 71.658266][ T4212] Bluetooth: hci4: command 0x0419 tx timeout [ 71.664353][ T4212] Bluetooth: hci3: command 0x0419 tx timeout [ 71.848658][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.887038][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.292905][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.306302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.377132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.523689][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.548697][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.637306][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.721855][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.764740][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.695998][ T4284] loop4: detected capacity change from 0 to 512 [ 73.910560][ T4275] loop2: detected capacity change from 0 to 32768 [ 74.138852][ T4291] loop1: detected capacity change from 0 to 1024 [ 75.006968][ T4275] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.10 (4275) [ 75.142608][ T4291] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000006,jqfmt=vfsv1,grpjquota=,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,nodiscard,,errors=continue. Quota mode: none. [ 75.363845][ T4305] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.363956][ T4305] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.364058][ T4305] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.364157][ T4305] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.221149][ T4284] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.221278][ T4284] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.372699][ T4275] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 76.386531][ T4275] BTRFS info (device loop2): using free space tree [ 76.393949][ T4275] BTRFS info (device loop2): has skinny extents [ 77.517270][ T4275] BTRFS error (device loop2): open_ctree failed [ 77.591613][ T4338] loop0: detected capacity change from 0 to 512 [ 77.697143][ T4338] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.719880][ T4158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4158) [ 77.811090][ T4338] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.073786][ T4338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 78.136966][ T4338] System zones: 1-12 [ 78.279552][ T4338] EXT4-fs (loop0): 1 truncate cleaned up [ 78.285231][ T4338] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nombcache,debug,lazytime,nombcache,dioread_lock,,errors=continue. Quota mode: none. [ 78.349519][ T4338] syz.0.20 (pid 4338) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 78.366632][ T4338] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 78.824763][ T4365] loop3: detected capacity change from 0 to 1024 [ 79.356003][ T4353] loop1: detected capacity change from 0 to 40427 [ 79.470168][ T4353] F2FS-fs (loop1): Unrecognized mount option "errors=continue" or missing value [ 79.513260][ T4362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.785179][ T4365] loop3: detected capacity change from 0 to 40427 [ 79.978954][ T4365] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 80.022734][ T4365] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 80.102280][ T4365] F2FS-fs (loop3): invalid crc value [ 80.299725][ T1107] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.349651][ T4381] loop1: detected capacity change from 0 to 512 [ 80.367336][ T4365] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.090379][ T4365] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.119050][ T4381] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.140698][ T4365] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.158338][ T4381] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.346235][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 81.540571][ T1323] cfg80211: failed to load regulatory.db [ 81.547184][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 81.562939][ T4394] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.572019][ T4394] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.581024][ T4394] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.590008][ T4394] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.746388][ T1107] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=96.4f [ 81.766020][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.809979][ T1107] usb 1-1: Product: syz [ 81.814189][ T1107] usb 1-1: Manufacturer: syz [ 81.860583][ T1107] usb 1-1: SerialNumber: syz [ 81.933004][ T1107] usb 1-1: config 0 descriptor?? [ 82.966524][ T1107] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 82.978244][ T4390] loop4: detected capacity change from 0 to 32768 [ 82.984641][ T1107] airspy 1-1:0.0: Could not detect board [ 82.991092][ T1107] airspy: probe of 1-1:0.0 failed with error -71 [ 83.021976][ T1107] usb 1-1: USB disconnect, device number 2 [ 83.113813][ T4390] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 83.137382][ T4390] BTRFS info (device loop4): using free space tree [ 83.166227][ T4390] BTRFS info (device loop4): has skinny extents [ 83.868448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 83.970937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 84.427642][ T4404] loop2: detected capacity change from 0 to 40427 [ 84.527104][ T4390] BTRFS error (device loop4): open_ctree failed [ 84.566796][ T4404] F2FS-fs (loop2): invalid crc value [ 84.664040][ T4404] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.047266][ T4404] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.797373][ T4452] binder: 4450:4452 ioctl c00c6211 0 returned -22 [ 86.864331][ T4432] loop0: detected capacity change from 0 to 32768 [ 87.007449][ T4432] XFS (loop0): Mounting V5 Filesystem [ 87.131189][ T4432] XFS (loop0): Ending clean mount [ 87.233922][ T4164] XFS (loop0): Unmounting Filesystem [ 89.401727][ T4485] loop2: detected capacity change from 0 to 64 [ 90.244565][ T4482] loop3: detected capacity change from 0 to 8192 [ 91.240410][ T4499] ucma_write: process 34 (syz.2.54) changed security contexts after opening file descriptor, this is not allowed. [ 91.336368][ T4477] loop1: detected capacity change from 0 to 32768 [ 91.354025][ T4501] loop4: detected capacity change from 0 to 1024 [ 91.409676][ T4501] hfsplus: unable to parse mount options [ 91.426539][ T4477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.49 (4477) [ 91.482534][ T4477] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 91.509152][ T4477] BTRFS info (device loop1): using free space tree [ 91.533352][ T26] audit: type=1326 audit(1732144902.119:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff751616819 code=0x7ffc0000 [ 91.581473][ T4477] BTRFS info (device loop1): has skinny extents [ 91.698077][ T4518] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.707086][ T4518] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.715920][ T4518] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.724886][ T4518] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.827936][ T4477] BTRFS error (device loop1): open_ctree failed [ 93.091206][ T4540] loop2: detected capacity change from 0 to 4096 [ 93.185654][ T4540] EXT4-fs (loop2): Ignoring removed nobh option [ 93.250613][ T4540] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,nobh,acl,,errors=continue. Quota