last executing test programs: 19.189229225s ago: executing program 1 (id=265): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010006418e01400004fcff", 0x58}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000180)=0x1) setresgid(0xee00, 0xee01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x29d, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0xfff, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x4, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x5, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gre0\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast1}, 0x0) 12.25425068s ago: executing program 2 (id=279): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000240)={0x0, 0x6109, 0x800, 0x0, 0x1a2}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3001, &(0x7f0000000380)={0x0, 0x200081b7, 0x0, 0x1, 0x38a}, &(0x7f0000000240), &(0x7f0000000180)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080), 0x6) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f4d9e1}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 10.682686508s ago: executing program 2 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x9, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0/file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f0000000300)='binfmt_misc\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 10.641121271s ago: executing program 1 (id=283): pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x7, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 10.568653354s ago: executing program 1 (id=284): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103000100092100000088224e510905810300"], 0x0) 10.568493454s ago: executing program 0 (id=285): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1218e09, &(0x7f0000000500)={[{@abort}, {@barrier}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x102}}, {@delalloc}, {@bh}]}, 0x6, 0x5fb, &(0x7f0000001200)="$eJzs3c9rHFUcAPDv7CYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszqabzW66TbM7aebzgc3OezO773138jLvzeTtBFBY4+mPUsSuiDunkoixpnWjUV85nm13+49rp9NHEtXqm78nkWR5je2T7Hl7lhiOiO+PRjxeXl3uwpWrZ6cr1boPIvYvnru4f+HK1X3z56bPzJ6ZPT914KWDhyZfnjo4tSFxbs+ejx1/4+lPP3z3xbkfKvuSOBwnB9+fiZY4Nsp4jMedLMTm/IGIOJQutPlcHjb3FcJI7+rB+pTrzT8GI+LJGIty7bezbizmP8m1ckBPVcsRVaCgEu0fCqrRD2iM7bsbB5/sca+kf24dqQ/IV8c/UD83EsO1sdG220nTyKh+bmPHBpSflvHftd1fpo9YcR7i7+W9M7AB5XSydD0inmoXf1Kr245apGn8pRX1SCJiMiKGsvq99gB1SJqWe3EeZi3rjT8dMx/OntP8o+ssf7wl3e/4ASimm0eyA/lSmrp7/Ev7Ho3+T7Tp/4y2OXatR97Hv879v8bxfnj5HHlr/+dE+7ccbM345eNjn3cqv7n/lz7S8ht9wX64dT1id0v8H6XBZv2fNP6kzf5PNzl1uLsyXv/xt2Od1uUdf/VGxJ6245+7vdJ0aY3rk/vn5iuzk/Wfbcv49rt3vu5Uft7xp/t/W4f4m/Z/qfV16Wdyscsyvjlx41yndaP3jL/061BSH28OZTnvTS8uXpqKGEqOZ5s05R9Yuy6NbRrvkca/97n27X/F7//1le8z0viT2YWLb5293WndevZ/08XkO9Uu69BJGv/Mvff/qvaf5n3WZRl/vX35mU7r1orf5WIAAAAAAAC4P6XaNdikNLG8XCpNTNTnyz4R20qVCwuLz89duHx+JmJv7f8hB0uNK91j9XSSpqey/4dtpA+0pF+IiJ0R8UV5pJaeOH2hMpN38AAAAAAAAAAAAAAAAAAAALBJbM/m/zfuU/1nuT7/HyiIXt5gDtjctH8orlr7X3WLJ6AIHP+huLR/KC7tH4pL+4fi0v6huLR/KC7tH4pL+wcAAACALWnnszd/TiJi6ZWR2iM1lK0zIwi2tsG8KwDkppx3BYDcLF/619mHwumq//9P9uWAva8OkIOkXWatc1Bdu/HfbPtKAAAAAAAAAAAAAKAH9uzqPP/f3GDY2kz7g+J6gPn/vjoAHnK++h+KyxgfuNcs/uFOK8z/BwAAAAAAAAAAAIC+Ga09ktJENhd4NEqliYmIRyNiRwwmc/OV2cmIeCwifioPPpKmp/KuNAAAAAAAAAAAAAAAAAAAAGwxC1eunp2uVGYvNS/8uypnay807oLah7Jejft8VST9/1hGIiL3ndKzhYGmnCRiKd3zm6JilxZic1SjtpDzHyYAAAAAAAAAAAAAAAAAACigprnH7e3+qs81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+u3v//94t5B0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBw+j8AAP//jvRAMw==") 10.568039024s ago: executing program 3 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 9.490792238s ago: executing program 4 (id=287): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000001300)=[0x0]) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r4, r3, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0) sendfile(r6, r6, 0x0, 0x2000fb) 9.480502408s ago: executing program 3 (id=288): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 9.362678474s ago: executing program 2 (id=289): syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) 8.348065174s ago: executing program 3 (id=290): syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x65, 0x0, 0x0, 0x6, 0x0, @private=0xaa1010c, @local, {[@generic={0x7, 0x3, '\x00'}]}}, {{0xe0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x7}}}}}}, 0x0) 8.347630355s ago: executing program 0 (id=291): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000000c0)=0x7ff, 0xc32d, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB], 0x5c}, 0x1, 0x6c}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = fsopen(&(0x7f0000000080)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0xa) open_by_handle_at(r8, &(0x7f0000000180)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x6b8, 0x22281a3c, 0x1b, 0x3, 0x9615}}, 0x400002) getdents64(0xffffffffffffffff, 0x0, 0x4f) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000900)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@utf8no}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0xe4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x89, 0x29b, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x143042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file2\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000514210626bd700000000000080001"], 0x20}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x20, &(0x7f0000000280)={0x0, 0x3, 0xe2, 0x6}, 0x8, 0x0, 0x5, 0x0, 0x50, 0x6, 0x0}) 8.307559236s ago: executing program 4 (id=292): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000240)={0x0, 0x6109, 0x800, 0x0, 0x1a2}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3001, &(0x7f0000000380)={0x0, 0x200081b7, 0x0, 0x1, 0x38a}, &(0x7f0000000240), &(0x7f0000000180)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080), 0x6) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f4d9e1}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 6.304860136s ago: executing program 4 (id=293): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0), 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32], 0x68}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 6.257612668s ago: executing program 3 (id=294): r0 = getpid() syz_pidfd_open(r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x7, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 6.248697429s ago: executing program 0 (id=295): syz_usb_connect$uac1(0x5, 0x84, &(0x7f0000000a00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4650, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x5, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf950, 0x1c}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x400, 0x6, 0x3, 0xfa}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x405, 0x6, 0x2, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x8, 0x3, {0x7, 0x25, 0x1, 0xc, 0x90, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x9, 0x1, {0x7, 0x25, 0x1, 0xc, 0x3}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 6.168173393s ago: executing program 1 (id=296): syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a9074d206960390ff9e80102030109022b000100002000090448010201039180090500011002020000090582160002001200072501"], 0x0) 5.870010067s ago: executing program 2 (id=297): socket(0x200000000000011, 0x4000000000080002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0xa00004, &(0x7f0000000500)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@mode={'mode', 0x3d, 0x8}}, {}, {@adinicb}, {@gid_forget}, {@uid_forget}, {@umask}, {@anchor={'anchor', 0x3d, 0x907}}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5e11, &(0x7f000000bc40)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffd4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) r9 = creat(0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x6000) io_setup(0x202, 0x0) 5.576634472s ago: executing program 4 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.132615334s ago: executing program 4 (id=299): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1, &(0x7f00000001c0)=ANY=[], 0xb, 0xb2, &(0x7f0000000140)="$eJzs0bFJxUAcBvD/BUWbgL2FG2QEIRM4Q7BMOqtIKvdwBJdwAEfIBhYpbGxOwh0E+wePB79fcd93fM3Bff1+3OfDVc6RIvYWuZ1fx2F6ma/HYYrHOKSaN8GFa+p39hHx8Fb6d1+2VPd1W57XbfnZsyxPnyXf2/O9HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOJ939vzfRdbXe7sdfAAAA//+hvyUV") 4.041961669s ago: executing program 2 (id=300): creat(0x0, 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="110000000400000004000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r3, 0x3b79, 0x3137, 0x8, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000700)=0x38f, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479", 0x2}], 0x1}}], 0x1, 0x24044015) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="00ea5bd69d713e222cd60cd11db90800000000000000ea4152adefefb2fcccba61cbfd569fa19db9f8c2d61957d809"], 0x1, 0x221, &(0x7f0000000000)="$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") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) 3.837388768s ago: executing program 3 (id=301): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x30, r5, 0x301, 0x0, 0x0, {0x34}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) io_setup(0x29e, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syncfs(0xffffffffffffffff) r6 = fcntl$dupfd(r0, 0x406, r0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000295000/0x4000)=nil, 0x4000, 0x1a, 0x80010, r7, 0x8000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047f9, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r6, &(0x7f0000000500)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) shutdown(r0, 0x1) 2.342309863s ago: executing program 2 (id=302): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)={0x38, r5, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_BSS_SELECT={0x14, 0xe3, 0x0, 0x1, {0x10, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x7}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}]}, 0x38}}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, 0x0, 0x2404c085) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x38}}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r11, 0x4161, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 2.227984548s ago: executing program 1 (id=303): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r5, 0xbc7ae000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 2.226814899s ago: executing program 0 (id=313): creat(0x0, 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="110000000400000004000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r3, 0x3b79, 0x3137, 0x8, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000700)=0x38f, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479", 0x2}], 