last executing test programs: 5m7.680947538s ago: executing program 1 (id=29): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$caif_stream(0x25, 0x1, 0x1) unshare(0x22020400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) write$sequencer(r7, &(0x7f0000000140)=ANY=[], 0x10) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x75, "804000"}, 0x0, 0x2, {}, 0x20800}) close_range(r0, 0xffffffffffffffff, 0x0) 5m5.39218715s ago: executing program 1 (id=31): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@any, 0xcd4}) socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@empty, 0x4e21, 0x3, 0x4e21, 0x0, 0x565e196a2b5cf539, 0x20, 0x20, 0x33}, {0x6, 0x2000001, 0x400006, 0x9, 0xffff, 0x5, 0xfffffffd, 0x7}, {0x80000002, 0x8, 0x10001ff, 0x401}, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x4d2, 0xff}, 0xa, @in6=@empty, 0x3505, 0x1, 0x1, 0x8, 0x9d, 0x9, 0xc1}}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) openat$comedi(0xffffff9c, 0x0, 0xa400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f000001a440)=""/102400, 0x19000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f00000023c0)=[{&(0x7f0000000040)=""/93, 0x5d}], 0x1) pread64(r1, 0x0, 0x0, 0xa) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r3 = syz_clone(0x2440900, &(0x7f0000000180)="a27a4ee1e8fc8affdf4e5f8e20b09a9e8bc4d814ed67471461cda36a464423a268b1f8d2a6d679509b3645d962de6582c398b3d884b19a39cefe5abf569ad1404dc18e1ab57df8dfbdceabf5193dbb80db09bbf5234722865257ebb3edc27da83d", 0x61, 0x0, &(0x7f0000000240), &(0x7f0000000280)) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc0000) open(&(0x7f0000000080)='./file1\x00', 0x46842, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 5m1.672753963s ago: executing program 1 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getresuid(&(0x7f0000000200), 0x0, 0x0) sendmsg$nl_netfilter(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYBLOB="0400f28000a2a3f32b9e6f94a3f16c24a558fe76b11a6b4b577599bc1bfa896ec523143e19268f2aa7705849c1ccbc5f9e8d14c2513b1cd6384a136450b4b93a88c98c2c9720b78398919ce7aed767c432e2b847fb8ad06733ee77a10dee7a9ca5dfa2447a81dd88f29ffb23a5b4c2ad021a823560271a15f24bea6d674610313277db865abb500b7d61d7c75141b0a53eb5df4431524dc3392c73266e3636f0d92a9f70ef13ccca9c9b72754e8edaad14750e3c5bed4472466073b3f32a1ec6ccdc8e08d50a6ce4b49dbe50f73eba28676c4708003b000200000005004900000000000800a400", @ANYRES32=r3, @ANYBLOB], 0x4fc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_io_uring_submit(0x0, r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05003347b90400000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c000480280001800b0001006c6f6f6b75700000180002800900010073797a320000000008000240000000000900010073797a3000000000140000001100010000000000000000000000000abcd236c993e2d33edd84b0ead9f7fbfc5805e27ce1b15622f4a75af5511ca3bce5582d74976b4f38"], 0xc8}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x0, &(0x7f0000004540)) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc18, &(0x7f0000001e40)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) 4m55.460853249s ago: executing program 1 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_emit_ethernet(0x44, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0xb, 0xf, 0x0, {0x5, 0x4, 0x3, 0x1f, 0x5df, 0x68, 0x3, 0xf5, 0x84, 0x0, @multicast1, @empty}, "7ada1f382d21"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e7", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) 4m48.856518173s ago: executing program 1 (id=47): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) close(r8) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r3, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x1}, @increfs_done={0x40106308, 0x1}, @release], 0x35, 0x0, &(0x7f0000000240)="d79470a605078793f9b9d511636e55cc67eae68eaefb24ee35262c655e6a102a0437c4392fbdf7fdc280bb12607556fa2f3b566306"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m46.410575913s ago: executing program 1 (id=51): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2b2, &(0x7f0000000440)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20000000160001080000000000", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340), 0x0, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 4m30.443091699s ago: executing program 32 (id=51): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2b2, &(0x7f0000000440)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20000000160001080000000000", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340), 0x0, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 2m15.661532033s ago: executing program 4 (id=241): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0x7fffffff}, {0x6, 0x3, 0xa1, 0x401}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10b8}, 0x20000000) sendmsg$kcm(r6, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 2m13.764620196s ago: executing program 4 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b704000000000000850000108200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f00000000c0)={0x9, 0x2}) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0xe20, 0x0, 0x8d, 0x2}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r10, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0xffdf, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2m4.402586576s ago: executing program 4 (id=254): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40881, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae000000540022c23031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r4}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r6, &(0x7f00000013c0)="bd31", 0x2, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r8, 0xbc7ae000) sendmsg$NFT_BATCH(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000000000000700000a0900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000640003806000008004000180580007800b000100746172676574000048000280080002400000000230000300b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360"], 0x114}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 2m1.506703868s ago: executing program 4 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x80, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000200)=0x3) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0) 2m0.072932459s ago: executing program 4 (id=258): socket$inet_sctp(0x2, 0x1, 0x84) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f0000000080), 0x0}, 0x20) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x11, 0x3, 0x6a}, 0x2c) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f78", 0x38, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r10 = dup(r9) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) syz_open_pts(r9, 0x80) 1m58.813122631s ago: executing program 4 (id=259): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001d00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d00)='P', 0x1}], 0x1, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0x31, 0x9, 0x4, 0xa0}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x38, 0x24004884}], 0x1, 0x4040044) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m41.809034507s ago: executing program 33 (id=259): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001d00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d00)='P', 0x1}], 0x1, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0x31, 0x9, 0x4, 0xa0}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x38, 0x24004884}], 0x1, 0x4040044) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.498986365s ago: executing program 5 (id=507): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 10.343036412s ago: executing program 3 (id=509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900"], 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) creat(&(0x7f00000000c0)='./file0\x00', 