mode: writeback. [ 93.321063][ T4549] loop1: detected capacity change from 0 to 512 [ 93.794666][ T4549] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.024018][ T4540] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 94.040662][ T4555] loop0: detected capacity change from 0 to 128 [ 94.047210][ T4549] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.088605][ T4540] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 94.180288][ T4540] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.63: Failed to acquire dquot type 1 [ 94.317845][ T4555] ======================================================= [ 94.317845][ T4555] WARNING: The mand mount option has been deprecated and [ 94.317845][ T4555] and is ignored by this kernel. Remove the mand [ 94.317845][ T4555] option from the mount to silence this warning. [ 94.317845][ T4555] ======================================================= [ 94.338757][ T4559] loop3: detected capacity change from 0 to 4096 [ 94.352735][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.433853][ T4561] loop4: detected capacity change from 0 to 64 [ 94.678330][ T4555] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 94.843297][ T4555] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.311713][ T4566] loop4: detected capacity change from 0 to 2048 [ 95.489706][ T4566] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.975975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 96.986067][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 96.995532][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.004506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.013555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.022529][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.031575][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.138242][ T4590] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 97.191552][ T4582] loop2: detected capacity change from 0 to 32768 [ 97.198760][ T4590] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 20 with max blocks 130 with error 28 [ 97.236219][ T4590] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.236219][ T4590] [ 97.257976][ T4590] EXT4-fs (loop4): Total free blocks count 0 [ 97.266409][ T4590] EXT4-fs (loop4): Free/Dirty block details [ 97.280974][ T4590] EXT4-fs (loop4): free_blocks=2415919504 [ 97.319653][ T4582] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.74 (4582) [ 97.354800][ T4590] EXT4-fs (loop4): dirty_blocks=1056 [ 97.380757][ T4590] EXT4-fs (loop4): Block reservation details [ 97.409776][ T4590] EXT4-fs (loop4): i_reserved_data_blocks=66 [ 97.453158][ T4582] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 97.539139][ T4603] loop0: detected capacity change from 0 to 64 [ 98.274261][ T4214] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 20 with error 28 [ 98.293776][ T4582] BTRFS info (device loop2): using free space tree [ 98.301193][ T4582] BTRFS info (device loop2): has skinny extents [ 98.305751][ T4214] EXT4-fs (loop4): This should not happen!! Data will be lost [ 98.305751][ T4214] [ 98.709363][ T4600] loop1: detected capacity change from 0 to 32768 [ 98.730659][ T4582] BTRFS info (device loop2): enabling ssd optimizations [ 98.799965][ T4600] XFS: ikeep mount option is deprecated. [ 98.827354][ T4600] XFS: attr2 mount option is deprecated. [ 100.136039][ C0] sched: RT throttling activated [ 100.533113][ T4639] loop0: detected capacity change from 0 to 512 [ 100.868790][ T4639] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.887901][ T4639] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.185686][ T4664] loop2: detected capacity change from 0 to 256 [ 101.956215][ T4673] loop3: detected capacity change from 0 to 64 [ 102.446758][ T4676] loop1: detected capacity change from 0 to 8192 [ 102.876573][ T4689] loop1: detected capacity change from 0 to 256 [ 102.997712][ T4689] FAT-fs (loop1): Directory bread(block 64) failed [ 103.038879][ T4689] FAT-fs (loop1): Directory bread(block 65) failed [ 103.076849][ T4689] FAT-fs (loop1): Directory bread(block 66) failed [ 103.108660][ T4689] FAT-fs (loop1): Directory bread(block 67) failed [ 103.138644][ T4689] FAT-fs (loop1): Directory bread(block 68) failed [ 103.169402][ T4689] FAT-fs (loop1): Directory bread(block 69) failed [ 103.197338][ T4689] FAT-fs (loop1): Directory bread(block 70) failed [ 103.204042][ T4689] FAT-fs (loop1): Directory bread(block 71) failed [ 103.240696][ T4689] FAT-fs (loop1): Directory bread(block 72) failed [ 103.266142][ T4689] FAT-fs (loop1): Directory bread(block 73) failed [ 103.584825][ T4684] loop0: detected capacity change from 0 to 32768 [ 104.002333][ T4684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.95 (4684) [ 104.121081][ T4684] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 104.171608][ T4684] BTRFS info (device loop0): using free space tree [ 104.206464][ T4684] BTRFS info (device loop0): has skinny extents [ 104.770007][ T4684] BTRFS info (device loop0): enabling ssd optimizations [ 106.092099][ T4727] loop3: detected capacity change from 0 to 128 [ 106.410729][ T4730] loop4: detected capacity change from 0 to 512 [ 106.481451][ T4713] loop1: detected capacity change from 0 to 32768 [ 107.135427][ T4730] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.163387][ T4730] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.215358][ T4713] XFS: attr2 mount option is deprecated. [ 107.249561][ T4713] XFS: ikeep mount option is deprecated. [ 107.255246][ T4713] XFS: noikeep mount option is deprecated. [ 107.386985][ T4713] XFS (loop1): Mounting V5 Filesystem [ 107.530512][ T4713] XFS (loop1): Ending clean mount [ 107.584824][ T4713] XFS (loop1): Quotacheck needed: Please wait. [ 108.103565][ T4214] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 108.386169][ T4214] XFS (loop1): Unmount and run xfs_repair [ 108.391959][ T4214] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.468173][ T4214] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 108.699191][ T4214] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 108.718321][ T4214] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 108.731984][ T4214] 00000030: 00 00 00 00 07 00 00 00 00 00 00 00 00 00 00 03 ................ [ 108.743766][ T4214] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 108.764031][ T4214] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.789656][ T4214] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.799555][ T4214] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.810364][ T4214] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 108.874302][ T4713] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 108.948693][ T4166] XFS (loop1): Unmounting Filesystem [ 110.161595][ T4783] loop4: detected capacity change from 0 to 64 [ 112.247115][ T4814] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.255950][ T4814] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.265234][ T4814] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.274098][ T4814] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.387715][ T4799] loop2: detected capacity change from 0 to 32768 [ 112.612155][ T4799] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 113.515111][ T4165] ocfs2: Unmounting device (7,2) on (node local) [ 113.640593][ T4813] loop1: detected capacity change from 0 to 32768 [ 113.932203][ T4813] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 114.787111][ T4818] loop0: detected capacity change from 0 to 32768 [ 114.868772][ T4166] ocfs2: Unmounting device (7,1) on (node local) [ 114.946145][ T4818] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.131 (4818) [ 114.985758][ T4818] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 115.068271][ T4818] BTRFS info (device loop0): using free space tree [ 115.074821][ T4818] BTRFS info (device loop0): has skinny extents [ 115.385152][ T4856] loop4: detected capacity change from 0 to 128 [ 115.977107][ T4856] qnx6: superblock #1 checksum error [ 115.983829][ T4818] BTRFS error (device loop0): open_ctree failed [ 116.048047][ T4869] loop1: detected capacity change from 0 to 64 [ 116.616148][ T4651] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.870719][ T4651] usb 4-1: Using ep0 maxpacket: 32 [ 116.996222][ T4651] usb 4-1: config 0 has an invalid interface number: 141 but max is 0 [ 117.026193][ T4651] usb 4-1: config 0 has no interface number 0 [ 117.032332][ T4651] usb 4-1: config 0 interface 141 has no altsetting 0 [ 117.341752][ T4651] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=5f.21 [ 117.361938][ T4651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.367659][ T4883] loop0: detected capacity change from 0 to 32768 [ 117.370682][ T4651] usb 4-1: Product: syz [ 117.391268][ T4651] usb 4-1: Manufacturer: syz [ 117.396099][ T4651] usb 4-1: SerialNumber: syz [ 117.402717][ T4651] usb 4-1: config 0 descriptor?? [ 117.474845][ T4883] XFS (loop0): Mounting V5 Filesystem [ 117.525553][ T4883] XFS (loop0): Ending clean mount [ 117.576158][ T4648] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.605166][ T4164] XFS (loop0): Unmounting Filesystem [ 117.806282][ T4651] usb 4-1: Found UVC 0.00 device syz (04f2:b746) [ 117.812695][ T4651] usb 4-1: No valid video chain found. [ 117.819103][ T4648] usb 5-1: Using ep0 maxpacket: 16 [ 117.836537][ T4651] usb 4-1: USB disconnect, device number 2 [ 118.109658][ T4648] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.118377][ T4648] usb 5-1: config 0 has no interface number 0 [ 118.986071][ T4648] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 119.488548][ T4914] Zero length message leads to an empty skb [ 119.518729][ T4648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.548703][ T4648] usb 5-1: Product: syz [ 119.552906][ T4648] usb 5-1: Manufacturer: syz [ 119.565883][ T4648] usb 5-1: SerialNumber: syz [ 119.597570][ T4648] usb 5-1: config 0 descriptor?? [ 119.649837][ T4648] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 120.251073][ T4915] loop3: detected capacity change from 0 to 32768 [ 120.296931][ T4915] XFS: ikeep mount option is deprecated. [ 120.312464][ T4941] loop2: detected capacity change from 0 to 64 [ 120.427664][ T4915] XFS (loop3): Mounting V5 Filesystem [ 120.570396][ T4915] XFS (loop3): Ending clean mount [ 120.588600][ T4915] XFS (loop3): Quotacheck needed: Please wait. [ 120.655355][ T4915] XFS (loop3): Quotacheck: Done. [ 120.796806][ T4953] loop0: detected capacity change from 0 to 512 [ 120.886898][ T4177] XFS (loop3): Unmounting Filesystem [ 120.952881][ T4953] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.976225][ T4953] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.416160][ T4648] gspca_spca1528: reg_r err -71 [ 121.421196][ T4648] spca1528: probe of 5-1:0.1 failed with error -71 [ 121.439036][ T4648] usb 5-1: USB disconnect, device number 2 [ 122.746449][ T4651] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.265730][ T4648] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.506188][ T4651] usb 5-1: Using ep0 maxpacket: 8 [ 123.576128][ T4648] usb 4-1: Using ep0 maxpacket: 32 [ 123.626348][ T4651] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 123.639371][ T4651] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.650471][ T4651] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.660674][ T4651] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.670765][ T4651] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.683883][ T4651] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.693002][ T4651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.701379][ T4648] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 123.712115][ T4648] usb 4-1: config 0 has no interface number 0 [ 123.718275][ T4648] usb 4-1: config 0 interface 12 has no altsetting 0 [ 123.876441][ T4648] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 123.885705][ T4648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.893817][ T4648] usb 4-1: Product: syz [ 123.898286][ T4648] usb 4-1: Manufacturer: syz [ 123.902911][ T4648] usb 4-1: SerialNumber: syz [ 123.915190][ T4648] usb 4-1: config 0 descriptor?? [ 123.966338][ T4651] usb 5-1: GET_CAPABILITIES returned 0 [ 123.971934][ T4651] usbtmc 5-1:16.0: can't read capabilities [ 124.190236][ T4970] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 124.206600][ T4649] usb 5-1: USB disconnect, device number 3 [ 124.330388][ T4991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 124.653206][ T5005] loop2: detected capacity change from 0 to 64 [ 125.066251][ T4648] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 125.073788][ T4648] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 125.117880][ T4648] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 125.136520][ T4648] f81534: probe of 4-1:0.12 failed with error -71 [ 125.157640][ T4648] usb 4-1: USB disconnect, device number 3 [ 125.426521][ T5022] loop2: detected capacity change from 0 to 512 [ 125.552045][ T5022] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 125.607191][ T5022] EXT4-fs (loop2): invalid journal inode [ 125.616529][ T5022] EXT4-fs (loop2): can't get journal size [ 125.695293][ T5022] EXT4-fs (loop2): 1 truncate cleaned up [ 125.711364][ T5022] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 125.736189][ T5022] process 'syz.2.185' launched './file0/file0' with NULL argv: empty string added [ 126.017145][ T5007] loop4: detected capacity change from 0 to 32768 [ 126.124167][ T5007] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.179 (5007) [ 126.201248][ T5007] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 126.225022][ T5007] BTRFS info (device loop4): using free space tree [ 126.247240][ T5007] BTRFS info (device loop4): has skinny extents [ 126.536331][ T5007] BTRFS info (device loop4): enabling ssd optimizations [ 127.153109][ T5064] loop2: detected capacity change from 0 to 32768 [ 127.213861][ T5064] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.189 (5064) [ 127.301682][ T5064] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 127.337529][ T5064] BTRFS info (device loop2): using free space tree [ 127.354366][ T5064] BTRFS info (device loop2): has skinny extents [ 127.377375][ T4648] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.623846][ T5089] loop4: detected capacity change from 0 to 64 [ 127.626267][ T4648] usb 1-1: Using ep0 maxpacket: 32 [ 127.642985][ T5064] BTRFS info (device loop2): enabling ssd optimizations [ 127.776313][ T4648] usb 1-1: config 1 has no interfaces? [ 127.781841][ T4648] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.078058][ T4648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.180766][ T5098] loop3: detected capacity change from 0 to 2048 [ 128.366341][ T4648] usb 1-1: USB disconnect, device number 3 [ 128.458081][ T5105] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.784638][ T5113] loop3: detected capacity change from 0 to 512 [ 129.715762][ T5118] loop0: detected capacity change from 0 to 64 [ 129.795660][ T5113] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.812795][ T5113] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.341739][ T26] audit: type=1326 audit(1732144941.929:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.2.