last executing test programs: 8.690374353s ago: executing program 0 (id=143): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x2009410, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000163000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.475492298s ago: executing program 0 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac5496f"], 0x18}, 0xc894) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r5 = dup3(r3, r2, 0x80000) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xffffffffffffffb5) keyctl$get_persistent(0x16, r7, r6) keyctl$get_persistent(0x16, 0x0, r6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd0}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0xd) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r9, &(0x7f0000000380), 0xe) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 7.492109842s ago: executing program 0 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]}) 7.411667023s ago: executing program 1 (id=146): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\\\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r1, @ANYRES64=r2/1000+60000], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20012900000005"], 0x0}) 7.259622887s ago: executing program 0 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@delchain={0x2c, 0x66, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0x6}, {0x0, 0xfff1}, {0xc, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000881}, 0x49090) 7.102078411s ago: executing program 0 (id=150): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") r0 = open(0x0, 0x64942, 0x0) sendfile(r0, r0, 0x0, 0x1000200201005) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r1, 0x0, 0xfff, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2a42, 0x100) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) 3.970599305s ago: executing program 1 (id=162): setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/80, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 3.723610481s ago: executing program 0 (id=164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000500)={0x40, 0x13, 0x4, "eba01ef3"}, 0x0, 0x0, 0x0, 0x0}) 3.723303961s ago: executing program 1 (id=165): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) bind$x25(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7500}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xde}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.484792926s ago: executing program 1 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}], 0x2, 0x7, 0x20000000) 3.34340405s ago: executing program 1 (id=167): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0450084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.369217843s ago: executing program 2 (id=175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x100000000, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff6, 0x2, 0x68ff, 0x9, 0x5, 0x80000000, 0xffff, 0x8000000000, 0xfffffffffffffffc], 0x26000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.325459324s ago: executing program 4 (id=176): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@nouid32}]}, 0x5, 0x4bf, &(0x7f0000000a00)="$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") getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0x40001a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000007c0)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0xe, r1, 0x0, 0x0, 0x7}]) 2.276406635s ago: executing program 3 (id=177): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x24d, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @aes128, 0x0, '\x00', @auto="fc06bdcd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) creat(&(0x7f00000014c0)='./file0\x00', 0x0) 2.231966836s ago: executing program 2 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000883}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070029000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.925032274s ago: executing program 3 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000005fe050007"], 0x4a) 1.779454177s ago: executing program 4 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x30, 0x790, 0x80000000002, 0x180, 0x9, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3bc, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.531886993s ago: executing program 3 (id=181): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='S', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000140)={0x1, "e91b90d4142f4d3279b365e884dd8a77bf7e554a20d1c97c046c4f1bf23640005f94d51efce90fa574e58a1143da4ccebce72a2702ecd13eb19e2d91876087d6", {0x7f, 0x40}}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) dup(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f00000000c0)=0x80000001) 1.474209024s ago: executing program 4 (id=182): open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.433273535s ago: executing program 3 (id=183): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b00000002000000090001007379"], 0x7c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.276364589s ago: executing program 2 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e") 1.261624479s ago: executing program 4 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002") ioctl(r1, 0x934, 0x0) 1.173031072s ago: executing program 3 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7fd, 0x2, 0x1}, {0x101, 0x0, 0x1}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x8}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 1.103247693s ago: executing program 4 (id=187): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4000000000000000, 0x0, 0x9, 0xaaa, 0x2}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="34010000170001002cbd7000fbdbdf25ac1414bb000000000000000000000000000004d56c000000fc020000000000000000000000000001fe8000000000230000000000000000b3a20664c7bf263085bc8cc5f8ee28cb9f6ab280dfbb0000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000038ffffffff0000000000000000000000004e2200074e2200050200200033", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500000000000000010001000000000007000000000000000000000001000000060000000000000004000000000000000f000000000000000100000000000000ffffffff00000000008000000000000004000000000000000000000000000000030000000000200000000003"], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) 1.094643554s ago: executing program 2 (id=188): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000980)='./bus\x00', 0x2949c0b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 1.031199195s ago: executing program 2 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac5496f"], 0x18}, 0xc894) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r5 = dup3(r3, r2, 0x80000) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xffffffffffffffb5) keyctl$get_persistent(0x16, r7, r6) keyctl$get_persistent(0x16, 0x0, r6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0x90}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0xd) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r9, &(0x7f0000000380), 0xe) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 945.693367ms ago: executing program 3 (id=190): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, 0x0, 0x0, 0x0}, 0x0) 1.890569ms ago: executing program 1 (id=191): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r3 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 684.089µs ago: executing program 4 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='syz\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='add foosyz 127.0.0.1\n\x00', 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000200)=@cell={0x25, '', 'syz0', '.readonly'}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)={[{@dyn}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foo@sys\x00', 0x0, 0x0) 0s ago: executing program 2 (id=193): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40008, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xa) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 62.813623][ T4174] cgroup: Unknown subsys name 'net' [ 62.969031][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.424214][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.826358][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.934440][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 65.949162][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.991323][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.999960][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.009100][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.020338][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.027699][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.035894][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.060451][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 66.121631][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.144269][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.195293][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.202715][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.211118][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.230133][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.244097][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.251273][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.259775][ T4193] device bridge_slave_0 entered promiscuous mode [ 