0x1}}], 0x1, 0x24044015) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="00ea5bd69d713e222cd60cd11db90800000000000000ea4152adefefb2fcccba61cbfd569fa19db9f8c2d61957d809"], 0x1, 0x221, &(0x7f0000000000)="$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") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) 2.20118958s ago: executing program 3 (id=304): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005979e08d21001000000000000010902120001000000000904"], 0x0) 1.976826041s ago: executing program 4 (id=305): syz_usb_connect$uac1(0x0, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000002082057d004000010203010902740003010680070904000000010100000a240da80f0a00020102090401000001"], 0x0) 451.583557ms ago: executing program 1 (id=306): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006e4369204c05e10265de010203010902240001000000000904fb0002b8dd3000090504e8100000fa00090507"], 0x0) 121.724984ms ago: executing program 0 (id=307): socket$isdn(0x22, 0x2, 0x10) 0s ago: executing program 0 (id=308): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0), 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32], 0x68}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 64.576864][ T4174] cgroup: Unknown subsys name 'net' [ 64.715915][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.233331][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.369989][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 68.465282][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 68.538223][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.546130][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.554580][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.567704][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.574982][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.583213][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.598643][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 68.610472][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.636703][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.706524][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.723366][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.731858][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.740398][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.766730][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.776139][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.783530][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.792233][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.869520][ T4191] team0: Port device team_slave_0 added [ 68.891982][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.917222][ T4191] team0: Port device team_slave_1 added [ 68.923501][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.931047][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.939285][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.950073][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.964186][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.971603][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.980211][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.987999][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.995605][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.004220][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.025707][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.033160][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.041792][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.055090][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.062513][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.070887][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.078013][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.085202][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.093552][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.101578][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.108562][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.135053][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.173919][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.181207][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.207592][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.230193][ T4190] team0: Port device team_slave_0 added [ 69.256423][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.267422][ T4190] team0: Port device team_slave_1 added [ 69.276292][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.289045][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.300507][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.323828][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.349556][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.388758][ T4187] team0: Port device team_slave_0 added [ 69.404621][ T4187] team0: Port device team_slave_1 added [ 69.418231][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.425469][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.451975][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.475506][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.483070][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.499959][ T4186] team0: Port device team_slave_0 added [ 69.506466][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.513588][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.545836][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.560760][ T4188] team0: Port device team_slave_0 added [ 69.586089][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.593406][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.620056][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.633942][ T4186] team0: Port device team_slave_1 added [ 69.647024][ T4188] team0: Port device team_slave_1 added [ 69.674686][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.682049][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.708723][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.749750][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.756653][ T4190] device hsr_slave_1 entered promiscuous mode [ 69.763958][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.771919][ T4190] Cannot create hsr debugfs directory [ 69.782884][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.790566][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.817121][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.834346][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.841979][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.868908][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.880985][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.888054][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.914391][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.927398][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.934483][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.961390][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.015753][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.022605][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.029327][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.036924][ T4187] Cannot create hsr debugfs directory [ 70.071156][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.078606][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.086079][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 70.089438][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 70.095990][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 70.098428][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 70.111747][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 70.118015][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.125845][ T4186] Cannot create hsr debugfs directory [ 70.218095][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.225372][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.233004][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.240851][ T4188] Cannot create hsr debugfs directory [ 70.495401][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.525417][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.535818][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.552121][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.585374][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.595769][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.609542][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.619605][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.707326][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.717250][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.745618][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.755507][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.825753][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.841660][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.853399][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.863217][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.873471][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.906234][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.917815][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.945241][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.976128][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.986791][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.996669][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.004058][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.014114][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.042703][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.053533][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.065446][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.072840][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.103371][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.111386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.125207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.134676][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.154324][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.177588][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.188581][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.213757][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.226134][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.236872][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.246398][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.255368][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.266073][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.275341][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