0x181) getdents(r1, 0x0, 0x0) 8.96705831s ago: executing program 3 (id=511): ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaff1bc6317eff0005c0"], 0x0) 7.073133143s ago: executing program 5 (id=513): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 7.052229854s ago: executing program 3 (id=514): syz_usb_connect(0x5, 0x440, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) 7.022129986s ago: executing program 2 (id=515): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000000040)={0x2, &(0x7f0000000000), 0x0, 0x0}) 6.913816911s ago: executing program 0 (id=516): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x23, "49720705000000004709b89e6fb2c55c00fccb7999335b022d49e00255020f1f55001d"}}) 6.73560782s ago: executing program 2 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffe, 0x1}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.514792191s ago: executing program 0 (id=518): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 5.227474024s ago: executing program 5 (id=519): syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0xd, 0x2}}}}, 0x11) 5.011392914s ago: executing program 5 (id=520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900"], 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) creat(&(0x7f00000000c0)='./file0\x00', 0x181) getdents(r1, 0x0, 0x0) 4.915493409s ago: executing program 0 (id=521): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e041a0418"], 0x7) 4.599707075s ago: executing program 0 (id=522): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000440)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) 4.542672628s ago: executing program 5 (id=523): connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x8, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x283, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x203, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x6, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cef, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), 0x0, 0x6c, r4}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000480)="99", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1e) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x100000000000f7) keyctl$revoke(0x3, r5) socket$nl_route(0x10, 0x3, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) 4.361776786s ago: executing program 2 (id=524): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/89, 0x59}], 0x1, 0x0, 0x0) 3.774956905s ago: executing program 0 (id=525): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.774731595s ago: executing program 2 (id=526): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4404c880) 3.773597425s ago: executing program 3 (id=534): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b0000000000526e906c2ffd30dd026191c21aab496bd5d10e01ac6f9d2ade2c9e8474ca5fc9852e49b06c69f58c3c877e21a1285b1660e5b7a18b1dd0fb87aa5b6cc5d4044345a80d46899015e2f4723afe8fe52b04dcd9218c14172ffeffaecf616cc02f778ac39ef5"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.586789824s ago: executing program 0 (id=527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000200)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x3c, r6, 0x1, 0x70bd2a, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x3c}}, 0x20000040) 2.525822166s ago: executing program 3 (id=528): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.516862236s ago: executing program 2 (id=529): syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0xd, 0x2}}}}, 0x11) 451.158438ms ago: executing program 3 (id=530): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x24}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, 0x0, 0x40848c0) 447.259099ms ago: executing program 2 (id=540): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x5608, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000140)=0x400) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x0, 0x2a, 0x0, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x2, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0xc, "09904b30ad2bb70fdad1"}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0xf, [{@broadcast, 0xfffffff0}, {@local, 0x8001}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40858}, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): eam0 [ 64.154186][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.174771][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.189587][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.199289][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.206409][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.214874][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.225349][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.234361][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.241585][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.254322][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.265803][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.275584][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.307661][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.317877][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.335887][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.343067][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.358847][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.368149][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.382069][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.390876][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.445287][ T4268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.463919][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.477478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.490500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.500719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.510581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.519929][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.527262][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.535882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.544317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.553832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.563147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.571622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.586974][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.615824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.624242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.636079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.645730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.657032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.666384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.675797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.707656][ T4270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.720757][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.738934][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.750960][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.761553][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.769392][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.779137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.788281][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.797348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.806099][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.826110][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.850888][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.860312][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.881719][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 64.922219][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.934378][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.944933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.961477][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 