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff751616819 code=0x0 [ 131.796400][ T5141] loop0: detected capacity change from 0 to 64 [ 132.222407][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 132.526702][ T5149] loop2: detected capacity change from 0 to 256 [ 132.746610][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753139][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.231416][ T5164] loop2: detected capacity change from 0 to 2048 [ 133.315480][ T5164] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.346201][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.370655][ T5164] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.606309][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 133.975366][ T5179] loop4: detected capacity change from 0 to 512 [ 134.336447][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.380094][ T5183] loop0: detected capacity change from 0 to 64 [ 134.436315][ T5183] hfs: get root inode failed [ 134.481622][ T5179] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.567992][ T5179] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.687340][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.704889][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.712984][ T23] usb 4-1: Product: syz [ 134.717203][ T23] usb 4-1: Manufacturer: syz [ 134.721811][ T23] usb 4-1: SerialNumber: syz [ 135.543300][ T5196] loop0: detected capacity change from 0 to 64 [ 135.988098][ T23] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 136.100457][ T5191] loop2: detected capacity change from 0 to 32768 [ 136.181780][ T5191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.219 (5191) [ 136.246520][ T23] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 136.292607][ T23] usb 4-1: USB disconnect, device number 4 [ 136.328672][ T23] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 136.474191][ T5191] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 136.526318][ T5191] BTRFS info (device loop2): use no compression [ 136.532616][ T5191] BTRFS info (device loop2): turning on sync discard [ 136.596156][ T5191] BTRFS info (device loop2): force clearing of disk cache [ 136.603320][ T5191] BTRFS info (device loop2): enabling auto defrag [ 136.672010][ T5191] BTRFS info (device loop2): turning off discard [ 136.696173][ T5191] BTRFS info (device loop2): using free space tree [ 136.723338][ T5191] BTRFS info (device loop2): has skinny extents [ 136.949701][ T5218] loop4: detected capacity change from 0 to 64 [ 137.134718][ T5216] syz.1.227 uses obsolete (PF_INET,SOCK_PACKET) [ 137.871204][ T5191] BTRFS error (device loop2): open_ctree failed [ 138.624992][ T5271] loop4: detected capacity change from 0 to 512 [ 138.773652][ T5260] loop3: detected capacity change from 0 to 4096 [ 138.822998][ T5271] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.874025][ T5271] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.036956][ T5259] crypto_alloc_aead failed rc=-4 [ 139.072016][ T5260] NILFS (loop3): invalid segment: Checksum error in segment payload [ 139.086161][ T5260] NILFS (loop3): trying rollback from an earlier position [ 139.105118][ T5260] NILFS (loop3): recovery complete [ 139.132235][ T5288] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.337984][ T5297] loop2: detected capacity change from 0 to 64 [ 139.672922][ T5307] loop0: detected capacity change from 0 to 24 [ 140.019592][ T5307] overlayfs: empty lowerdir [ 140.579767][ T5316] loop0: detected capacity change from 0 to 64 [ 142.764718][ T5343] loop1: detected capacity change from 0 to 64 [ 142.798507][ T5341] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 143.382006][ T5353] loop0: detected capacity change from 0 to 512 [ 143.533708][ T5353] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.566685][ T5353] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.176658][ T5366] input: syz1 as /devices/virtual/input/input5 [ 145.124648][ T5380] loop1: detected capacity change from 0 to 1024 [ 145.247959][ T5380] hfsplus: type requires a 4 character value [ 145.257493][ T5380] hfsplus: unable to parse mount options [ 146.643321][ T5393] loop0: detected capacity change from 0 to 64 [ 146.854234][ T5375] loop4: detected capacity change from 0 to 32768 [ 146.946209][ T5381] loop2: detected capacity change from 0 to 32768 [ 146.993070][ T5375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.260 (5375) [ 147.046119][ T5375] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 147.055605][ T5375] BTRFS info (device loop4): using free space tree [ 147.068963][ T5381] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.262 (5381) [ 147.111339][ T5375] BTRFS info (device loop4): has skinny extents [ 147.170781][ T5381] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 147.246338][ T5381] BTRFS info (device loop2): using free space tree [ 147.273254][ T5381] BTRFS info (device loop2): has skinny extents [ 147.408628][ T5375] BTRFS info (device loop4): enabling ssd optimizations [ 147.629921][ T26] audit: type=1804 audit(1732144958.219:4): pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.260" name="/newroot/46/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 147.697627][ T5381] BTRFS info (device loop2): enabling ssd optimizations [ 147.771460][ T5398] loop1: detected capacity change from 0 to 32768 [ 147.796483][ T26] audit: type=1804 audit(1732144958.249:5): pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.260" name="/newroot/46/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 147.825975][ T26] audit: type=1804 audit(1732144958.349:6): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.262" name="/newroot/59/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 148.117042][ T5398] XFS (loop1): Mounting V5 Filesystem [ 148.459205][ T5456] loop3: detected capacity change from 0 to 512 [ 148.515448][ T5398] XFS (loop1): Ending clean mount [ 148.632537][ T5456] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.741169][ T5456] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.791042][ T4166] XFS (loop1): Unmounting Filesystem [ 150.656293][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 150.781037][ T5478] loop2: detected capacity change from 0 to 64 [ 152.294579][ T5495] loop4: detected capacity change from 0 to 1024 [ 152.405301][ T5495] EXT4-fs (loop4): Unrecognized mount option "mask=^MAY_READ" or missing value [ 153.334287][ T5505] loop1: detected capacity change from 0 to 16 [ 153.337335][ T5503] loop2: detected capacity change from 0 to 512 [ 153.493594][ T5505] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 153.506106][ T5503] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 153.506202][ T5503] UDF-fs: Scanning with blocksize 512 failed [ 153.507746][ T5503] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 153.507764][ T5503] UDF-fs: Scanning with blocksize 1024 failed [ 153.508197][ T5503] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 153.508214][ T5503] UDF-fs: Scanning with blocksize 2048 failed [ 153.508817][ T5503] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 153.514608][ T5503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.979126][ T5520] loop4: detected capacity change from 0 to 64 [ 156.082174][ T5512] loop1: detected capacity change from 0 to 32768 [ 157.090289][ T5512] XFS (loop1): Mounting V5 Filesystem [ 157.214710][ T5544] netlink: 56 bytes leftover after parsing attributes in process `syz.3.296'. [ 157.401295][ T5512] XFS (loop1): Ending clean mount [ 157.505288][ T4166] XFS (loop1): Unmounting Filesystem [ 158.041636][ T5555] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 160.887961][ T5574] loop3: detected capacity change from 0 to 64 [ 161.539641][ T5570] loop1: detected capacity change from 0 to 40427 [ 161.643196][ T5570] F2FS-fs (loop1): invalid crc value [ 161.660600][ T5570] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.828250][ T5570] F2FS-fs (loop1): Start checkpoint disabled! [ 161.905158][ T5570] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 162.513337][ T5585] loop0: detected capacity change from 0 to 32768 [ 162.620177][ T5585] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.310 (5585) [ 162.707873][ T5585] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 162.731806][ T5585] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 162.731928][ T5585] BTRFS info (device loop0): use zstd compression, level 3 [ 162.731975][ T5585] BTRFS info (device loop0): using free space tree [ 162.731992][ T5585] BTRFS info (device loop0): has skinny extents [ 162.791770][ T4304] attempt to access beyond end of device [ 162.791770][ T4304] loop1: rw=2049, want=40968, limit=40427 [ 163.148497][ T5585] BTRFS info (device loop0): enabling ssd optimizations [ 163.179537][ T26] audit: type=1800 audit(1732144973.769:7): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.310" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 164.210592][ T5627] loop4: detected capacity change from 0 to 32768 [ 164.303885][ T5627] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.318 (5627) [ 164.392131][ T5627] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 164.452220][ T5627] BTRFS info (device loop4): setting nodatacow, compression disabled [ 164.506874][ T5627] BTRFS info (device loop4): force zlib compression, level 3 [ 164.560569][ T5627] BTRFS info (device loop4): turning off barriers [ 164.604033][ T5627] BTRFS info (device loop4): enabling ssd optimizations [ 164.652149][ T5627] BTRFS info (device loop4): using spread ssd allocation scheme [ 164.677007][ T5664] loop0: detected capacity change from 0 to 512 [ 164.716406][ T5627] BTRFS info (device loop4): setting nodatacow [ 164.761988][ T5627] BTRFS info (device loop4): using free space tree [ 164.784957][ T5627] BTRFS info (device loop4): has skinny extents [ 164.875184][ T5664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.916657][ T5664] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.418087][ T5684] loop1: detected capacity change from 0 to 64 [ 165.704740][ T5627] BTRFS info (device loop4): scrub: started on devid 1 [ 165.781948][ T5627] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 166.096920][ T26] audit: type=1326 audit(1732144976.659:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d718a819 code=0x7ffc0000 [ 166.136098][ T26] audit: type=1326 audit(1732144976.659:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d718a819 code=0x7ffc0000 [ 167.070995][ T5710] loop3: detected capacity change from 0 to 24 [ 167.141983][ T5710] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 167.152764][ T5713] loop0: detected capacity change from 0 to 128 [ 167.160737][ T5715] fuse: Bad value for 'user_id' [ 167.188104][ T5710] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 167.248360][ T5713] qnx6: superblock #1 checksum error [ 167.609297][ T4217] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 167.982278][ T4217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.006085][ T4217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.032162][ T4217] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 168.062383][ T4217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.096867][ T4217] usb 2-1: config 0 descriptor?? [ 168.244496][ T5716] loop2: detected capacity change from 0 to 32768 [ 168.737367][ T5716] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.330 (5716) [ 168.774820][ T5716] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 168.798007][ T5716] BTRFS info (device loop2): using free space tree [ 168.804551][ T5716] BTRFS info (device loop2): has skinny extents [ 169.369064][ T5716] BTRFS info (device loop2): enabling ssd optimizations [ 169.788238][ T5758] loop3: detected capacity change from 0 to 1024 [ 169.808916][ T4217] usb 2-1: string descriptor 0 read error: -22 [ 169.851090][ T4217] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input6 [ 169.868592][ T5760] loop0: detected capacity change from 0 to 512 [ 169.935355][ T5758] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.980530][ T4217] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input7 [ 169.999028][ T5760] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.031773][ T5760] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.038881][ T4217] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 170.059103][ T4217] usb 2-1: USB disconnect, device number 2 [ 170.277766][ T5767] loop3: detected capacity change from 0 to 64 [ 171.734237][ T5784] loop1: detected capacity change from 0 to 128 [ 171.738354][ T5785] loop4: detected capacity change from 0 to 1024 [ 171.814650][ T5785] EXT4-fs (loop4): Ignoring removed oldalloc option [ 171.839982][ T5784] qnx6: superblock #1 checksum error [ 171.865602][ T5785] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 172.010995][ T5777] loop2: detected capacity change from 0 to 40427 [ 172.064348][ T5777] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 172.152813][ T26] audit: type=1804 audit(1732144982.739:10): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.344" name="/newroot/63/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 173.395756][ T5810] loop2: detected capacity change from 0 to 64 [ 175.148477][ T5808] loop4: detected capacity change from 0 to 32768 [ 175.226858][ T4158] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4158) [ 175.593774][ T26] audit: type=1326 audit(1732144986.179:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf1191819 code=0x7ffc0000 [ 175.659590][ T26] audit: type=1326 audit(1732144986.199:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7feaf1191819 code=0x7ffc0000 [ 175.747490][ T26] audit: type=1326 audit(1732144986.199:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf1191819 code=0x7ffc0000 [ 175.986196][ T4211] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 176.407394][ T5837] 9pnet: Could not find request transport: fd0xffffffffffffffff0x0000000000000006 [ 176.416750][ T5837] 9pnet: Unknown protocol version 9p200 [ 176.438722][ T5837] lo