66.267294][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.274823][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.282640][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.292921][ T4188] team0: Port device team_slave_0 added [ 66.317121][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.324898][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.332581][ T4193] device bridge_slave_1 entered promiscuous mode [ 66.348190][ T4188] team0: Port device team_slave_1 added [ 66.354321][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.361393][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.372489][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.387493][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.394941][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.402798][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.431396][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.463573][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.489727][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.500672][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.509748][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.537598][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.557835][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.565496][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.592346][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.606574][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.623143][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.646066][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.670095][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.677933][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.686196][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.696518][ T4187] team0: Port device team_slave_0 added [ 66.725167][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.732359][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.740647][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.756805][ T4187] team0: Port device team_slave_1 added [ 66.774861][ T4193] team0: Port device team_slave_0 added [ 66.783334][ T4186] team0: Port device team_slave_0 added [ 66.816622][ T4193] team0: Port device team_slave_1 added [ 66.826555][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.837418][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.847094][ T4186] team0: Port device team_slave_1 added [ 66.854973][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.902189][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.912013][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.919821][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.948585][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.970820][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.979009][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.007705][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.019612][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.027120][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.056292][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.069476][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.076985][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.110794][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.148461][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.155953][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.191027][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.205301][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.213172][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.243465][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.317060][ T4189] team0: Port device team_slave_0 added [ 67.326023][ T4189] team0: Port device team_slave_1 added [ 67.339979][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.347659][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.354978][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.363300][ T4187] Cannot create hsr debugfs directory [ 67.375156][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.382192][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.389444][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.397905][ T4186] Cannot create hsr debugfs directory [ 67.453295][ T4193] device hsr_slave_0 entered promiscuous mode [ 67.464150][ T4193] device hsr_slave_1 entered promiscuous mode [ 67.471240][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.478894][ T4193] Cannot create hsr debugfs directory [ 67.485589][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.493308][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.522457][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.535860][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.543036][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.571234][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 67.573153][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 67.578396][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.590007][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 67.603637][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 67.610459][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 67.731029][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.738808][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.746267][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.756325][ T4189] Cannot create hsr debugfs directory [ 67.932605][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.943498][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.961040][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.982960][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.036833][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.047114][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.066119][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.091458][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.125182][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.152704][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.174109][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.185561][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.284939][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.298158][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.308826][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.321739][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.334399][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.347673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.359573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.375601][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.416399][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.425770][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.437691][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.445557][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.456397][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.465951][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.477157][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.485606][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.496690][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.505590][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.527834][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.538134][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.569623][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.578794][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.606592][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.614101][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.623143][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.633893][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.662873][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.673570][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.682112][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.689571][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.714629][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.724987][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.738199][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.747366][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.756985][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.765908][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.773179][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.781524][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.790770][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.806740][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.824514][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.834907][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.848011][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.860387][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.879370][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.890406][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.906948][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.914798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.923466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.932613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.943401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.952031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.960045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.968120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.979972][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.013660][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.027108][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.037471][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.047386][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.062363][ T530] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.069642][ T530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.078687][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.088827][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.100861][ T530] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.109619][ T530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.118702][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.127486][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.138850][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.148325][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.163045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.178714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.209480][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.230368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.241406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.259454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.269908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.280508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.295519][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.316429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.332617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.343841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.353804][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.361373][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.370723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.398841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.421698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.432515][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.440416][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.451583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.464629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.476596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.522340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.532643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.549173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.561258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.571902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.582224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.591282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.601795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.621672][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.643727][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.646044][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 69.654479][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.665854][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 69.668113][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.673548][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 69.685274][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.693605][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 69.697370][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.701909][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 69.712244][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.726631][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.742178][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.768744][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.777505][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.787227][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.797674][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.829249][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.851178][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.871544][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.888336][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.919125][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.928532][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.938850][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.949066][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.975281][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.998878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.010853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.026901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.037918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.055901][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.064113][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.106401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.123958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.145056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.155522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.164251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.173104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.182235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.191609][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.198904][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.214870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.223221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.234603][ T4188] device veth0_vlan entered promiscuous mode [ 70.251468][ T4188] device veth1_vlan entered promiscuous mode [ 70.272571][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.290617][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.300575][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.310721][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.319851][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.328959][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.346667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.356790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.369796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.378066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.388068][ T4187] device veth0_vlan entered promiscuous mode [ 70.405747][ T4187] device veth1_vlan entered promiscuous mode [ 70.417109][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.452398][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.461730][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.471050][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.480846][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.489030][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.497423][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.506526][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.516143][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.525707][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.534540][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.543456][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.552180][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.566121][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.575109][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.593273][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.604794][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.628436][ T4188] device veth0_macvtap entered promiscuous mode [ 70.639351][ T4188] device veth1_macvtap entered promiscuous mode [ 70.659918][ T4187] device veth0_macvtap entered promiscuous mode [ 70.678564][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.692364][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.705335][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.720505][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.730417][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.739556][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.762722][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.772773][ T4187] device veth1_macvtap entered promiscuous mode [ 70.780732][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.798117][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.810855][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.820937][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.830551][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.859354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.870647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.879937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.887966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.901052][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.923923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.937412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.953639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.962453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.978234][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.988785][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.998017][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.007965][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.021333][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.032672][ T4186] device veth0_vlan entered promiscuous mode [ 71.046596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.060552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.071417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.084876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.095926][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.107630][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.119456][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.127779][ T4193] device veth0_vlan entered promiscuous mode [ 71.143936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.152687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.187544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.200202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.212303][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.223849][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.235580][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.257394][ T4193] device veth1_vlan entered promiscuous mode [ 71.266523][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.287319][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.303285][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.313477][ T4186] device veth1_vlan entered promiscuous mode [ 71.350255][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.361299][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.370292][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.379385][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.426348][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.435802][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.445510][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.454918][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.464076][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.473273][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.481917][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.493331][ T4193] device veth0_macvtap entered promiscuous mode [ 71.538873][ T4193] device veth1_macvtap entered promiscuous mode [ 71.549025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.558204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.568235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.578224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.592604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.600834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.627712][ T4186] device veth0_macvtap entered promiscuous mode [ 71.656231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.668402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.678966][ T4189] device veth0_vlan entered promiscuous mode [ 71.694875][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.706272][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.717306][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.730266][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.741131][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 71.745225][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.748134][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 71.760791][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 71.767301][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 71.768272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.773905][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 71.788153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.801297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.814087][ T4186] device veth1_macvtap entered promiscuous mode [ 71.837504][ T3055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.846413][ T3055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.860301][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.873750][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.887074][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.901882][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.913278][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.927957][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.939453][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.949608][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.960443][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.971230][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.982057][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.994052][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.003581][ T4189] device veth1_vlan entered promiscuous mode [ 72.018325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.026919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.036117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.044876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.054374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.063401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.072014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.090211][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.099447][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.109215][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.118732][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.130634][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.130766][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.157503][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.168699][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.179860][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.190734][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.201016][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.218210][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.229840][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.251247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.261889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.277016][ T530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.291064][ T4189] device veth0_macvtap entered promiscuous mode [ 72.296281][ T530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.302514][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.316697][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.326643][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.335881][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.360391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.375015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.384711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.398946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.411977][ T4189] device veth1_macvtap entered promiscuous mode [ 72.440835][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.451665][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.485018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.504430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.514819][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.526817][ T530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.535007][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.537989][ T530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.547863][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.566368][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.577222][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.588613][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.600325][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.611461][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.624420][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.652427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.667857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.679386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.712654][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.724377][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.735129][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.749318][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.759400][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.770481][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.780492][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.791609][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.807445][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.857606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.889202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.926037][ T3055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.931776][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.948624][ T3055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.957121][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.975501][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.996336][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.030894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.046528][ T4264] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 73.072194][ T530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.081712][ T3055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.101398][ T530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.110233][ T3055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.165443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.178210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.278921][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.312992][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.345732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.390828][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.409763][ T4268] loop5: detected capacity change from 0 to 7 [ 73.421049][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.434545][ T4270] loop3: detected capacity change from 0 to 128 [ 73.445323][ T4268] loop5: [ 73.450465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.462075][ T4268] loop5: partition table partially beyond EOD, truncated [ 73.555337][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.587329][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.601208][ T4270] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.606506][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.625731][ T4266] loop1: detected capacity change from 0 to 32768 [ 73.649130][ T4274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.663470][ T4270] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.738062][ T4270] EXT4-fs (loop3): shut down requested (2) [ 73.745906][ T4270] fscrypt (loop3, inode 12): Error -5 getting encryption context [ 73.756174][ T4270] fscrypt (loop3, inode 12): Error -5 getting encryption context [ 73.781258][ T4266] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4266) [ 73.790862][ T4277] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 73.822295][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 73.838236][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 73.886543][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 73.898244][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 73.909918][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 73.958183][ T4266] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 73.974087][ T4266] BTRFS info (device loop1): using free space tree [ 73.980671][ T4266] BTRFS info (device loop1): has skinny extents [ 74.174062][ T4298] ======================================================= [ 74.174062][ T4298] WARNING: The mand mount option has been deprecated and [ 74.174062][ T4298] and is ignored by this kernel. Remove the mand [ 74.174062][ T4298] option from the mount to silence this warning. [ 74.174062][ T4298] ======================================================= [ 74.202338][ T4293] loop4: detected capacity change from 0 to 4096 [ 74.305395][ T4297] file system registered [ 74.336831][ T4266] BTRFS info (device loop1): enabling ssd optimizations [ 74.366893][ T4297] unloading [ 74.372197][ T4293] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 74.755623][ T4189] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 75.147580][ T4330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 75.906768][ T4359] loop2: detected capacity change from 0 to 128 [ 75.935468][ T4358] loop0: detected capacity change from 0 to 2048 [ 76.008589][ T4323] loop4: detected capacity change from 0 to 32768 [ 76.019125][ T4342] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 76.063500][ T4359] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 76.126487][ T4359] hpfs: filesystem error: improperly stopped [ 76.170605][ T4323] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 76.192414][ T4359] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 76.233847][ T4358] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,max_dir_size_kb=0x000000000000f2a5,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none. [ 76.256638][ T4359] hpfs: You really don't want any checks? You are crazy... [ 76.285253][ T4359] hpfs: hpfs_map_sector(): read error [ 76.303939][ T4359] hpfs: code page support is disabled [ 76.316376][ T4359] hpfs: hpfs_map_4sectors(): unaligned read [ 76.346265][ T4359] hpfs: hpfs_map_4sectors(): unaligned read [ 76.352223][ T4359] hpfs: filesystem error: unable to find root dir [ 76.383380][ T4342] usb 2-1: not running at top speed; connect to a high speed hub [ 76.433884][ T4323] (syz.4.14,4323,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 76.463112][ T4342] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 76.484655][ T4342] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 76.495932][ T4359] hpfs: hpfs_map_4sectors(): unaligned read [ 76.513056][ T4342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.517662][ T4358] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 76.524117][ T4372] loop3: detected capacity change from 0 to 764 [ 76.533326][ T4359] hpfs: hpfs_map_sector(): read error [ 76.549245][ T4323] (syz.4.14,4323,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 76.552148][ T4359] hpfs: hpfs_map_4sectors(): unaligned read [ 76.571688][ T4359] hpfs: hpfs_map_sector(): read error [ 76.608353][ T4342] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 76.647295][ T4372] rock: directory entry would overflow storage [ 76.664004][ T4342] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 76.673977][ T4372] rock: sig=0x5245, size=8, remaining=5 [ 76.708171][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 76.727453][ T4358] EXT4-fs (loop0): Remounting filesystem read-only [ 76.819237][ T4358] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.23: mark_inode_dirty error [ 76.953248][ T4358] EXT4-fs (loop0): Remounting filesystem read-only [ 76.985836][ T4358] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 77.044520][ T4196] usb 2-1: USB disconnect, device number 2 [ 77.050957][ T4358] EXT4-fs (loop0): Remounting filesystem read-only [ 77.062477][ T4379] loop3: detected capacity change from 0 to 256 [ 77.089614][ T4358] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.23: mark_inode_dirty error [ 77.090499][ T4196] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 77.134347][ T4381] capability: warning: `syz.4.28' uses deprecated v2 capabilities in a way that may be insecure [ 77.153797][ T4196] garmin_gps 2-1:1.0: device disconnected [ 77.153917][ T4379] FAT-fs (loop3): Unrecognized mount option "phortname=mixed" or missing value [ 77.225405][ T4358] EXT4-fs (loop0): Remounting filesystem read-only [ 77.281342][ T26] audit: type=1800 audit(1787635426.878:2): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 77.435811][ T4379] loop3: detected capacity change from 0 to 512 [ 77.535601][ T4379] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 8: comm syz.3.30: lblock 0 mapped to illegal pblock 8 (length 1) [ 77.583590][ T4379] EXT4-fs (loop3): Remounting filesystem read-only [ 77.591018][ T4379] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.30: error -117 reading directory block [ 77.610877][ T4379] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 77.620138][ T4379] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 8: comm syz.3.30: lblock 0 mapped to illegal pblock 8 (length 1) [ 77.642829][ T4379] EXT4-fs (loop3): Remounting filesystem read-only [ 77.662945][ T4379] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.30: error -117 reading directory block [ 77.734578][ T4379] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 77.762169][ T4379] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,init_itable,nobarrier,discard,debug_want_extra_isize=0x0000000000000010,grpjquota=.barrier=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,usrquota,nobarrier,usrjquota=.,nolazytime,max_dir_size_kb=0x0000000000. Quota mode: writeback. [ 78.202210][ T4388] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 78.268331][ T4399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.325858][ T4402] EXT4-fs (loop1): Ignoring removed orlov option [ 78.393587][ T4402] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 78.482248][ T4388] set_capacity_and_notify: 2 callbacks suppressed [ 78.482263][ T4388] loop4: detected capacity change from 0 to 512 [ 78.508878][ T4399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.575782][ T26] audit: type=1800 audit(1787635428.178:3): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.38" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 78.629799][ T4388] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 78.671986][ T4399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.784680][ T4388] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 78.826858][ T4388] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.829974][ T4418] loop3: detected capacity change from 0 to 512 [ 78.889045][ T4399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.972068][ T4418] EXT4-fs (loop3): Test dummy encryption mode enabled [ 78.991531][ T4418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c118, mo2=0002] [ 79.041290][ T4418] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.41: inode #1: comm syz.3.41: iget: illegal inode # [ 79.063954][ T4418] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.41: error while reading EA inode 1 err=-117 [ 79.232673][ T4418] EXT4-fs (loop3): 1 orphan inode deleted [ 79.272108][ T4418] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,journal_ioprio=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,errors=continue. Quota mode: none. [ 79.297487][ T4424] loop4: detected capacity change from 0 to 128 [ 79.388690][ T4424] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 79.461054][ T4424] hpfs: filesystem error: improperly stopped [ 79.481067][ T4418] EXT4-fs error (device loop3): xattr_find_entry:297: inode #12: comm syz.3.41: corrupted xattr entries [ 