64.961492][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 64.967695][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 64.973869][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 64.993620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.006200][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.013479][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.028555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.037937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.052496][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.059635][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.080751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.090490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.099528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.123236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.134894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.144594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.154267][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.161463][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.170491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.179736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.189828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.199067][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.206279][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.252145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.264164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.278152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.295340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.309549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.319964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.336589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.348046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.359781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.373647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.382953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.392199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.400630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.413806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.422262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.473044][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.486516][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.499450][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.515016][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.538029][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.547687][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.562672][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.572166][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.581888][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.589724][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.599531][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.618764][ T4269] device veth0_vlan entered promiscuous mode [ 65.633856][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.646758][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.662989][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.684141][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.702847][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.710542][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.747602][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.762056][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.786746][ T4269] device veth1_vlan entered promiscuous mode [ 65.899543][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.909184][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.926936][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.943006][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.952581][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.961844][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.985011][ T4269] device veth0_macvtap entered promiscuous mode [ 66.000766][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.012145][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.019729][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.066505][ T4270] device veth0_vlan entered promiscuous mode [ 66.098267][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.109671][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.125442][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.137090][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.153537][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.163191][ T4269] device veth1_macvtap entered promiscuous mode [ 66.185666][ T4270] device veth1_vlan entered promiscuous mode [ 66.218787][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.271581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.281009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.289715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.299521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.308587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.320382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.332562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.342337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.353160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.386976][ T4270] device veth0_macvtap entered promiscuous mode [ 66.397232][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.412250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.420634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.433252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.442863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.452379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.462230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.470477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.484605][ T4266] device veth0_vlan entered promiscuous mode [ 66.500581][ T4270] device veth1_macvtap entered promiscuous mode [ 66.522147][ T4269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.538805][ T4269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.548890][ T4269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.558804][ T4269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.576851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.589437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.612505][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.623771][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.635624][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.650128][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.662171][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.671087][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.702746][ T4266] device veth1_vlan entered promiscuous mode [ 66.713614][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.724457][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.735015][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.747136][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.759260][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.797622][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.806521][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.817744][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.827067][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.871637][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.880451][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.897228][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.906021][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.916158][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.926407][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.936108][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.944960][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.957846][ T4267] device veth0_vlan entered promiscuous mode [ 66.964076][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 66.968813][ T4268] device veth0_vlan entered promiscuous mode [ 66.992520][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.003702][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.012813][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.021503][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.030420][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.040326][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.042579][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 67.053824][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 67.059849][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 67.068131][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 67.079680][ T4266] device veth0_macvtap entered promiscuous mode [ 67.103271][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.105606][ T4267] device veth1_vlan entered promiscuous mode [ 67.120729][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.123943][ T4268] device veth1_vlan entered promiscuous mode [ 67.145863][ T4266] device veth1_macvtap entered promiscuous mode [ 67.165367][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.174221][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.184728][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.193275][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.201563][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.248529][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.265527][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.276395][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.287270][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.306273][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.332986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.344507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.353964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.364240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.382767][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.390963][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.406821][ T4267] device veth0_macvtap entered promiscuous mode [ 67.407002][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.415525][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.433673][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.443033][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.444639][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.462122][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.474519][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.498723][ T4267] device veth1_macvtap entered promiscuous mode [ 67.507288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.518494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.529487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.538580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.547351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.555521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.564712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.589266][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.607352][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.616490][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.626117][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.642536][ T4268] device veth0_macvtap entered promiscuous mode [ 67.650690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.659925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.675474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.702185][ T4268] device veth1_macvtap entered promiscuous mode [ 67.715212][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.728447][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.744189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.753828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.763710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.784185][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.816401][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.826955][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.838062][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.848530][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.859648][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.879998][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.919774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.953004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.961896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.970200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.978556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 67.986862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 67.995171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 68.117486][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.156882][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.169332][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.184305][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.195487][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.211279][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.293763][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.357858][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.463965][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.503865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.605689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.793053][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.841066][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.862552][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.878601][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.888773][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.907300][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.918474][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.936322][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.949732][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.968030][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.983290][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.995575][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.031711][ T4352] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 69.042081][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 69.059887][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.121668][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 69.128296][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 69.147173][ T4360] Zero length message leads to an empty skb [ 69.210346][ T4360] binder: binder_mmap: 4357 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 69.225642][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 69.233249][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 