speed is unknown, defaulting to 1000 [ 176.445195][ T5837] lo speed is unknown, defaulting to 1000 [ 176.465701][ T5837] lo speed is unknown, defaulting to 1000 [ 176.496811][ T5837] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.540410][ T5837] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 176.724701][ T5837] lo speed is unknown, defaulting to 1000 [ 176.731777][ T5837] lo speed is unknown, defaulting to 1000 [ 176.738662][ T5837] lo speed is unknown, defaulting to 1000 [ 176.746119][ T5837] lo speed is unknown, defaulting to 1000 [ 176.752805][ T5837] lo speed is unknown, defaulting to 1000 [ 176.786265][ T4211] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 176.821296][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.875979][ T4211] usb 5-1: config 0 descriptor?? [ 178.092549][ T5850] loop0: detected capacity change from 0 to 64 [ 178.116349][ T4211] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 178.146382][ T4211] asix: probe of 5-1:0.0 failed with error -71 [ 178.172194][ T4211] usb 5-1: USB disconnect, device number 4 [ 179.485668][ T5848] loop3: detected capacity change from 0 to 32768 [ 179.526260][ T4155] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 179.751048][ T5848] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 179.760176][ T5848] BTRFS info (device loop3): enabling auto defrag [ 179.767627][ T5848] BTRFS info (device loop3): max_inline at 0 [ 179.776660][ T4155] usb 3-1: Using ep0 maxpacket: 8 [ 179.790301][ T5848] BTRFS info (device loop3): enabling ssd optimizations [ 179.798223][ T5848] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 179.833115][ T5848] BTRFS info (device loop3): use lzo compression, level 0 [ 179.863124][ T5848] BTRFS info (device loop3): using free space tree [ 179.886299][ T5848] BTRFS info (device loop3): has skinny extents [ 179.896376][ T4155] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 179.915305][ T4155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.973060][ T4155] usb 3-1: config 0 descriptor?? [ 180.173998][ T26] audit: type=1800 audit(1732144990.739:14): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.363" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 180.297607][ T26] audit: type=1800 audit(1732144990.779:15): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.363" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 180.317777][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.018160][ T5895] loop1: detected capacity change from 0 to 2048 [ 181.091599][ T5895] loop1: p1 < > p4 [ 181.119491][ T5895] loop1: p4 size 8388608 extends beyond EOD, truncated [ 182.056938][ T4155] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 182.080520][ T4158] udevd[4158]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 182.106169][ T4155] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 182.110405][ T5203] udevd[5203]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 182.146173][ T4155] asix: probe of 3-1:0.0 failed with error -71 [ 182.192525][ T4155] usb 3-1: USB disconnect, device number 2 [ 182.233642][ T5912] loop3: detected capacity change from 0 to 1024 [ 182.341477][ T5912] EXT4-fs (loop3): Unrecognized mount option "mask=^MAY_READ" or missing value [ 183.168640][ T5920] loop4: detected capacity change from 0 to 64 [ 183.191793][ T5918] loop1: detected capacity change from 0 to 2048 [ 184.831263][ T5920] hfs: get root inode failed [ 184.868893][ T5918] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.186513][ T4340] Bluetooth: hci1: command 0x0406 tx timeout [ 186.207130][ T4340] Bluetooth: hci0: command 0x0406 tx timeout [ 186.215301][ T4340] Bluetooth: hci2: command 0x0406 tx timeout [ 186.236277][ T4340] Bluetooth: hci3: command 0x0406 tx timeout [ 187.780250][ T5941] loop0: detected capacity change from 0 to 512 [ 187.944924][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 188.042709][ T5941] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.462741][ T5954] loop2: detected capacity change from 0 to 4096 [ 188.536448][ T5954] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 188.735706][ T4165] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 188.757067][ T4165] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 188.797760][ T4165] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 189.132361][ T5963] loop4: detected capacity change from 0 to 1024 [ 189.297409][ T5966] loop2: detected capacity change from 0 to 128 [ 189.416361][ T5966] qnx6: superblock #1 checksum error [ 189.461524][ T5963] EXT4-fs (loop4): Unrecognized mount option "mask=^MAY_READ" or missing value [ 190.082471][ T5970] loop2: detected capacity change from 0 to 128 [ 190.131849][ T5970] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.274735][ T5970] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.803736][ T5373] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.265386][ T5983] loop2: detected capacity change from 0 to 4096 [ 192.306089][ T5983] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 192.495225][ T5977] loop3: detected capacity change from 0 to 32768 [ 192.543643][ T5977] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.395 (5977) [ 192.614359][ T5977] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 192.647431][ T5977] BTRFS info (device loop3): setting nodatasum [ 192.674456][ T5977] BTRFS info (device loop3): using free space tree [ 192.699742][ T5977] BTRFS info (device loop3): has skinny extents [ 192.976182][ T6008] loop1: detected capacity change from 0 to 64 [ 193.060784][ T6008] hfs: get root inode failed [ 193.594362][ T5977] BTRFS info (device loop3): enabling ssd optimizations [ 194.187500][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.193999][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.821229][ T6031] loop1: detected capacity change from 0 to 1024 [ 195.062218][ T6031] EXT4-fs (loop1): Unrecognized mount option "mask=^MAY_READ" or missing value [ 196.473627][ T6045] vivid-000: kernel_thread() failed [ 196.854530][ T6037] loop2: detected capacity change from 0 to 32768 [ 197.073260][ T6037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.408 (6037) [ 197.464065][ T6037] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 197.505319][ T6037] BTRFS info (device loop2): metadata ratio 2 [ 197.513685][ T6037] BTRFS info (device loop2): metadata ratio 227 [ 197.521143][ T6037] BTRFS info (device loop2): doing ref verification [ 197.528395][ T6037] BTRFS info (device loop2): using free space tree [ 197.536826][ T6037] BTRFS info (device loop2): has skinny extents [ 197.599289][ T6066] loop1: detected capacity change from 0 to 64 [ 197.694380][ T6066] hfs: get root inode failed [ 197.746131][ T6037] BTRFS info (device loop2): enabling ssd optimizations [ 198.650313][ T6062] loop0: detected capacity change from 0 to 32768 [ 199.475475][ T6062] XFS (loop0): Mounting V5 Filesystem [ 199.946231][ T6062] XFS (loop0): Ending clean mount [ 200.008527][ T6062] XFS (loop0): Quotacheck needed: Please wait. [ 201.604650][ T6112] lo speed is unknown, defaulting to 1000 [ 201.752123][ T6111] vivid-000: kernel_thread() failed [ 202.022167][ T6062] XFS (loop0): Quotacheck: Done. [ 202.457447][ T4164] XFS (loop0): Unmounting Filesystem [ 203.058959][ T6120] loop1: detected capacity change from 0 to 1024 [ 203.166321][ T6120] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 203.201937][ T6124] loop2: detected capacity change from 0 to 64 [ 203.203674][ T6120] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resgid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,dioread_lock,quota,,errors=continue. Quota mode: writeback. [ 203.499976][ T26] audit: type=1800 audit(1732145014.089:16): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.427" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 206.118031][ T6151] loop0: detected capacity change from 0 to 128 [ 206.201776][ T1107] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 207.353501][ T6157] loop3: detected capacity change from 0 to 4096 [ 207.394422][ T26] audit: type=1326 audit(1732145017.979:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a338bd819 code=0x7ffc0000 [ 207.456563][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.465682][ T26] audit: type=1326 audit(1732145017.989:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f8a338bd819 code=0x7ffc0000 [ 207.516078][ T1107] usb 3-1: not running at top speed; connect to a high speed hub [ 207.577030][ T26] audit: type=1326 audit(1732145017.989:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a338bd819 code=0x7ffc0000 [ 207.626246][ T1107] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 207.654643][ T1107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.685740][ T1107] usb 3-1: config 1 has no interface number 1 [ 207.702661][ T1107] usb 3-1: too many endpoints for config 1 interface 3 altsetting 8: 142, using maximum allowed: 30 [ 207.754655][ T1107] usb 3-1: config 1 interface 3 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 142 [ 207.786705][ T1107] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 207.826108][ T1107] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 114, setting to 64 [ 207.856163][ T1107] usb 3-1: config 1 interface 3 has no altsetting 0 [ 208.080159][ T1107] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.096175][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.118964][ T1107] usb 3-1: Product: syz [ 208.128841][ T1107] usb 3-1: Manufacturer: syz [ 208.152778][ T1107] usb 3-1: SerialNumber: syz [ 208.722210][ T1107] usb 3-1: USB disconnect, device number 3 [ 209.019027][ T4158] udevd[4158]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.373599][ T6179] loop1: detected capacity change from 0 to 32768 [ 210.621522][ T6179] read_mapping_page failed! [ 210.654063][ T6179] ERROR: (device loop1): txCommit: [ 210.654063][ T6179] [ 210.722423][ T6179] ERROR: (device loop1): remounting filesystem as read-only [ 210.966685][ T4166] ERROR: (device loop1): diFree: numfree > numinos [ 210.966685][ T4166] [ 211.006371][ T4166] ERROR: (device loop1): remounting filesystem as read-only [ 211.366063][ T6198] 9pnet: Could not find request transport: fd0xffffffffffffffff0x0000000000000006 [ 211.375491][ T6198] 9pnet: Unknown protocol version 9p200 [ 212.217751][ T6202] loop1: detected capacity change from 0 to 128 [ 214.047792][ T6206] loop3: detected capacity change from 0 to 40427 [ 214.267045][ T6206] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 214.290345][ T6206] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 214.373790][ T6206] F2FS-fs (loop3): Found nat_bits in checkpoint [ 214.589307][ T6206] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 214.626702][ T6206] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 214.636654][ T6230] device vlan2 entered promiscuous mode [ 214.649354][ T6230] device syz_tun entered promiscuous mode [ 214.661473][ T6230] device syz_tun left promiscuous mode [ 214.712959][ T6206] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 214.723946][ T6206] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 214.786671][ T6231] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 215.936271][ T4339] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 216.202735][ T4339] usb 1-1: Using ep0 maxpacket: 8 [ 216.395396][ T6250] loop3: detected capacity change from 0 to 128 [ 216.666782][ T4339] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.706291][ T4339] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 216.742305][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.776891][ T4339] usb 1-1: config 0 descriptor?? [ 216.834260][ T4339] usb 1-1: bad CDC descriptors [ 216.872716][ T4339] usb 1-1: bad CDC descriptors [ 217.101511][ T4339] usb 1-1: USB disconnect, device number 4 [ 217.927957][ T6275] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 220.649412][ T6296] loop2: detected capacity change from 0 to 128 [ 221.844824][ T6288] loop0: detected capacity change from 0 to 32768 [ 221.971864][ T6288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.475 (6288) [ 222.053793][ T6288] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 222.066917][ T6288] BTRFS info (device loop0): using free space tree [ 222.074682][ T6288] BTRFS info (device loop0): has skinny extents [ 222.269972][ T6323] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 223.442862][ T6350] netlink: 104 bytes leftover after parsing attributes in process `syz.2.490'. [ 223.656456][ T6288] BTRFS error (device loop0): open_ctree failed [ 224.970278][ T6369] loop0: detected capacity change from 0 to 128 [ 225.744592][ T6369] qnx6: superblock #1 checksum error [ 225.964283][ T6356] loop2: detected capacity change from 0 to 40427 [ 226.087173][ T6356] F2FS-fs (loop2): Unrecognized mount option "errors=continue" or missing value [ 226.131909][ T6363] loop3: detected capacity change from 0 to 32768 [ 226.185903][ T6363] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.494 (6363) [ 226.315428][ T6363] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 226.346097][ T4213] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 226.378060][ T6363] BTRFS info (device loop3): using free space tree [ 226.411885][ T6363] BTRFS info (device loop3): has skinny extents [ 226.606180][ T4213] usb 1-1: Using ep0 maxpacket: 16 [ 226.709534][ T6363] BTRFS info (device loop3): enabling ssd optimizations [ 226.726522][ T4213] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 226.736901][ T4213] usb 1-1: config 0 has no interface number 0 [ 226.758317][ T4213] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 226.769294][ T4213] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 226.781287][ T4213] usb 1-1: config 0 interface 41 has no altsetting 0 [ 226.877827][ T6400] loop2: detected capacity change from 0 to 256 [ 226.895136][ T6398] loop4: detected capacity change from 0 to 64 [ 226.946250][ T4213] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 226.963634][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.970383][ T6398] hfs: get root inode failed [ 226.972856][ T4213] usb 1-1: Product: syz [ 226.981222][ T4213] usb 1-1: Manufacturer: syz [ 226.988685][ T4213] usb 1-1: SerialNumber: syz [ 227.017074][ T4213] usb 1-1: config 0 descriptor?? [ 227.056521][ T6372] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.227296][ T6372] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.239331][ T4224] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 227.247185][ T6400] FAT-fs (loop2): Directory bread(block 64) failed [ 227.519803][ T6400] FAT-fs (loop2): Directory bread(block 65) failed [ 