79.492810][ T4424] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 79.492857][ T4424] hpfs: You really don't want any checks? You are crazy... [ 79.492871][ T4424] hpfs: Code page index out of array [ 79.492878][ T4424] hpfs: code page support is disabled [ 79.493109][ T4424] hpfs: hpfs_map_4sectors(): unaligned read [ 79.493145][ T4424] hpfs: hpfs_map_4sectors(): unaligned read [ 79.603912][ T4424] hpfs: filesystem error: unable to find root dir [ 80.084103][ T4443] loop2: detected capacity change from 0 to 2048 [ 80.183320][ T4443] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.359550][ T4443] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 80.431448][ T4443] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 10 with error 28 [ 80.498206][ T4443] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.498206][ T4443] [ 80.527820][ T4443] EXT4-fs (loop2): Total free blocks count 0 [ 80.543164][ T4443] EXT4-fs (loop2): Free/Dirty block details [ 80.549541][ T4443] EXT4-fs (loop2): free_blocks=2415919504 [ 80.556330][ T4443] EXT4-fs (loop2): dirty_blocks=16 [ 80.561706][ T4443] EXT4-fs (loop2): Block reservation details [ 80.582612][ T4443] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 80.616530][ T4457] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 80.698517][ T4457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.698517][ T4457] [ 80.745317][ T4462] device-mapper: ioctl: unable to find target [ 80.846798][ T4475] loop1: detected capacity change from 0 to 2048 [ 80.916383][ T4475] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 81.024144][ T4476] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 81.031024][ T4476] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.066858][ T4477] vhci_hcd: xmit failed -107 [ 81.099542][ T4476] vhci_hcd vhci_hcd.0: Device attached [ 81.176443][ T3055] vhci_hcd: stop threads [ 81.181456][ T3055] vhci_hcd: release socket [ 81.233912][ T3055] vhci_hcd: disconnect device [ 81.279610][ T4262] vhci_hcd: vhci_device speed not set [ 81.425063][ T4487] loop4: detected capacity change from 0 to 64 [ 81.682854][ T2239] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.863274][ T4473] loop3: detected capacity change from 0 to 32768 [ 81.901993][ T4495] HTB: quantum of class FFF10000 is small. Consider r2q change. [ 81.939403][ T4496] sp0: Synchronizing with TNC [ 81.973069][ T2239] usb 2-1: Using ep0 maxpacket: 32 [ 81.982276][ T4473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.60 (4473) [ 82.035352][ T4473] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 82.071178][ T4473] BTRFS info (device loop3): metadata ratio 2 [ 82.093205][ T4503] loop2: detected capacity change from 0 to 512 [ 82.101560][ T4473] BTRFS info (device loop3): force zlib compression, level 3 [ 82.120443][ T4473] BTRFS info (device loop3): enabling auto defrag [ 82.133094][ T2239] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.156739][ T4473] BTRFS info (device loop3): max_inline at 0 [ 82.184278][ T4473] BTRFS info (device loop3): using free space tree [ 82.203261][ T2239] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 82.208384][ T4473] BTRFS info (device loop3): has skinny extents [ 82.210912][ T2239] usb 2-1: can't read configurations, error -71 [ 82.254637][ T4503] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.70: inode has both inline data and extents flags [ 82.377804][ T4503] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.70: couldn't read orphan inode 15 (err -117) [ 82.388719][ T4496] loop0: detected capacity change from 0 to 4096 [ 82.595246][ T26] audit: type=1800 audit(1787635432.198:4): pid=4473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.60" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 82.652917][ T4503] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 82.666120][ T4526] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.431913][ T4547] loop3: detected capacity change from 0 to 32768 [ 83.533410][ T26] audit: type=1800 audit(1787635433.138:5): pid=4547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.72" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 84.034073][ T4555] loop4: detected capacity change from 0 to 40427 [ 84.119308][ T4555] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 84.127839][ T4555] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 84.170498][ T4555] F2FS-fs (loop4): Found nat_bits in checkpoint [ 84.232830][ T4555] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 84.240116][ T4555] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 84.516372][ T4547] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 84.516372][ T4547] [ 84.530689][ T4547] ERROR: (device loop3): remounting filesystem as read-only [ 84.607014][ T4536] loop1: detected capacity change from 0 to 32768 [ 84.634097][ T4555] attempt to access beyond end of device [ 84.634097][ T4555] loop4: rw=10241, want=45104, limit=40427 [ 84.845003][ T4564] loop2: detected capacity change from 0 to 512 [ 84.854488][ T4552] loop0: detected capacity change from 0 to 32768 [ 84.858468][ T4536] XFS (loop1): Mounting V5 Filesystem [ 84.922043][ T3055] attempt to access beyond end of device [ 84.922043][ T3055] loop4: rw=1, want=45104, limit=40427 [ 84.964728][ T4564] EXT4-fs (loop2): Ignoring removed nobh option [ 84.980267][ T4536] XFS (loop1): Ending clean mount [ 85.003675][ T4552] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.74 (4552) [ 85.044209][ T4552] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 85.054836][ T4552] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 85.067405][ T4552] BTRFS info (device loop0): turning on async discard [ 85.074402][ T4552] BTRFS info (device loop0): using free space tree [ 85.082212][ T4552] BTRFS info (device loop0): has skinny extents [ 85.091593][ T4564] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 85.107191][ T4536] XFS (loop1): Quotacheck needed: Please wait. [ 85.109683][ T4564] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 85.178397][ T4564] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #13: comm syz.2.78: inode has both inline data and extents flags [ 85.262010][ T4564] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.78: couldn't read orphan inode 13 (err -117) [ 85.282112][ T4536] XFS (loop1): Quotacheck: Done. [ 85.309827][ T4564] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 85.542983][ T4552] BTRFS info (device loop0): enabling ssd optimizations [ 85.949370][ T4180] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop0 scanned by udevd (4180) [ 85.996332][ T4187] XFS (loop1): Unmounting Filesystem [ 86.062862][ T4262] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.653128][ T4262] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 86.662285][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.685150][ T4618] loop3: detected capacity change from 0 to 1024 [ 86.699166][ T4262] usb 5-1: Product: syz [ 86.703992][ T4262] usb 5-1: Manufacturer: syz [ 86.723942][ T4262] usb 5-1: SerialNumber: syz [ 86.758894][ T4618] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 86.785945][ T4262] usb 5-1: USB2VGA dongle found at address 2 [ 86.819023][ T4618] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 86.834843][ T4262] usb 5-1: Allocated 8 output buffers [ 86.891885][ T26] audit: type=1326 audit(1787635436.488:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.0.89" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1385aad0d9 code=0x0 [ 86.915622][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.934334][ T4618] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.013478][ T4618] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.83: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.094583][ T4618] EXT4-fs (loop3): Remounting filesystem read-only [ 87.123670][ T4618] EXT4-fs (loop3): 1 orphan inode deleted [ 87.129583][ T4618] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback. [ 87.485774][ T1329] cfg80211: failed to load regulatory.db [ 87.618996][ T4262] usb 5-1: Failed to early initialize device [ 87.643576][ T4262] usb 5-1: USB disconnect, device number 2 [ 87.890450][ T4644] Zero length message leads to an empty skb [ 87.933264][ T4537] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.086302][ T4648] loop4: detected capacity change from 0 to 2048 [ 88.170805][ T4648] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 88.203804][ T4648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.294583][ T4537] usb 3-1: config 0 has no interfaces? [ 88.300632][ T4537] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.336423][ T4537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.380817][ T4537] usb 3-1: config 0 descriptor?? [ 88.820746][ T4262] usb 3-1: USB disconnect, device number 2 [ 88.933121][ T4340] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 88.971737][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 89.475928][ T4690] device syzkaller1 entered promiscuous mode [ 89.484455][ T1108] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 89.486053][ T4340] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 89.516701][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.525163][ T4340] usb 5-1: Product: syz [ 89.529516][ T4340] usb 5-1: Manufacturer: syz [ 89.534611][ T4340] usb 5-1: SerialNumber: syz [ 89.550647][ T4340] usb 5-1: config 0 descriptor?? [ 