69.521409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.617285][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.660715][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.671618][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.685445][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.695843][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.732010][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.743510][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.754928][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.838914][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.947158][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.001819][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.372761][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.392820][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.414823][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.430076][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.440300][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.456728][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.591491][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.599348][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.736401][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.806830][ T4378] No such timeout policy "syz1" [ 71.357656][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.376356][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.384733][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.409543][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.419563][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.450064][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.520914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.598006][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.610894][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.624720][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.685705][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.692823][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.156235][ T4386] process 'syz.2.9' launched './file2' with NULL argv: empty string added [ 72.353262][ T11] Bluetooth: hci5: Frame reassembly failed (-90) [ 72.556432][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.574426][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.832666][ T4386] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 72.840885][ T4386] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 72.849379][ T4386] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 72.860958][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.912914][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.929934][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.980290][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.231745][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.580661][ T4395] binder: 4387:4395 ioctl c0306201 200000001a80 returned -14 [ 74.332800][ T4277] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 74.665535][ T4409] No such timeout policy "syz1" [ 75.018343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 75.526030][ T22] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.943067][ T4422] loop6: detected capacity change from 0 to 7 [ 76.029965][ T4422] Dev loop6: unable to read RDB block 7 [ 76.036430][ T4422] loop6: unable to read partition table [ 76.043879][ T4422] loop6: partition table beyond EOD, truncated [ 76.050510][ T4422] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 76.374167][ T22] usb 1-1: device descriptor read/64, error -71 [ 76.671697][ T22] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 76.835507][ T126] cfg80211: failed to load regulatory.db [ 79.344747][ T4446] loop4: detected capacity change from 0 to 764 [ 80.786271][ T4459] loop0: detected capacity change from 0 to 512 [ 82.189386][ T4459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.198502][ T4459] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.419743][ T4518] binder: 4511:4518 ioctl 4018620d 0 returned -22 [ 90.133885][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 90.242503][ T4527] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 90.264584][ T4527] usb usb9: usbfs: process 4527 (syz.2.32) did not claim interface 3 before use [ 91.454893][ T4533] Cannot find add_set index 0 as target [ 92.157110][ T4538] loop1: detected capacity change from 0 to 2048 [ 92.199553][ T4538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.883658][ T4561] loop4: detected capacity change from 0 to 16 [ 97.843039][ T4561] erofs: (device loop4): mounted with root inode @ nid 36. [ 97.885113][ T4558] syz.4.36: attempt to access beyond end of device [ 97.885113][ T4558] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 97.913677][ T4558] syz.4.36: attempt to access beyond end of device [ 97.913677][ T4558] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 97.927647][ T4558] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 97.934553][ T4559] 9pnet_fd: Insufficient options for proto=fd [ 97.946027][ T26] audit: type=1800 audit(1773849535.014:2): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.36" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 98.041230][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 98.138164][ T4558] syz.4.36 (4558) used greatest stack depth: 20344 bytes left [ 98.787562][ T4572] loop2: detected capacity change from 0 to 512 [ 100.842321][ T4582] ======================================================= [ 100.842321][ T4582] WARNING: The mand mount option has been deprecated and [ 100.842321][ T4582] and is ignored by this kernel. Remove the mand [ 100.842321][ T4582] option from the mount to silence this warning. [ 100.842321][ T4582] ======================================================= [ 100.911230][ T4582] overlayfs: failed to resolve './file1/file0': -2 [ 101.393110][ T7] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 101.403249][ T7] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 101.411862][ T7] usb 1-1: Product: syz [ 101.416347][ T7] usb 1-1: Manufacturer: syz [ 101.449299][ T7] usb 1-1: SerialNumber: syz [ 101.455354][ T4572] fscrypt: Error allocating hmac(sha512): -2 [ 101.554790][ T7] usb 1-1: config 0 descriptor?? [ 101.960461][ T4597] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.201858][ T4616] ALSA: mixer_oss: invalid OSS volume 'LI' [ 105.211439][ T4616] netlink: 68 bytes leftover after parsing attributes in process `syz.4.46'. [ 106.646636][ T4622] binder_alloc: 4611: binder_alloc_buf, no vma [ 107.003285][ T4619] vivid-003: kernel_thread() failed [ 107.061832][ T7] usb 1-1: can't set config #0, error -110 [ 107.586849][ T4627] loop6: detected capacity change from 0 to 7 [ 107.597375][ T4627] Dev loop6: unable to read RDB block 7 [ 107.603189][ T4627] loop6: unable to read partition table [ 107.610255][ T4627] loop6: partition table beyond EOD, truncated [ 107.616644][ T4627] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 108.183637][ T4314] usb 1-1: USB disconnect, device number 4 [ 108.339835][ T4625] loop4: detected capacity change from 0 to 32768 [ 108.373589][ T4625] (syz.4.50,4625,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.388899][ T4625] (syz.4.50,4625,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.415419][ T4625] JBD2: Ignoring recovery information on journal [ 108.444535][ T4625] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 110.997127][ T4648] loop3: detected capacity change from 0 to 32768 [ 111.089871][ T4268] ocfs2: Unmounting device (7,4) on (node local) [ 111.361474][ T4648] XFS (loop3): Mounting V5 Filesystem [ 111.650451][ T4648] XFS (loop3): Ending clean mount [ 111.672059][ T4648] XFS (loop3): Quotacheck needed: Please wait. [ 112.777349][ T4648] XFS (loop3): Quotacheck: Done. [ 113.416605][ T26] audit: type=1800 audit(1773849550.494:3): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.54" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 113.458417][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.466060][ T4669] netlink: 168 bytes leftover after parsing attributes in process `syz.3.54'. [ 113.902843][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.089848][ T4269] XFS (loop3): Unmounting Filesystem [ 114.812358][ T4679] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 