.284688][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.293193][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.301508][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.310459][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.318968][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.327811][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.355433][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.368387][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.382344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.391619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.400837][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.407930][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.417269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.426424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.435020][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.442192][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.450375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.458800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.467984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.477411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.487591][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.494777][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.502764][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.516513][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.526584][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.534083][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.554369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.566437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.576685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.592315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.602782][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.609975][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.618157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.627324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.648777][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.691624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.710772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.718622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.728646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.737858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.747427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.757122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.766805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.777266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.786426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.795807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.804886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.813808][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.821413][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.832080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.841038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.865502][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.876517][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.899047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.907763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.922199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.936522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.948032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.960601][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.967742][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.981163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.996225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.006505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.016040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.025962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.035359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.045689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.056642][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.084414][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.096367][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.120727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.130917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.142150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.151223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.162510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.169948][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 72.182651][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 72.194362][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 72.211297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.227800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.229478][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 72.250233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.264982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.269557][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 72.286610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.295093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.311071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.336774][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.351703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.365200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.377926][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.441987][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.469896][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.497633][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.555135][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.566938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.580264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.593308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.604020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.617721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.626525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.638164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.646220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.660527][ T4191] device veth0_vlan entered promiscuous mode [ 72.678123][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.704873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.728736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.752240][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.759941][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.790597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.799659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.808445][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.815609][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.825934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.833572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.841691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.865196][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.888508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.911376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.959763][ T4191] device veth1_vlan entered promiscuous mode [ 72.967195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.977334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.988430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.997895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.011372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.020734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.028355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.037771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.059645][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.076781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.087999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.097278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.107470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.121946][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.136593][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.165689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.179778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.195120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.204406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.216513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.225657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.234466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.243699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.253023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.283169][ T4187] device veth0_vlan entered promiscuous mode [ 73.341312][ T4190] device veth0_vlan entered promiscuous mode [ 73.360801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.379927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.390293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.401032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.411128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.420099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.438768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.447528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.457213][ T4187] device veth1_vlan entered promiscuous mode [ 73.485845][ T4188] device veth0_vlan entered promiscuous mode [ 73.495611][ T4190] device veth1_vlan entered promiscuous mode [ 73.506110][ T4191] device veth0_macvtap entered promiscuous mode [ 73.516680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.536144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.553968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.569234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.591376][ T4191] device veth1_macvtap entered promiscuous mode [ 73.624189][ T4187] device veth0_macvtap entered promiscuous mode [ 73.642510][ T4188] device veth1_vlan entered promiscuous mode [ 73.657779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.667276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.677080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.687413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.700537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.709534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.722218][ T4190] device veth0_macvtap entered promiscuous mode [ 73.734498][ T4187] device veth1_macvtap entered promiscuous mode [ 73.754883][ T4190] device veth1_macvtap entered promiscuous mode [ 