89.815663][ T4340] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 89.863209][ T1108] usb 1-1: config 0 has no interfaces? [ 89.869471][ T1108] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.906881][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.940964][ T1108] usb 1-1: config 0 descriptor?? [ 90.100129][ T4696] loop1: detected capacity change from 0 to 1024 [ 90.212476][ T4262] usb 1-1: USB disconnect, device number 2 [ 90.248231][ T4696] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.363624][ T4689] loop3: detected capacity change from 0 to 32768 [ 90.537972][ T4689] XFS (loop3): Mounting V5 Filesystem [ 90.791863][ T4689] XFS (loop3): Ending clean mount [ 90.797566][ T4716] loop2: detected capacity change from 0 to 256 [ 90.917575][ T4716] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 91.058148][ T4193] XFS (loop3): Unmounting Filesystem [ 91.076702][ T26] audit: type=1800 audit(1787635440.678:7): pid=4716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.116" name="file1" dev="loop2" ino=1048599 res=0 errno=0 [ 91.192975][ T4342] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.219523][ T4716] exFAT-fs (loop2): hint_cluster is invalid (17) [ 91.263398][ T4725] loop1: detected capacity change from 0 to 512 [ 91.373057][ T4340] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 91.400277][ T4340] usb 5-1: USB disconnect, device number 3 [ 91.405082][ T4725] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 91.423044][ T4725] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.514273][ T4342] usb 1-1: Using ep0 maxpacket: 8 [ 91.683272][ T4342] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 91.703521][ T4342] usb 1-1: config 179 has no interface number 0 [ 91.711352][ T4342] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 91.742190][ T26] audit: type=1800 audit(1787635441.338:8): pid=4725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.121" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 91.773073][ T4342] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 91.800078][ T4734] loop2: detected capacity change from 0 to 4096 [ 91.802482][ T4342] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.829042][ T4342] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 91.844442][ T4342] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 91.858850][ T4342] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 91.869810][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.924351][ T4734] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 91.935864][ T4736] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.958410][ T4718] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.972951][ T4734] NILFS (loop2): mounting fs with errors [ 92.108331][ T4734] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 159744 [ 92.143549][ T4734] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 92.194573][ T4734] NILFS (loop2): error -5 truncating bmap (ino=15) [ 92.324081][ T4342] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 92.335519][ T26] audit: type=1800 audit(1787635441.928:9): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.120" name="file0" dev="fuse" ino=1 res=0 errno=0 [ 92.577946][ T4749] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 92.646696][ T4747] loop1: detected capacity change from 0 to 8192 [ 92.907355][ T4342] usb 1-1: USB disconnect, device number 3 [ 92.932915][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 92.941791][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 92.972969][ T4342] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 93.239925][ T4187] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 93.251253][ T4187] FAT-fs (loop1): Filesystem has been set read-only [ 93.342858][ T4340] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 93.443811][ T4758] loop4: detected capacity change from 0 to 32768 [ 93.556173][ T4758] JBD2: Ignoring recovery information on journal [ 93.648432][ T4758] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 93.880297][ T4767] loop0: detected capacity change from 0 to 512 [ 94.375296][ T26] audit: type=1804 audit(1787635443.958:10): pid=4758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.130" name="/newroot/19/file1/file1" dev="loop4" ino=17059 res=1 errno=0 [ 94.476060][ T4767] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.133: bg 0: block 5: invalid block bitmap [ 94.544295][ T4767] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 94.562580][ T4767] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.133: invalid indirect mapped block 3 (level 2) [ 94.565021][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.588282][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.590443][ T4758] syz.4.130 (4758) used greatest stack depth: 20416 bytes left [ 94.598489][ T4340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.598549][ T4340] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.598573][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.609285][ T4340] usb 3-1: config 0 descriptor?? [ 94.635671][ T4767] EXT4-fs (loop0): 1 orphan inode deleted [ 94.651617][ T4767] EXT4-fs (loop0): 1 truncate cleaned up [ 94.657933][ T4767] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 94.660665][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 94.744226][ T26] audit: type=1800 audit(1787635444.348:11): pid=4767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 95.165556][ T4340] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 95.232085][ T4340] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 95.534258][ T4342] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.472786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 96.492775][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 96.502767][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 96.512766][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 96.522768][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 96.532765][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 96.542796][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 96.552793][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 96.733125][ T4342] usb 5-1: config 6 has an invalid descriptor of length 208, skipping remainder of the config [ 96.943035][ T4342] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 96.957512][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.007604][ T4342] usb 5-1: Product: syz [ 97.011820][ T4342] usb 5-1: Manufacturer: syz [ 97.041940][ T4342] usb 5-1: SerialNumber: syz [ 97.046890][ T4340] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.178133][ T4846] loop5: detected capacity change from 0 to 7 [ 97.207207][ T4846] Dev loop5: unable to read RDB block 7 [ 97.223965][ T4846] loop5: AHDI p1 p2 p3 [ 97.228401][ T4846] loop5: partition table partially beyond EOD, truncated [ 97.256295][ T4846] loop5: p1 start 1601398130 is beyond EOD, truncated [ 97.282900][ T4846] loop5: p2 start 1702059890 is beyond EOD, truncated [ 97.419381][ T4537] usb 3-1: USB disconnect, device number 3 [ 97.463921][ T4340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.509485][ T4342] usb 5-1: USB disconnect, device number 4 [ 97.520409][ T4340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.580705][ T4340] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 97.622850][ T4340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.664525][ T4340] usb 2-1: config 0 descriptor?? [ 97.836936][ T4731] udevd[4731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.862235][ T4842] loop0: detected capacity change from 0 to 32768 [ 97.959210][ T4863] process 'syz.3.156' launched '/dev/fd/4' with NULL argv: empty string added [ 98.160418][ T4340] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 98.214790][ T4842] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.150 (4842) [ 98.419804][ T4340] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 98.575955][ T4340] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 98.648237][ T4340] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 98.721460][ T4340] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 98.777498][ T4340] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 98.816565][ T4870] loop3: detected capacity change from 0 to 16384 [ 98.835884][ T4842] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 98.893155][ T4842] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.924367][ T4842] BTRFS info (device loop0): use zstd compression, level 3 [ 98.942781][ T4883] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.974801][ T4842] BTRFS info (device loop0): using free space tree [ 98.981372][ T4842] BTRFS info (device loop0): has skinny extents [ 98.992841][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.063022][ T4340] playstation 0003:054C:0DF2.0002: Invalid gyro calibration data for axis (3), disabling calibration. [ 99.117634][ T4340] playstation 0003:054C:0DF2.0002: Invalid gyro calibration data for axis (5), disabling calibration. [ 99.131675][ T4896] loop2: detected capacity change from 0 to 256 [ 99.189101][ T4340] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 99.232872][ T4896] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.242822][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 99.305669][ T4896] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 99.324634][ T4340] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 99.341328][ T4340] input: HID 054c:0df2 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0002/input/input6 [ 99.348179][ T4896] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 99.363364][ T4340] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0002/input/input7 [ 99.366497][ T1108] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 99.384275][ T4340] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0002/input/input8 [ 99.409866][ T4842] BTRFS info (device loop0): enabling ssd optimizations [ 99.410105][ T4340] playstation 0003:054C:0DF2.0002: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 99.463541][ T4340] usb 2-1: USB disconnect, device number 5 [ 99.487987][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.556404][ T1108] usb 5-1: config 0 descriptor?? [ 99.603169][ T1108] as10x_usb: device has been detected [ 99.621429][ T1108] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 99.735287][ T4916] fido_id[4916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 99.742616][ T1108] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 99.848194][ T1108] as10x_usb: error during firmware upload part1 [ 99.855774][ T1108] Registered device nBox DVB-T Dongle [ 99.890148][ T1108] usb 5-1: USB disconnect, device number 5 [ 100.061255][ T4922] loop2: detected capacity change from 0 to 512 [ 100.291758][ T1108] Unregistered device nBox DVB-T Dongle [ 100.306918][ T1108] as10x_usb: device has been disconnected [ 100.607884][ T4935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 100.657450][ T4906] loop3: detected capacity change from 0 to 32768 [ 100.943245][ T4906] XFS (loop3): Mounting V5 Filesystem [ 101.023070][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.105046][ T4906] XFS (loop3): Ending clean mount [ 101.224844][ T4193] XFS (loop3): Unmounting Filesystem [ 101.268798][ T4967] dummy_hcd dummy_hcd.0: remove, state 1 [ 101.287325][ T4967] usb usb1: USB disconnect, device number 1 [ 101.363077][ T4537] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.376426][ T4537] usb usb1-port1: attempt power cycle [ 101.383233][ T1108] usb 2-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47 [ 101.392585][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.429130][ T1108] usb 2-1: config 0 descriptor?? [ 101.477729][ T1108] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 101.510706][ T4967] dummy_hcd dummy_hcd.0: stopped [ 101.518127][ T4967] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 101.669652][ T26] audit: type=1800 audit(1787635451.268:12): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.174" name="dwFrameInterval" dev="configfs" ino=34663 res=0 errno=0 [ 101.811410][ T4981] loop4: detected capacity change from 0 to 512 [ 101.812658][ T4983] loop3: detected capacity change from 0 to 128 [ 101.910167][ T4983] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.951087][ T4983] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.996980][ T4981] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: writeback. [ 102.032678][ T4983] EXT4-fs (loop3): shut down requested (2) [ 102.062886][ T4981] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.080853][ T4983] fscrypt (loop3, inode 12): Error -5 getting encryption context [ 102.501062][ T4994] kvm: pic: non byte read [ 102.506582][ T4994] kvm: pic: non byte read [ 102.652776][ T4999] loop2: detected capacity change from 0 to 7 [ 102.675787][ T4999] Dev loop2: unable to read RDB block 7 [ 102.686798][ T4999] loop2: unable to read partition table [ 102.692645][ T4999] loop2: partition table beyond EOD, truncated [ 102.709238][ T4999] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.751741][ T3559] Dev loop2: unable to read RDB block 7 [ 102.760444][ T3559] loop2: unable to read partition table [ 102.783550][ T3559] loop2: partition table beyond EOD, truncated [ 102.882942][ T1108] gspca_stv06xx: I2C: Read error writing address: -71 [ 102.925182][ T1108] usb 2-1: USB disconnect, device number 6 [ 103.453059][ T4954] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.753075][ T4954] usb 4-1: Using ep0 maxpacket: 32 [ 103.883535][ T4954] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.940326][ T4954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.980130][ T4954] usb 4-1: config 0 has no interface number 0 [ 103.993507][ T4954] usb 4-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.012298][ T4954] usb 4-1: config 0 interface 1 has no altsetting 0 [ 104.117729][ T4962] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 104.129583][ T4962] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 104.138113][ T4962] CPU: 1 PID: 4962 Comm: syz.0.164 Not tainted syzkaller #0 [ 104.145425][ T4962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.155502][ T4962] RIP: 0010:set_link_state+0x27/0x1000 [ 104.161074][ T4962] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 20 df 42 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 eb 07 88 fb 49 8b 0e 4d 8d a6 a3 00 [ 104.180828][ T4962] RSP: 0018:ffffc90004b2f7e0 EFLAGS: 00010046 [ 104.187015][ T4962] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888025fc1dc0 [ 104.195023][ T4962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.203221][ T4962] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 104.211213][ T4962] R10: dffffc0000000000 R11: fffff52000965ee8 R12: 0000000000000a02 [ 104.219204][ T4962] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.227202][ T4962] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 104.236153][ T4962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.242750][ T4962] CR2: 0000001b3281dff8 CR3: 0000000063874000 CR4: 00000000003506e0 [ 104.250922][ T4962] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.261770][ T4962] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.269771][ T4962] Call Trace: [ 104.273069][ T4962] [ 104.276022][ T4962] ? lock_chain_count+0x20/0x20 [ 104.280894][ T4962] ? mutex_lock_io_nested+0x60/0x60 [ 104.286115][ T4962] dummy_pullup+0xbd/0x120 [ 104.290578][ T4962] ? dummy_set_selfpowered+0x150/0x150 [ 104.296057][ T4962] usb_gadget_disconnect+0xd0/0x3a0 [ 104.301536][ T4962] usb_gadget_remove_driver+0x4a/0x350 [ 104.307027][ T4962] usb_gadget_unregister_driver+0x15d/0x4c0 [ 104.312995][ T4962] raw_release+0xd6/0x260 [ 104.317440][ T4962] ? raw_open+0x510/0x510 [ 104.321795][ T4962] __fput+0x212/0x8c0 [ 104.325805][ T4962] task_work_run+0x125/0x1a0 [ 104.330519][ T4962] do_exit+0x635/0x2110 [ 104.334796][ T4962] ? put_task_struct+0x80/0x80 [ 104.339852][ T4962] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.345865][ T4962] ? _raw_spin_lock_irq+0xb7/0xf0 [ 104.350956][ T4962] do_group_exit+0x12c/0x2f0 [ 104.355581][ T4962] ? lockdep_hardirqs_on+0x94/0x140 [ 104.360826][ T4962] get_signal+0x7eb/0x12e0 [ 104.365375][ T4962] arch_do_signal_or_restart+0xe6/0x12a0 [ 104.371045][ T4962] ? get_sigframe_size+0x10/0x10 [ 104.376110][ T4962] ? exit_to_user_mode_loop+0x3b/0x130 [ 104.381709][ T4962] exit_to_user_mode_loop+0x9e/0x130 [ 104.387035][ T4962] exit_to_user_mode_prepare+0xee/0x180 [ 104.392615][ T4962] syscall_exit_to_user_mode+0x16/0x40 [ 104.398102][ T4962] do_syscall_64+0x58/0xa0 [ 104.402535][ T4962] ? clear_bhb_loop+0x30/0x80 [ 104.407233][ T4962] ? clear_bhb_loop+0x30/0x80 [ 104.412104][ T4962] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.418014][ T4962] RIP: 0033:0x7f1385aacd6b [ 104.422449][ T4962] Code: Unable to access opcode bytes at RIP 0x7f1385aacd41. [ 104.429823][ T4962] RSP: 002b:00007f1383d02f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.438271][ T4962] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f1385aacd6b [ 104.446278][ T4962] RDX: 00007f1383d03fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 104.454458][ T4962] RBP: 00007f1383d03fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 104.463503][ T4962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 104.471618][ T4962] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f1385b628e2 [ 104.479905][ T4962] [ 104.483101][ T4962] Modules linked in: [ 104.487021][ T4962] ---[ end trace 25c1a136f65c36ae ]--- [ 104.492573][ T4962] RIP: 0010:set_link_state+0x27/0x1000 [ 104.498591][ T4962] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 20 df 42 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 eb 07 88 fb 49 8b 0e 4d 8d a6 a3 00 [ 104.519011][ T4962] RSP: 0018:ffffc90004b2f7e0 EFLAGS: 00010046 [ 104.525121][ T4962] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888025fc1dc0 [ 104.533302][ T4962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.541404][ T4962] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 104.550700][ T4962] R10: dffffc0000000000 R11: fffff52000965ee8 R12: 0000000000000a02 [ 104.559053][ T4962] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.567054][ T4962] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 104.576004][ T4962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.582617][ T4962] CR2: 0000001b3281dff8 CR3: 0000000063874000 CR4: 00000000003506e0 [ 104.590623][ T4962] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.598708][ T4962] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.608537][ T4962] Kernel panic - not syncing: Fatal exception [ 104.614823][ T4962] Kernel Offset: disabled [ 104.619248][ T4962] Rebooting in 86400 seconds..