115.332159][ T14] usb 1-1: no configurations [ 115.336878][ T14] usb 1-1: can't read configurations, error -22 [ 115.451987][ T4680] loop4: detected capacity change from 0 to 128 [ 115.541321][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.561473][ T4680] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 115.901479][ T4685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.921225][ T14] usb 1-1: device not accepting address 6, error -71 [ 117.201318][ T14] usb usb1-port1: attempt power cycle [ 117.367480][ T4685] loop2: detected capacity change from 0 to 64 [ 118.881059][ T4694] ubi31: attaching mtd0 [ 118.897357][ T4694] ubi31: scanning is finished [ 118.902304][ T4694] ubi31: empty MTD device detected [ 119.590498][ T4694] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 119.922937][ T4699] loop4: detected capacity change from 0 to 32768 [ 119.964987][ T4702] loop1: detected capacity change from 0 to 64 [ 120.062663][ T4699] XFS (loop4): Mounting V5 Filesystem [ 120.183699][ T4699] XFS (loop4): Ending clean mount [ 120.203052][ T4699] XFS (loop4): Quotacheck needed: Please wait. [ 120.338021][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 120.564604][ T4715] mmap: syz.3.60 (4715) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.010653][ T4715] syz.3.60 (4715) used greatest stack depth: 16592 bytes left [ 121.153053][ T4699] XFS (loop4): Quotacheck: Done. [ 122.253031][ T4268] XFS (loop4): Unmounting Filesystem [ 123.966722][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.984918][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.993786][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.003390][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.012397][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 124.019837][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.689028][ T4748] tmpfs: Unknown parameter 'fscontext' [ 125.309671][ T4747] tty tty2: ldisc open failed (-12), clearing slot 1 [ 126.085425][ T4753] loop4: detected capacity change from 0 to 64 [ 126.113664][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 128.194519][ T4752] device bridge1 entered promiscuous mode [ 128.209179][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 128.480289][ T32] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.835577][ T32] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.241318][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 131.586069][ T32] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.637041][ T4735] chnl_net:caif_netlink_parms(): no params data found [ 131.654144][ T4786] loop4: detected capacity change from 0 to 128 [ 131.692648][ T4786] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 131.832793][ T32] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.698959][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 132.984911][ T4799] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 133.168100][ T26] audit: type=1800 audit(1773849570.184:4): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.80" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 133.188071][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.194538][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.392349][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.593050][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.775255][ T4735] device bridge_slave_0 entered promiscuous mode [ 134.848667][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.861286][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.869910][ T4735] device bridge_slave_1 entered promiscuous mode [ 135.034584][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.262550][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.716966][ T4735] team0: Port device team_slave_0 added [ 138.010596][ T4735] team0: Port device team_slave_1 added [ 138.437620][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.453822][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.785067][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.041012][ T4852] binder: BINDER_SET_CONTEXT_MGR already set [ 139.047452][ T4852] binder: 4847:4852 ioctl 4018620d 200000000040 returned -16 [ 139.213892][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.244740][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.568313][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.665601][ T4859] syz.4.90 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 139.686142][ T4859] ptrace attach of "./syz-executor exec"[4268] was attempted by " [ 140.687293][ T4735] device hsr_slave_0 entered promiscuous mode [ 140.922220][ T4869] binder: BINDER_SET_CONTEXT_MGR already set [ 140.928564][ T4869] binder: 4863:4869 ioctl 4018620d 200000000040 returned -16 [ 145.012313][ T4735] device hsr_slave_1 entered promiscuous mode [ 145.021657][ T4735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.029531][ T4735] Cannot create hsr debugfs directory [ 145.520310][ T4890] block device autoloading is deprecated and will be removed. [ 147.475279][ T4735] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.523526][ T4735] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.792842][ T4735] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.804843][ T4735] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.899929][ T4906] vivid-002: disconnect [ 148.905336][ T4905] vivid-002: reconnect [ 149.127557][ T4910] loop2: detected capacity change from 0 to 32768 [ 150.148477][ T4910] XFS (loop2): Mounting V5 Filesystem [ 150.364781][ T4910] XFS (loop2): Ending clean mount [ 150.384617][ T4910] XFS (loop2): Quotacheck needed: Please wait. [ 150.424452][ T4910] XFS (loop2): Quotacheck: Done. [ 151.246329][ T4937] loop0: detected capacity change from 0 to 32768 [ 151.365850][ T4937] XFS (loop0): Mounting V5 Filesystem [ 151.395502][ T4270] XFS (loop2): Unmounting Filesystem [ 151.424393][ T32] device hsr_slave_0 left promiscuous mode [ 151.498055][ T32] device hsr_slave_1 left promiscuous mode [ 151.514228][ T4937] XFS (loop0): Ending clean mount [ 151.572501][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.576172][ T4937] XFS (loop0): Quotacheck needed: Please wait. [ 151.580017][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.712496][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.731693][ T4937] XFS (loop0): Quotacheck: Done. [ 151.740560][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.898230][ T32] device bridge_slave_1 left promiscuous mode [ 151.969458][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.249613][ T4953] netlink: 168 bytes leftover after parsing attributes in process `syz.0.105'. [ 152.310462][ T26] audit: type=1800 audit(1773849589.294:5): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.105" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 153.307524][ T4267] XFS (loop0): Unmounting Filesystem [ 153.381974][ T32] device bridge_slave_0 left promiscuous mode [ 153.389814][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.577426][ T32] device veth1_macvtap left promiscuous mode [ 153.599637][ T32] device veth0_macvtap left promiscuous mode [ 153.736597][ T32] device veth1_vlan left promiscuous mode [ 153.742842][ T32] device veth0_vlan left promiscuous mode [ 154.842244][ T4967] xt_TPROXY: Can be used only with -p tcp or -p udp [ 154.983085][ T4960] sched: RT throttling activated [ 161.608048][ T5003] ubi31: attaching mtd0 [ 161.619648][ T5003] ubi31: scanning is finished [ 162.252138][ T5003] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 163.759268][ T5018] tmpfs: Unknown parameter 'fscontext' [ 164.425110][ T32] team0 (unregistering): Port device team_slave_1 removed [ 164.616777][ T32] team0 (unregistering): Port device team_slave_0 removed [ 