73.782984][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.798666][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.810349][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.822163][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.843068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.852063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.861169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.870794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.879776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.888686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.898633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.907264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.917206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.926987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.936453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.945903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.960408][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.972015][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.983166][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.001730][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.013300][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.025604][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.034887][ T4188] device veth0_macvtap entered promiscuous mode [ 74.045065][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.059222][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.068003][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.083847][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.098540][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.109279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.117657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.127908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.138332][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.150108][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.160854][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.171472][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.184919][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.194886][ T4188] device veth1_macvtap entered promiscuous mode [ 74.210603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.221860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.231305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.239921][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 74.246282][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 74.255538][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.266424][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 74.272720][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.283303][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.295844][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.308060][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.321230][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.329874][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 74.332112][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.340041][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 74.346916][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.361073][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.388369][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.402593][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.413278][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.424074][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.434086][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.444643][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.455936][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.464002][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.474974][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.484748][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.497365][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.514747][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.524747][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.533927][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.542919][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.571921][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.582950][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.593242][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.604554][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.614876][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.625712][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.637430][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.687009][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.696415][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.706122][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.715987][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.730096][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.739260][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.747993][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.756853][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.864805][ T4186] device veth0_vlan entered promiscuous mode [ 74.873387][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.886551][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.928103][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.942983][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.973458][ T4186] device veth1_vlan entered promiscuous mode [ 75.002270][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.020044][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.053770][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.053902][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.074235][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.078784][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.086124][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.107668][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.152478][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.164365][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.175946][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.184355][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.192299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.204898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.213993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.222926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.240633][ T4186] device veth0_macvtap entered promiscuous mode [ 75.272219][ T4186] device veth1_macvtap entered promiscuous mode [ 75.279931][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.288110][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.311513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.323920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.332558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.346471][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.364907][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.386617][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.387179][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.420171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.432479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.456753][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.469101][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.479643][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.499795][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.510869][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.522201][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.533443][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.544585][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.561329][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.570793][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.579901][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.581788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.597278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.612566][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.642442][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.652965][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.664386][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.694882][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.712790][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.726558][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.746061][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.760461][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.782792][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.798427][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.808040][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.823212][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.945291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.969834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.015449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.028868][ T4280] syz.0.1 (4280): attempted to duplicate a private mapping with mremap. This is not supported. [ 76.593015][ T4286] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 76.605874][ T4286] Zero length message leads to an empty skb [ 76.940401][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 76.949621][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 76.970188][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 76.983274][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 77.014341][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 77.439919][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.447896][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.470258][ T4289] IPv6: NLM_F_REPLACE set, but no existing node found! [ 77.604130][ T4295] loop0: detected capacity change from 0 to 512 [ 77.623046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.680601][ T4295] ======================================================= [ 77.680601][ T4295] WARNING: The mand mount option has been deprecated and [ 77.680601][ T4295] and is ignored by this kernel. Remove the mand [ 77.680601][ T4295] option from the mount to silence this warning. [ 77.680601][ T4295] ======================================================= [ 77.801486][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.825752][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.994191][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.311238][ T4295] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.602955][ T4295] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.850337][ T4316] binfmt_misc: Unknown parameter 'trans' [ 80.787248][ T4295] EXT4-fs: failed to create workqueue [ 80.793415][ T4295] EXT4-fs (loop0): mount failed [ 81.177266][ T4327] loop2: detected capacity change from 0 to 128 [ 81.249304][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 81.258657][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 81.269531][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 81.279501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 81.288902][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 81.298891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 81.308887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.318886][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.328892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.338887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 83.132942][ T4327] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 84.678856][ C1] sched: RT throttling activated [ 87.688670][ T1348] cfg80211: failed to load regulatory.db [ 88.713619][ T4373] loop1: detected capacity change from 0 to 128 [ 89.300670][ T4373] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 89.338206][ T4296] udevd[4296]: incorrect ext4 checksum on /dev/loop1 [ 89.863018][ T4384] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 91.202799][ T1348] Bluetooth: hci2: command 0x0406 tx timeout [ 92.908515][ T4409] netlink: 76 bytes leftover after parsing attributes in process `syz.1.33'. [ 93.692759][ T4409] device syzkaller0 entered promiscuous mode [ 93.700640][ T4412] loop2: detected capacity change from 0 to 1024 [ 93.765253][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.772620][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.779595][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.786389][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.793468][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.800300][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.807083][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.813926][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.820762][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.827556][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.834427][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.841251][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.848100][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.854938][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.861854][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.868690][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.875541][ T4409] tc action pedit offset must be on 32 bit boundaries [ 93.882571][ T4409] 0: reclassify loop, rule prio 0, protocol 800 [ 94.064861][ T4412] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 94.529242][ T26] audit: type=1326 audit(2000000006.120:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f97cea799 code=0x7ffc0000 [ 95.600271][ T26] audit: type=1326 audit(2000000006.120:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f97cea799 code=0x7ffc0000 [ 95.898133][ T26] audit: type=1326 audit(2000000006.120:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f97cea799 code=0x7ffc0000 [ 96.154130][ T26] audit: type=1326 audit(2000000006.120:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f97cea799 code=0x7ffc0000 [ 96.726876][ T26] audit: type=1326 audit(2000000006.120:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0f97cea799 code=0x7ffc0000 [ 96.749200][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.967833][ T26] audit: type=1326 audit(2000000006.120:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f97cea799 code=0x7ffc0000 [ 97.066965][ T26] audit: type=1326 audit(2000000006.120:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f97cea799 code=0x7ffc0000 [ 97.115611][ T26] audit: type=1326 audit(2000000006.120:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f97cea799 code=0x7ffc0000 [ 97.238455][ T4435] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.289622][ T26] audit: type=1326 audit(2000000006.120:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f97cea799 code=0x7ffc0000 [ 97.439286][ T26] audit: type=1326 audit(2000000006.120:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f97cea799 code=0x7ffc0000 [ 99.672448][ T4460] netlink: 'syz.2.43': attribute type 4 has an invalid length. [ 99.753061][ T4461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.029113][ T4464] loop1: detected capacity change from 0 to 128 [ 100.873043][ T4472] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.705265][ T4484] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 104.135588][ T4486] device syzkaller0 entered promiscuous mode [ 104.178595][ T4487] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET) [ 105.325968][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 105.648241][ T4507] loop4: detected capacity change from 0 to 1764 [ 108.436027][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 108.436307][ T26] audit: type=1326 audit(2000000020.000:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 108.570889][ T4527] loop4: detected capacity change from 0 to 512 [ 109.940605][ T26] audit: type=1326 audit(2000000020.000:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 111.667929][ T26] audit: type=1326 audit(2000000020.010:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 113.188732][ T26] audit: type=1326 audit(2000000020.010:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 113.798448][ T4547] loop2: detected capacity change from 0 to 32768 [ 114.859565][ T26] audit: type=1326 audit(2000000020.010:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 114.928414][ T26] audit: type=1326 audit(2000000020.020:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 114.966419][ T26] audit: type=1326 audit(2000000020.020:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 115.011419][ T4547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.65 (4547) [ 115.110238][ T26] audit: type=1326 audit(2000000020.020:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 115.133270][ T26] audit: type=1326 audit(2000000020.030:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 116.180202][ T26] audit: type=1326 audit(2000000020.030:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 116.226882][ T26] audit: type=1326 audit(2000000020.030:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 116.251170][ T26] audit: type=1326 audit(2000000020.030:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 116.274581][ T26] audit: type=1326 audit(2000000020.030:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 116.299702][ T4547] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 116.308952][ T4547] BTRFS info (device loop2): setting nodatacow, compression disabled [ 116.317087][ T4547] BTRFS info (device loop2): enabling auto defrag [ 116.323813][ T4547] BTRFS info (device loop2): max_inline at 0 [ 116.329980][ T4547] BTRFS info (device loop2): using free space tree [ 116.336643][ T4547] BTRFS info (device loop2): has skinny extents [ 116.379474][ T26] audit: type=1326 audit(2000000020.030:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff406799 code=0x7ffc0000 [ 118.458263][ T4547] BTRFS error (device loop2): open_ctree failed: -12 [ 118.473505][ T4272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4272) [ 118.846673][ T4597] mmap: syz.0.71 (4597) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 130.491991][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 130.500989][ T4642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.720832][ T4642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.751858][ T4643] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.453450][ T4655] device syzkaller0 entered promiscuous mode [ 132.963233][ T4670] loop4: detected capacity change from 0 to 8 [ 133.233197][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.241282][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.639757][ T4670] SQUASHFS error: xz decompression failed, data probably corrupt [ 133.648149][ T4670] SQUASHFS error: Failed to read block 0x108: -5 [ 133.654652][ T4670] SQUASHFS error: Unable to read metadata cache entry [106] [ 133.662043][ T4670] SQUASHFS error: Unable to read inode 0x11f [ 133.678577][ T4673] loop1: detected capacity change from 0 to 16 [ 134.229881][ T4673] erofs: (device loop1): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 138.797373][ T4234] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.819981][ T4709] (syz.3.99,4709,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 138.828970][ T4709] (syz.3.99,4709,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 139.873518][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 139.883439][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.909183][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 140.301457][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.390462][ T4234] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.909025][ T4234] usb 5-1: string descriptor 0 read error: -71 [ 140.915778][ T4234] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 141.042538][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 141.081200][ T4718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.101828][ T4727] loop2: detected capacity change from 0 to 4096 [ 141.135765][ T4234] usb 5-1: config 0 descriptor?? [ 141.452485][ T4727] EXT4-fs (loop2): inline encryption not supported [ 141.504300][ T4234] usb 5-1: can't set config #0, error -71 [ 142.020356][ T4234] usb 5-1: USB disconnect, device number 2 [ 142.315239][ T4727] EXT4-fs (loop2): Test dummy encryption mode enabled [ 142.322602][ T4727] EXT4-fs (loop2): Ignoring removed oldalloc option [ 142.392671][ T4727] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 142.430370][ T4727] System zones: 0-5 [ 142.536335][ T4727] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,i_version,oldalloc,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 148.620775][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.885884][ T4796] device batadv_slave_0 entered promiscuous mode [ 148.897863][ T4796] syz.4.116 (4796) used greatest stack depth: 19952 bytes left [ 149.949903][ T4804] loop3: detected capacity change from 0 to 1024 [ 150.721387][ T4804] EXT4-fs (loop3): Ignoring removed orlov option [ 152.371216][ T4804] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 153.471553][ T4815] loop2: detected capacity change from 0 to 512 [ 153.817846][ T4815] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 154.685698][ T4818] loop4: detected capacity change from 0 to 2048 [ 156.168758][ T4818] EXT4-fs warning (device loop4): ext4_fill_super:4022: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 156.182575][ T4818] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 156.745568][ T4530] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 156.990125][ T4820] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 157.224567][ T4820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.335609][ T4833] loop4: detected capacity change from 0 to 1024 [ 157.922031][ T4833] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.172443][ T4891] capability: warning: `syz.2.138' uses deprecated v2 capabilities in a way that may be insecure [ 165.622002][ T4901] loop1: detected capacity change from 0 to 128 [ 166.078682][ T4904] loop2: detected capacity change from 0 to 256 [ 166.214889][ T4904] FAT-fs (loop2): Directory bread(block 64) failed [ 166.221755][ T4904] FAT-fs (loop2): Directory bread(block 65) failed [ 166.230184][ T4904] FAT-fs (loop2): Directory bread(block 66) failed [ 166.236880][ T4904] FAT-fs (loop2): Directory bread(block 67) failed [ 166.244124][ T4904] FAT-fs (loop2): Directory bread(block 68) failed [ 166.251065][ T4904] FAT-fs (loop2): Directory bread(block 69) failed [ 166.258030][ T4904] FAT-fs (loop2): Directory bread(block 70) failed [ 166.265057][ T4904] FAT-fs (loop2): Directory bread(block 71) failed [ 166.272158][ T4904] FAT-fs (loop2): Directory bread(block 72) failed [ 166.279119][ T4904] FAT-fs (loop2): Directory bread(block 73) failed [ 166.433769][ T4494] attempt to access beyond end of device [ 166.433769][ T4494] loop1: rw=1, want=1041, limit=128 [ 166.605881][ T4904] netlink: 68 bytes leftover after parsing attributes in process `syz.2.144'. [ 166.615210][ T4904] netlink: 96 bytes leftover after parsing attributes in process `syz.2.144'. [ 166.624409][ T4904] tc_dump_action: action bad kind [ 167.905983][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 168.326895][ T4910] loop1: detected capacity change from 0 to 1024 [ 168.501470][ T4910] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 168.602254][ T4910] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.571841][ T4910] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 169.678994][ T4910] System zones: 0-1, 3-36 [ 169.946159][ T4910] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 169.966341][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.863813][ T4941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'. [ 172.308037][ T4962] loop1: detected capacity change from 0 to 128 [ 174.740431][ T4981] loop2: detected capacity change from 0 to 512 [ 174.818715][ T4983] syz.4.156 sent an empty control message without MSG_MORE. [ 176.331770][ T4981] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.159: invalid indirect mapped block 256 (level 2) [ 176.374076][ T4981] EXT4-fs (loop2): 2 truncates cleaned up [ 176.889788][ T4981] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 177.843371][ T5018] hub 9-0:1.0: USB hub found [ 177.851464][ T5018] hub 9-0:1.0: 1 port detected [ 179.040945][ T4242] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 179.456637][ T4242] usb 2-1: Using ep0 maxpacket: 8 [ 179.900231][ T5045] 9pnet: Insufficient options for proto=fd [ 181.671750][ T4242] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 181.709043][ T4242] usb 2-1: can't read configurations, error -61 [ 183.500924][ T5055] device syzkaller0 entered promiscuous mode [ 184.455658][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.463002][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.470645][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.477625][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.484630][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.491664][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.498649][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.505762][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.512942][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.519947][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.526916][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.533918][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.541017][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.548098][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.555429][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.562712][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.569896][ T5059] tc action pedit 'at' offset -2147483647 out of bounds [ 184.576878][ T5059] 0: reclassify loop, rule prio 0, protocol 800 [ 187.245347][ T5092] rdma_op ffff88805d16f1f0 conn xmit_rdma 0000000000000000 [ 188.010556][ T5088] loop1: detected capacity change from 0 to 4096 [ 188.463944][ T5088] ntfs: volume version 3.1. [ 192.020725][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 192.034757][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 192.127342][ T5135] device syzkaller0 entered promiscuous mode [ 192.164436][ T5137] fuse: Bad value for 'fd' [ 192.201636][ T5137] process 'syz.2.189' launched './file0' with NULL argv: empty string added [ 192.299383][ T5135] TC_ACT_REPEAT abuse ? [ 192.338589][ T5137] syz.2.189 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 193.291042][ T5157] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[5157] [ 194.252821][ T5166] afs: Unknown parameter 'autocel˙˙' [ 194.667714][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.674175][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.820744][ T5171] loop4: detected capacity change from 0 to 16 [ 195.997890][ T5165] block device autoloading is deprecated and will be removed. [ 196.024627][ T5180] loop3: detected capacity change from 0 to 512 [ 196.060355][ T5171] erofs: (device loop4): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 197.166047][ T5180] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.198: invalid indirect mapped block 256 (level 2) [ 197.379740][ T5180] EXT4-fs (loop3): 2 truncates cleaned up [ 198.331278][ T5196] ODEBUG: Out of memory. ODEBUG disabled [ 198.465616][ T5180] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 200.358495][ T5217] loop4: detected capacity change from 0 to 512 [ 201.138285][ T5222] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 201.146168][ T5222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.205'. [ 201.155543][ T5222] device batadv0 entered promiscuous mode [ 201.162072][ T5222] bridge0: port 3(batadv0) entered blocking state [ 201.169284][ T5222] bridge0: port 3(batadv0) entered disabled state [ 201.177598][ T5222] bridge0: port 3(batadv0) entered blocking state [ 201.184951][ T5222] bridge0: port 3(batadv0) entered forwarding state [ 201.708673][ T144] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 201.718621][ T144] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 201.729771][ T5217] EXT4-fs: failed to create workqueue [ 201.735193][ T5217] EXT4-fs (loop4): mount failed [ 205.299604][ T4592] kernel write not supported for file /input/mouse0 (pid: 4592 comm: kworker/1:10) [ 209.043726][ T5298] o2cb: This node has not been configured. [ 209.348271][ T5298] o2cb: Cluster check failed. Fix errors before retrying. [ 209.355647][ T5298] (syz.0.221,5298,0):user_dlm_register:675 ERROR: status = -22 [ 209.363714][ T5298] (syz.0.221,5298,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 212.286521][ T5311] netlink: 'syz.4.223': attribute type 10 has an invalid length. [ 212.294432][ T5311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.223'. [ 212.303756][ T5311] device batadv0 entered promiscuous mode [ 212.313884][ T5311] bridge0: port 3(batadv0) entered blocking state [ 212.320633][ T5311] bridge0: port 3(batadv0) entered disabled state [ 212.336211][ T5311] bridge0: port 3(batadv0) entered blocking state [ 212.342753][ T5311] bridge0: port 3(batadv0) entered forwarding state [ 212.588075][ T5308] loop1: detected capacity change from 0 to 512 [ 213.114690][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 213.124166][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 214.242841][ T5324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.280963][ T5324] loop3: detected capacity change from 0 to 64 [ 216.868393][ T5329] device syzkaller0 entered promiscuous mode [ 221.351842][ T5371] ufs: You didn't specify the type of your ufs filesystem [ 221.351842][ T5371] [ 221.351842][ T5371] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 221.351842][ T5371] [ 221.351842][ T5371] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 221.384676][ T5371] ufs: ufstype=old is supported read-only [ 221.395838][ T5371] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 222.040597][ T5376] loop0: detected capacity change from 0 to 16 [ 222.109154][ T5376] erofs: (device loop0): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 223.916246][ T5394] netlink: 296 bytes leftover after parsing attributes in process `syz.3.246'. [ 223.931339][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 228.673636][ T5416] loop0: detected capacity change from 0 to 128 [ 228.811797][ T5416] ufs: Unable to do repair on error, will lock lock instead [ 228.878656][ T5416] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 231.784312][ T5437] loop3: detected capacity change from 0 to 512 [ 232.448606][ T5443] netlink: 76 bytes leftover after parsing attributes in process `syz.1.262'. [ 232.472005][ T5437] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.256: bg 0: block 248: padding at end of block bitmap is not set [ 232.560277][ T5443] device syzkaller0 entered promiscuous mode [ 232.580305][ T5437] __quota_error: 7 callbacks suppressed [ 232.580325][ T5437] Quota error (device loop3): write_blk: dquota write failed [ 232.626857][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.633743][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.640738][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.647758][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.654686][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.661525][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.668448][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.675425][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.679549][ T5437] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 232.682421][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.699125][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.705921][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.712770][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.719597][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.726549][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.729411][ T5437] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.256: Failed to acquire dquot type 1 [ 232.734141][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.751981][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.758988][ T5443] tc action pedit offset must be on 32 bit boundaries [ 232.765822][ T5443] 0: reclassify loop, rule prio 0, protocol 800 [ 232.794643][ T5450] loop0: detected capacity change from 0 to 16 [ 232.805792][ T5437] EXT4-fs (loop3): 1 truncate cleaned up [ 232.822155][ T5437] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.833582][ T5437] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.873176][ T5450] erofs: (device loop0): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 238.240262][ T4206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 238.250577][ T4206] CPU: 1 PID: 4206 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 238.258269][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.268443][ T4206] Workqueue: hci2 hci_rx_work [ 238.273170][ T4206] Call Trace: [ 238.276462][ T4206] [ 238.279462][ T4206] dump_stack_lvl+0x188/0x250 [ 238.284148][ T4206] ? show_regs_print_info+0x20/0x20 [ 238.289394][ T4206] ? load_image+0x400/0x400 [ 238.294053][ T4206] sysfs_create_dir_ns+0x26a/0x290 [ 238.299186][ T4206] ? sysfs_warn_dup+0xa0/0xa0 [ 238.303875][ T4206] ? process_one_work+0x85f/0x1010 [ 238.309010][ T4206] ? do_raw_spin_unlock+0x11d/0x230 [ 238.314240][ T4206] kobject_add_internal+0x6e0/0xd90 [ 238.319450][ T4206] kobject_add+0x160/0x230 [ 238.323875][ T4206] ? kobject_init+0x1d0/0x1d0 [ 238.328573][ T4206] ? klist_children_get+0x50/0x50 [ 238.333611][ T4206] ? get_device_parent+0x121/0x3f0 [ 238.338749][ T4206] device_add+0x483/0xfb0 [ 238.343134][ T4206] hci_conn_add_sysfs+0xd1/0x1e0 [ 238.348172][ T4206] le_conn_complete_evt+0xc48/0x15c0 [ 238.353475][ T4206] ? cs_le_create_conn+0x5e0/0x5e0 [ 238.358612][ T4206] ? __mutex_trylock_common+0x155/0x260 [ 238.364213][ T4206] hci_le_meta_evt+0x285/0x3c90 [ 238.369345][ T4206] ? hci_event_packet+0x37b/0x1370 [ 238.374590][ T4206] ? __lock_acquire+0x7d10/0x7d10 [ 238.379726][ T4206] ? hci_remote_host_features_evt+0x280/0x280 [ 238.385803][ T4206] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 238.391444][ T4206] ? mark_lock+0x94/0x320 [ 238.395795][ T4206] ? mutex_unlock+0x10/0x10 [ 238.400312][ T4206] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 238.406317][ T4206] ? lock_chain_count+0x20/0x20 [ 238.411203][ T4206] ? __rwlock_init+0x140/0x140 [ 238.415980][ T4206] hci_event_packet+0xe48/0x1370 [ 238.420924][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 238.426134][ T4206] ? rcu_lock_release+0x20/0x20 [ 238.431028][ T4206] ? hci_send_to_monitor+0x9c/0x4a0 [ 238.436235][ T4206] hci_rx_work+0x255/0xa10 [ 238.440671][ T4206] process_one_work+0x85f/0x1010 [ 238.445652][ T4206] ? worker_detach_from_pool+0x240/0x240 [ 238.451331][ T4206] ? lockdep_hardirqs_off+0x70/0x100 [ 238.456714][ T4206] ? _raw_spin_lock_irq+0xb7/0xf0 [ 238.461783][ T4206] ? _raw_spin_lock_irqsave+0x100/0x100 [ 238.467351][ T4206] ? wq_worker_running+0x97/0x170 [ 238.472468][ T4206] worker_thread+0xaa6/0x1290 [ 238.477165][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 238.482380][ T4206] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 238.488292][ T4206] kthread+0x436/0x520 [ 238.492376][ T4206] ? rcu_lock_release+0x20/0x20 [ 238.497253][ T4206] ? kthread_blkcg+0xd0/0xd0 [ 238.501864][ T4206] ret_from_fork+0x1f/0x30 [ 238.506319][ T4206] [ 238.516943][ T4206] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 238.530349][ T4206] Bluetooth: hci2: failed to register connection device [ 238.738944][ T4194] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 239.788928][ T4194] usb 1-1: Using ep0 maxpacket: 8 [ 239.909037][ T4194] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 239.917325][ T4194] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 239.951970][ T4194] usb 1-1: config 2 has no interface number 0 [ 240.200135][ T4194] usb 1-1: config 2 interface 31 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.203978][ T4194] usb 1-1: config 2 interface 31 has no altsetting 0 [ 241.317761][ T4194] usb 1-1: string descriptor 0 read error: -71 [ 242.415008][ T5517] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.588891][ T4194] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 242.597992][ T4194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.764242][ T5529] loop0: detected capacity change from 0 to 1024 [ 242.781146][ T5529] EXT4-fs (loop0): inline encryption not supported [ 242.806219][ T5529] EXT4-fs (loop0): Ignoring removed bh option [ 242.833576][ T5529] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 242.899985][ T4194] usb 1-1: can't set config #2, error -71 [ 242.907004][ T4194] usb 1-1: USB disconnect, device number 2 [ 242.914472][ T5529] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (60515!=35945) [ 243.021270][ T5532] binfmt_misc: Unknown parameter 'trans' [ 243.088492][ T4311] Bluetooth: hci4: command 0x0406 tx timeout [ 243.326127][ T5529] EXT4-fs (loop0): orphan cleanup on readonly fs [ 243.861048][ T5529] EXT4-fs error (device loop0): ext4_quota_enable:6442: comm syz.0.285: inode #2304: comm syz.0.285: iget: illegal inode # [ 243.910523][ T5529] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.285: Bad quota inode: 2304, type: 2 [ 243.931312][ T5529] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 243.949552][ T5529] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 243.956389][ T5529] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,barrier,inlinecrypt,min_batch_time=0x0000000000000102,delalloc,bh,,errors=continue. Quota mode: writeback. [ 244.994526][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 247.015372][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 247.328887][ T7] usb 2-1: device not accepting address 4, error -71 [ 247.335884][ T4273] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 249.245446][ T5574] loop4: detected capacity change from 0 to 65 [ 249.306197][ T5574] BFS-fs: bfs_fill_super(): Impossible last inode number 67108856 > 513 on loop4 [ 250.917616][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 250.928136][ T4273] usb 1-1: Using ep0 maxpacket: 8 [ 251.285746][ T4273] usb 1-1: device descriptor read/all, error -71 [ 251.580775][ T5594] loop0: detected capacity change from 0 to 8 [ 252.718683][ T5594] SQUASHFS error: xz decompression failed, data probably corrupt [ 252.727547][ T5594] SQUASHFS error: Failed to read block 0x108: -5 [ 252.733988][ T5594] SQUASHFS error: Unable to read metadata cache entry [106] [ 252.741370][ T5594] SQUASHFS error: Unable to read inode 0x11f [ 252.819932][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 252.979039][ T4237] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 253.168935][ T4234] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 253.195538][ T5604] delete_channel: no stack [ 253.201131][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 253.339141][ T4233] usb 4-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 253.358680][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.379581][ T4237] usb 5-1: Using ep0 maxpacket: 32 [ 253.386554][ T4233] usb 4-1: config 0 descriptor?? [ 253.406890][ T5608] ================================================================== [ 253.415478][ T5608] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 253.423263][ T5608] Write of size 4 at addr ffff88802a2b71b8 by task syz.0.308/5608 [ 253.431103][ T5608] [ 253.433463][ T5608] CPU: 0 PID: 5608 Comm: syz.0.308 Not tainted syzkaller #0 [ 253.440781][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.450958][ T5608] Call Trace: [ 253.454374][ T5608] [ 253.457336][ T5608] dump_stack_lvl+0x188/0x250 [ 253.462237][ T5608] ? show_regs_print_info+0x20/0x20 [ 253.467678][ T5608] ? _printk+0xda/0x130 [ 253.471892][ T5608] ? ax25_dev_device_down+0x35e/0x520 [ 253.477326][ T5608] ? load_image+0x400/0x400 [ 253.481869][ T5608] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 253.487401][ T5608] ? lockdep_hardirqs_on+0x94/0x140 [ 253.492661][ T5608] print_address_description+0x60/0x2d0 [ 253.498290][ T5608] ? ax25_dev_device_down+0x35e/0x520 [ 253.503716][ T5608] kasan_report+0xdf/0x130 [ 253.508181][ T5608] ? ax25_dev_device_down+0x35e/0x520 [ 253.513598][ T5608] kasan_check_range+0x235/0x290 [ 253.518590][ T5608] ax25_dev_device_down+0x35e/0x520 [ 253.523833][ T5608] ax25_device_event+0x4b4/0x4f0 [ 253.528861][ T5608] raw_notifier_call_chain+0xcb/0x160 [ 253.529638][ T4234] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 253.534361][ T5608] __dev_notify_flags+0x158/0x300 [ 253.547627][ T5608] ? __dev_change_flags+0x6a0/0x6a0 [ 253.552877][ T5608] ? __dev_change_flags+0x4d0/0x6a0 [ 253.558137][ T5608] ? dev_get_flags+0x1c0/0x1c0 [ 253.559175][ T4234] usb 2-1: config 0 has no interface number 0 [ 253.562947][ T5608] ? __mutex_lock_common+0x465/0x2400 [ 253.574519][ T5608] dev_change_flags+0xe3/0x1a0 [ 253.579463][ T5608] dev_ifsioc+0x130/0xd50 [ 253.583965][ T5608] ? dev_ioctl+0xe30/0xe30 [ 253.588436][ T5608] ? apparmor_capable+0x12c/0x190 [ 253.593511][ T5608] ? full_name_hash+0x8e/0xe0 [ 253.598241][ T5608] dev_ioctl+0x545/0xe30 [ 253.599272][ T4234] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 253.602523][ T5608] ? _copy_from_user+0x111/0x170 [ 253.602555][ T5608] sock_do_ioctl+0x245/0x320 [ 253.602581][ T5608] ? sock_show_fdinfo+0xb0/0xb0 [ 253.626963][ T5608] sock_ioctl+0x4d2/0x710 [ 253.631750][ T5608] ? sock_poll+0x410/0x410 [ 253.636226][ T5608] ? bpf_lsm_file_ioctl+0x5/0x10 [ 253.641292][ T5608] ? security_file_ioctl+0x7c/0xa0 [ 253.646546][ T5608] ? sock_poll+0x410/0x410 [ 253.651003][ T5608] __se_sys_ioctl+0xfa/0x170 [ 253.655722][ T5608] do_syscall_64+0x4c/0xa0 [ 253.660174][ T5608] ? clear_bhb_loop+0x30/0x80 [ 253.664900][ T5608] ? clear_bhb_loop+0x30/0x80 [ 253.669621][ T5608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.675594][ T5608] RIP: 0033:0x7f0f97cea799 [ 253.680055][ T5608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.700088][ T5608] RSP: 002b:00007f0f95f44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.708561][ T5608] RAX: ffffffffffffffda RBX: 00007f0f97f63fa0 RCX: 00007f0f97cea799 [ 253.716577][ T5608] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 253.724679][ T5608] RBP: 00007f0f97d80c99 R08: 0000000000000000 R09: 0000000000000000 [ 253.732803][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.740906][ T5608] R13: 00007f0f97f64038 R14: 00007f0f97f63fa0 R15: 00007ffd83548eb8 [ 253.748949][ T5608] [ 253.752008][ T5608] [ 253.754356][ T5608] Allocated by task 