227.545781][ T6400] FAT-fs (loop2): Directory bread(block 66) failed [ 227.573332][ T6400] FAT-fs (loop2): Directory bread(block 67) failed [ 227.583561][ T6400] FAT-fs (loop2): Directory bread(block 68) failed [ 227.593356][ T6400] FAT-fs (loop2): Directory bread(block 69) failed [ 227.603982][ T6400] FAT-fs (loop2): Directory bread(block 70) failed [ 227.613345][ T6400] FAT-fs (loop2): Directory bread(block 71) failed [ 227.624374][ T6400] FAT-fs (loop2): Directory bread(block 72) failed [ 227.634986][ T6400] FAT-fs (loop2): Directory bread(block 73) failed [ 227.828479][ T6372] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.835497][ T6372] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.899391][ T6407] loop4: detected capacity change from 0 to 512 [ 228.009015][ T6407] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.055073][ T6407] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.008343][ T6416] loop2: detected capacity change from 0 to 64 [ 229.096308][ T4213] CoreChips: probe of 1-1:0.41 failed with error -71 [ 229.128097][ T4213] usb 1-1: USB disconnect, device number 5 [ 229.752265][ T6426] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 231.072507][ T6441] vivid-000: kernel_thread() failed [ 231.910658][ T6451] loop4: detected capacity change from 0 to 128 [ 233.196440][ T6464] loop2: detected capacity change from 0 to 64 [ 233.330538][ T6466] loop1: detected capacity change from 0 to 512 [ 233.392343][ T6464] hfs: get root inode failed [ 233.675033][ T6466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.687377][ T6466] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.558268][ T6480] loop2: detected capacity change from 0 to 1024 [ 235.608394][ T6482] loop0: detected capacity change from 0 to 64 [ 235.630425][ T6480] EXT4-fs (loop2): Unrecognized mount option "mask=^MAY_READ" or missing value [ 237.446102][ T6489] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 237.692980][ T6496] loop2: detected capacity change from 0 to 128 [ 238.526271][ T6500] vivid-000: kernel_thread() failed [ 240.353553][ T6519] loop2: detected capacity change from 0 to 64 [ 240.773331][ T6519] hfs: get root inode failed [ 241.062139][ T6529] loop1: detected capacity change from 0 to 512 [ 241.464861][ T6532] loop4: detected capacity change from 0 to 64 [ 241.782903][ T6529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 242.066746][ T6529] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.718149][ T6544] loop4: detected capacity change from 0 to 1024 [ 243.157040][ T6548] vivid-000: kernel_thread() failed [ 243.246464][ T6544] EXT4-fs (loop4): Unrecognized mount option "mask=^MAY_READ" or missing value [ 245.678885][ T6562] loop2: detected capacity change from 0 to 128 [ 245.796603][ T6566] loop4: detected capacity change from 0 to 2048 [ 246.213209][ T6566] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 248.529962][ T6587] loop0: detected capacity change from 0 to 64 [ 248.703219][ T6587] hfs: get root inode failed [ 250.146004][ T6597] vivid-000: kernel_thread() failed [ 250.197262][ T6596] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 250.719375][ T6601] loop0: detected capacity change from 0 to 1024 [ 250.963077][ T6601] EXT4-fs (loop0): Unrecognized mount option "mask=^MAY_READ" or missing value [ 252.374342][ T6613] 9pnet: Could not find request transport: fd0xffffffffffffffff0x0000000000000006 [ 252.383959][ T6613] 9pnet: Unknown protocol version 9p200 [ 253.165675][ T4648] [ 253.168807][ T4648] ============================= [ 253.173681][ T4648] WARNING: suspicious RCU usage [ 253.178612][ T4648] 5.15.173-syzkaller #0 Not tainted [ 253.183822][ T4648] ----------------------------- [ 253.188746][ T4648] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 253.197115][ T4648] [ 253.197115][ T4648] other info that might help us debug this: [ 253.197115][ T4648] [ 253.207380][ T4648] [ 253.207380][ T4648] rcu_scheduler_active = 2, debug_locks = 1 [ 253.215453][ T4648] 8 locks held by kworker/0:13/4648: [ 253.220799][ T4648] #0: ffff8880623eed38 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 253.231949][ T4648] #1: ffffc90003977d20 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 253.244565][ T4648] #2: ffff88807d4f1438 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x56/0x1d0 [ 253.255615][ T4648] #3: ffffffff8c91fcc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 253.265405][ T4648] #4: ffffffff8c91fcc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 253.275084][ T4648] #5: ffffffff8c91fcc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 253.284745][ T4648] #6: ffff88801fb59908 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xc1f/0x32b0 [ 253.294398][ T4648] #7: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 253.303784][ T4648] [ 253.303784][ T4648] stack backtrace: [ 253.309723][ T4648] CPU: 0 PID: 4648 Comm: kworker/0:13 Not tainted 5.15.173-syzkaller #0 [ 253.318058][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 253.328122][ T4648] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 253.334220][ T4648] Call Trace: [ 253.337504][ T4648] [ 253.340442][ T4648] dump_stack_lvl+0x1e3/0x2d0 [ 253.345142][ T4648] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 253.350804][ T4648] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 253.356371][ T4648] qdisc_lookup+0xa8/0x630 [ 253.360806][ T4648] qdisc_tree_reduce_backlog+0x212/0x4f0 [ 253.366461][ T4648] pfifo_tail_enqueue+0x2ca/0x400 [ 253.371511][ T4648] tbf_enqueue+0x345/0x6a0 [ 253.375941][ T4648] ? __rwlock_init+0x140/0x140 [ 253.380726][ T4648] dev_qdisc_enqueue+0x47/0x240 [ 253.385587][ T4648] ? __dev_queue_xmit+0xcba/0x32b0 [ 253.390724][ T4648] __dev_queue_xmit+0xe32/0x32b0 [ 253.395717][ T4648] ? dev_queue_xmit+0x20/0x20 [ 253.400428][ T4648] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 253.406424][ T4648] ? print_irqtrace_events+0x210/0x210 [ 253.411906][ T4648] ? ip_finish_output2+0xadb/0x11a0 [ 253.417132][ T4648] ip_finish_output2+0xcd7/0x11a0 [ 253.422174][ T4648] ? ip_mc_finish_output+0x480/0x480 [ 253.427477][ T4648] ? ip_fragment+0x210/0x210 [ 253.432090][ T4648] ? __ip_finish_output+0x3dd/0x4a0 [ 253.437304][ T4648] iptunnel_xmit+0x513/0x950 [ 253.441926][ T4648] udp_tunnel_xmit_skb+0x1d0/0x2d0 [ 253.447064][ T4648] send4+0x94a/0xf50 [ 253.451007][ T4648] ? wg_socket_send_skb_to_peer+0x1d0/0x1d0 [ 253.456915][ T4648] ? wg_socket_send_skb_to_peer+0x56/0x1d0 [ 253.462745][ T4648] ? del_timer+0x183/0x310 [ 253.467179][ T4648] ? wg_socket_send_skb_to_peer+0x56/0x1d0 [ 253.473005][ T4648] wg_socket_send_skb_to_peer+0xd1/0x1d0 [ 253.478668][ T4648] wg_packet_tx_worker+0x1a1/0x7a0 [ 253.483812][ T4648] process_one_work+0x8a1/0x10c0 [ 253.488792][ T4648] ? worker_detach_from_pool+0x260/0x260 [ 253.494455][ T4648] ? _raw_spin_lock_irqsave+0x120/0x120 [ 253.500032][ T4648] ? kthread_data+0x4e/0xc0 [ 253.504568][ T4648] ? wq_worker_running+0x97/0x170 [ 253.509632][ T4648] worker_thread+0xaca/0x1280 [ 253.514367][ T4648] kthread+0x3f6/0x4f0 [ 253.518458][ T4648] ? rcu_lock_release+0x20/0x20 [ 253.523327][ T4648] ? kthread_blkcg+0xd0/0xd0 [ 253.527941][ T4648] ret_from_fork+0x1f/0x30 [ 253.532400][ T4648] [ 255.618109][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.624466][ T1420] ieee802154 phy1 wpan1: encryption failed: -22