4487: [ 253.758706][ T5608] __kasan_kmalloc+0xb5/0xf0 [ 253.763336][ T5608] ax25_dev_device_up+0x50/0x580 [ 253.768323][ T5608] ax25_device_event+0x483/0x4f0 [ 253.773308][ T5608] raw_notifier_call_chain+0xcb/0x160 [ 253.778719][ T5608] __dev_notify_flags+0x194/0x300 [ 253.783780][ T5608] dev_change_flags+0xe3/0x1a0 [ 253.788669][ T5608] dev_ifsioc+0x130/0xd50 [ 253.793032][ T5608] dev_ioctl+0x545/0xe30 [ 253.797313][ T5608] sock_do_ioctl+0x245/0x320 [ 253.800646][ T4234] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=de.65 [ 253.801931][ T5608] sock_ioctl+0x4d2/0x710 [ 253.815420][ T5608] __se_sys_ioctl+0xfa/0x170 [ 253.820151][ T5608] do_syscall_64+0x4c/0xa0 [ 253.823412][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.824697][ T5608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.838707][ T5608] [ 253.841063][ T5608] Freed by task 5608: [ 253.845073][ T5608] kasan_set_track+0x4b/0x70 [ 253.849744][ T5608] kasan_set_free_info+0x1f/0x40 [ 253.854721][ T5608] ____kasan_slab_free+0xd5/0x110 [ 253.856740][ T4234] usb 2-1: Product: syz [ 253.859781][ T5608] slab_free_freelist_hook+0xea/0x170 [ 253.859805][ T5608] kfree+0xef/0x2a0 [ 253.859822][ T5608] ax25_dev_device_down+0x1c0/0x520 [ 253.859846][ T5608] ax25_device_event+0x4b4/0x4f0 [ 253.859864][ T5608] raw_notifier_call_chain+0xcb/0x160 [ 253.859885][ T5608] __dev_notify_flags+0x158/0x300 [ 253.859905][ T5608] dev_change_flags+0xe3/0x1a0 [ 253.859925][ T5608] dev_ifsioc+0x130/0xd50 [ 253.859942][ T5608] dev_ioctl+0x545/0xe30 [ 253.859959][ T5608] sock_do_ioctl+0x245/0x320 [ 253.867925][ T4234] usb 2-1: Manufacturer: syz [ 253.869724][ T5608] sock_ioctl+0x4d2/0x710 [ 253.869748][ T5608] __se_sys_ioctl+0xfa/0x170 [ 253.869766][ T5608] do_syscall_64+0x4c/0xa0 [ 253.869785][ T5608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.869807][ T5608] [ 253.869812][ T5608] Last potentially related work creation: [ 253.869820][ T5608] kasan_save_stack+0x35/0x60 [ 253.888120][ T4234] usb 2-1: SerialNumber: syz [ 253.889463][ T5608] kasan_record_aux_stack+0xb8/0x100 [ 253.889492][ T5608] insert_work+0x54/0x3d0 [ 253.889511][ T5608] __queue_work+0x9c5/0xd50 [ 253.889527][ T5608] queue_work_on+0x124/0x1f0 [ 253.889545][ T5608] inet6addr_event+0x9c/0xc0 [ 253.921729][ T4234] usb 2-1: config 0 descriptor?? [ 253.921879][ T5608] atomic_notifier_call_chain+0x15d/0x280 [ 253.921907][ T5608] ipv6_add_addr+0xb57/0xe10 [ 253.972430][ T4234] pn533_usb 2-1:0.251: NFC: Could not find bulk-in or bulk-out endpoint [ 253.973172][ T5608] addrconf_add_linklocal+0x26a/0x6c0 [ 253.973201][ T5608] addrconf_addr_gen+0x559/0x6b0 [ 254.012421][ T5608] addrconf_init_auto_addrs+0x747/0xb00 [ 254.018014][ T5608] addrconf_notify+0xa6b/0xf00 [ 254.022908][ T5608] raw_notifier_call_chain+0xcb/0x160 [ 254.028318][ T5608] netdev_state_change+0xe0/0x160 [ 254.033388][ T5608] linkwatch_do_dev+0x10d/0x160 [ 254.038291][ T5608] __linkwatch_run_queue+0x4b1/0x7c0 [ 254.043619][ T5608] linkwatch_event+0x48/0x50 [ 254.048239][ T5608] process_one_work+0x85f/0x1010 [ 254.053210][ T5608] worker_thread+0xaa6/0x1290 [ 254.057919][ T5608] kthread+0x436/0x520 [ 254.062040][ T5608] ret_from_fork+0x1f/0x30 [ 254.066503][ T5608] [ 254.068857][ T5608] Second to last potentially related work creation: [ 254.075496][ T5608] kasan_save_stack+0x35/0x60 [ 254.080215][ T5608] kasan_record_aux_stack+0xb8/0x100 [ 254.085545][ T5608] insert_work+0x54/0x3d0 [ 254.089908][ T5608] __queue_work+0x9c5/0xd50 [ 254.094444][ T5608] queue_work_on+0x124/0x1f0 [ 254.099069][ T5608] call_usermodehelper_exec+0x2e3/0x520 [ 254.104668][ T5608] kobject_uevent_env+0x681/0x890 [ 254.109731][ T5608] kset_register+0x188/0x1f0 [ 254.114354][ T5608] __class_register+0x24f/0x400 [ 254.119240][ T5608] memstick_init+0x71/0xb0 [ 254.123694][ T5608] do_one_initcall+0x272/0x730 [ 254.128491][ T5608] do_initcall_level+0x137/0x1f0 [ 254.133464][ T5608] do_initcalls+0x4b/0x90 [ 254.137821][ T5608] kernel_init_freeable+0x3e9/0x570 [ 254.143057][ T5608] kernel_init+0x19/0x1b0 [ 254.147474][ T5608] ret_from_fork+0x1f/0x30 [ 254.151994][ T5608] [ 254.154341][ T5608] The buggy address belongs to the object at ffff88802a2b7100 [ 254.154341][ T5608] which belongs to the cache kmalloc-192 of size 192 [ 254.168597][ T5608] The buggy address is located 184 bytes inside of [ 254.168597][ T5608] 192-byte region [ffff88802a2b7100, ffff88802a2b71c0) [ 254.182028][ T5608] The buggy address belongs to the page: [ 254.187703][ T5608] page:ffffea0000a8adc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a2b7 [ 254.197889][ T5608] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 254.202662][ T4234] usb 2-1: USB disconnect, device number 6 [ 254.205486][ T5608] raw: 00fff00000000200 ffffea0000aa00c0 0000000200000002 ffff888016c41a00 [ 254.219929][ T5608] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 254.228546][ T5608] page dumped because: kasan: bad access detected [ 254.234999][ T5608] page_owner tracks the page as allocated [ 254.240743][ T5608] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 20908060867, free_ts 20465014119 [ 254.256676][ T5608] get_page_from_freelist+0x1bbd/0x1ca0 [ 254.262269][ T5608] __alloc_pages+0x1ee/0x480 [ 254.266899][ T5608] alloc_page_interleave+0x24/0x1e0 [ 254.272142][ T5608] new_slab+0xc0/0x4b0 [ 254.276248][ T5608] ___slab_alloc+0x80a/0xdd0 [ 254.280874][ T5608] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 254.286320][ T5608] kset_create_and_add+0x56/0x160 [ 254.291481][ T5608] bus_register+0x3ac/0x6c0 [ 254.296028][ T5608] memstick_init+0x3c/0xb0 [ 254.300484][ T5608] do_one_initcall+0x272/0x730 [ 254.305284][ T5608] do_initcall_level+0x137/0x1f0 [ 254.310273][ T5608] do_initcalls+0x4b/0x90 [ 254.314637][ T5608] kernel_init_freeable+0x3e9/0x570 [ 254.319880][ T5608] kernel_init+0x19/0x1b0 [ 254.324248][ T5608] ret_from_fork+0x1f/0x30 [ 254.328702][ T5608] page last free stack trace: [ 254.333493][ T5608] free_unref_page_prepare+0x637/0x6c0 [ 254.339094][ T5608] free_unref_page+0x8f/0x2a0 [ 254.343817][ T5608] __vunmap+0x8b9/0xa50 [ 254.348009][ T5608] tpg_free+0x166/0x420 [ 254.352292][ T5608] vivid_dev_release+0x101/0x160 [ 254.357411][ T5608] v4l2_device_put+0x77/0xc0 [ 254.362126][ T5608] vivid_probe+0x40f4/0x67a0 [ 254.366838][ T5608] platform_probe+0x137/0x1c0 [ 254.371586][ T5608] really_probe+0x284/0xc80 [ 254.376341][ T5608] __driver_probe_device+0x18c/0x330 [ 254.381661][ T5608] driver_probe_device+0x4f/0x420 [ 254.386761][ T5608] __driver_attach+0x46b/0x670 [ 254.391559][ T5608] bus_for_each_dev+0x182/0x1f0 [ 254.396445][ T5608] bus_add_driver+0x30a/0x5a0 [ 254.401158][ T5608] driver_register+0x32d/0x430 [ 254.406046][ T5608] vivid_init+0x39/0x70 [ 254.410249][ T5608] [ 254.412594][ T5608] Memory state around the buggy address: [ 254.418261][ T5608] ffff88802a2b7080: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.426456][ T5608] ffff88802a2b7100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.434650][ T5608] >ffff88802a2b7180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 254.442739][ T5608] ^ [ 254.448856][ T5608] ffff88802a2b7200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.457050][ T5608] ffff88802a2b7280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 254.465326][ T5608] ================================================================== [ 254.473694][ T5608] Disabling lock debugging due to kernel taint [ 254.481088][ T4233] usb 4-1: can't set config #0, error -71 [ 254.502337][ T4233] usb 4-1: USB disconnect, device number 2 [ 254.514421][ T5608] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 254.521678][ T5608] CPU: 0 PID: 5608 Comm: syz.0.308 Tainted: G B syzkaller #0 [ 254.530392][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.540485][ T5608] Call Trace: [ 254.543798][ T5608] [ 254.546763][ T5608] dump_stack_lvl+0x188/0x250 [ 254.551489][ T5608] ? show_regs_print_info+0x20/0x20 [ 254.556735][ T5608] ? load_image+0x400/0x400 [ 254.561287][ T5608] panic+0x2e5/0x810 [ 254.565228][ T5608] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 254.571423][ T5608] ? bpf_jit_dump+0xd0/0xd0 [ 254.575968][ T5608] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 254.581956][ T5608] ? _raw_spin_unlock+0x40/0x40 [ 254.586811][ T5608] ? ax25_dev_device_down+0x35e/0x520 [ 254.592219][ T5608] check_panic_on_warn+0x80/0xa0 [ 254.597188][ T5608] ? ax25_dev_device_down+0x35e/0x520 [ 254.602661][ T5608] end_report+0x6d/0xf0 [ 254.606836][ T5608] kasan_report+0x102/0x130 [ 254.611348][ T5608] ? ax25_dev_device_down+0x35e/0x520 [ 254.616755][ T5608] kasan_check_range+0x235/0x290 [ 254.621709][ T5608] ax25_dev_device_down+0x35e/0x520 [ 254.626952][ T5608] ax25_device_event+0x4b4/0x4f0 [ 254.631937][ T5608] raw_notifier_call_chain+0xcb/0x160 [ 254.637450][ T5608] __dev_notify_flags+0x158/0x300 [ 254.642696][ T5608] ? __dev_change_flags+0x6a0/0x6a0 [ 254.647926][ T5608] ? __dev_change_flags+0x4d0/0x6a0 [ 254.653441][ T5608] ? dev_get_flags+0x1c0/0x1c0 [ 254.658249][ T5608] ? __mutex_lock_common+0x465/0x2400 [ 254.663751][ T5608] dev_change_flags+0xe3/0x1a0 [ 254.668736][ T5608] dev_ifsioc+0x130/0xd50 [ 254.673112][ T5608] ? dev_ioctl+0xe30/0xe30 [ 254.677565][ T5608] ? apparmor_capable+0x12c/0x190 [ 254.682631][ T5608] ? full_name_hash+0x8e/0xe0 [ 254.687358][ T5608] dev_ioctl+0x545/0xe30 [ 254.691633][ T5608] ? _copy_from_user+0x111/0x170 [ 254.696663][ T5608] sock_do_ioctl+0x245/0x320 [ 254.701263][ T5608] ? sock_show_fdinfo+0xb0/0xb0 [ 254.706157][ T5608] sock_ioctl+0x4d2/0x710 [ 254.710512][ T5608] ? sock_poll+0x410/0x410 [ 254.714934][ T5608] ? bpf_lsm_file_ioctl+0x5/0x10 [ 254.719888][ T5608] ? security_file_ioctl+0x7c/0xa0 [ 254.725040][ T5608] ? sock_poll+0x410/0x410 [ 254.729494][ T5608] __se_sys_ioctl+0xfa/0x170 [ 254.734115][ T5608] do_syscall_64+0x4c/0xa0 [ 254.738544][ T5608] ? clear_bhb_loop+0x30/0x80 [ 254.743256][ T5608] ? clear_bhb_loop+0x30/0x80 [ 254.747979][ T5608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.753908][ T5608] RIP: 0033:0x7f0f97cea799 [ 254.758350][ T5608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.778176][ T5608] RSP: 002b:00007f0f95f44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.786722][ T5608] RAX: ffffffffffffffda RBX: 00007f0f97f63fa0 RCX: 00007f0f97cea799 [ 254.794742][ T5608] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 254.802755][ T5608] RBP: 00007f0f97d80c99 R08: 0000000000000000 R09: 0000000000000000 [ 254.810768][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.818866][ T5608] R13: 00007f0f97f64038 R14: 00007f0f97f63fa0 R15: 00007ffd83548eb8 [ 254.826967][ T5608] [ 254.830156][ T5608] Kernel Offset: disabled [ 254.834532][ T5608] Rebooting in 86400 seconds..