164.693374][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.775586][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.941968][ T5031] overlayfs: missing 'lowerdir' [ 166.834739][ T32] bond0 (unregistering): Released all slaves [ 167.156125][ T5029] netlink: 'syz.4.120': attribute type 4 has an invalid length. [ 167.733870][ T5050] ALSA: mixer_oss: invalid OSS volume 'LI' [ 167.748299][ T5050] netlink: 68 bytes leftover after parsing attributes in process `syz.0.124'. [ 169.561137][ T5060] loop6: detected capacity change from 0 to 7 [ 169.573445][ T5060] Dev loop6: unable to read RDB block 7 [ 169.579488][ T5060] loop6: unable to read partition table [ 169.587624][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.595067][ T5060] loop6: partition table beyond EOD, truncated [ 169.601461][ T5060] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 170.417644][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.644115][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.908416][ T4735] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.164046][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.174991][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.185436][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.192792][ T4442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.257115][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.365066][ T5070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.419747][ T5070] loop3: detected capacity change from 0 to 64 [ 171.695859][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.847942][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.064715][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.071999][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.395062][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.573447][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.731710][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.937033][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.090485][ T4735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.147451][ T4735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.167873][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.659693][ T5088] vivid-001: disconnect [ 173.726305][ T5084] vivid-001: reconnect [ 174.559190][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.568902][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.729023][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.784015][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.793341][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.802616][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.812061][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.677619][ T5113] binder: BINDER_SET_CONTEXT_MGR already set [ 175.684205][ T5113] binder: 5110:5113 ioctl 4018620d 200000000040 returned -16 [ 176.897754][ T5119] binder: 5116:5119 ioctl 80286722 2000000194c0 returned -22 [ 177.109161][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.126710][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.173947][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.960323][ T5154] loop3: detected capacity change from 0 to 32768 [ 182.043514][ T5158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 182.646452][ T5159] binder: 5150:5159 ioctl c0306201 200000001a80 returned -14 [ 182.846120][ T5154] XFS (loop3): Mounting V5 Filesystem [ 182.885362][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.065593][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.263152][ T5177] loop4: detected capacity change from 0 to 512 [ 183.418541][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.607274][ T5177] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.616443][ T5177] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.697481][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.730093][ T5154] XFS (loop3): Ending clean mount [ 183.736814][ T5154] XFS (loop3): Quotacheck needed: Please wait. [ 183.768553][ T4735] device veth0_vlan entered promiscuous mode [ 183.785337][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.857975][ T5154] XFS (loop3): Quotacheck: Done. [ 184.065660][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.587841][ T4735] device veth1_vlan entered promiscuous mode [ 184.612982][ T4735] device veth0_macvtap entered promiscuous mode [ 184.623422][ T4735] device veth1_macvtap entered promiscuous mode [ 184.818222][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.877935][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 184.884956][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.895051][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.905699][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.916139][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.927233][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.977611][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.988126][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.092437][ T4269] XFS (loop3): Unmounting Filesystem [ 185.153104][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.328572][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.395104][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.562893][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.750274][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.884761][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.035370][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.216811][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.314238][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.665704][ T5205] loop2: detected capacity change from 0 to 512 [ 188.008605][ T5212] vivid-004: disconnect [ 188.422391][ T5206] vivid-004: reconnect [ 188.611420][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 188.611454][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 188.611597][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 188.631153][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 189.093987][ T5205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 189.103520][ T5205] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.697917][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 190.611449][ T5222] ubi31: attaching mtd0 [ 190.624529][ T5222] ubi31: scanning is finished [ 191.223314][ T5222] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 192.507074][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.524442][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.537196][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.546229][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.555530][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 192.563028][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.349548][ T5251] tmpfs: Unknown parameter 'fscontext' [ 193.673004][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 194.361528][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.467114][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.475353][ T5235] device bridge_slave_0 entered promiscuous mode [ 194.502350][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.520363][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.645900][ T5235] device bridge_slave_1 entered promiscuous mode [ 194.766293][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 195.613001][ T4277] Bluetooth: min 0 < 6 [ 196.196918][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.639125][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.075626][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 197.334536][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.341064][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.614578][ T5235] team0: Port device team_slave_0 added [ 197.740349][ T5290] tmpfs: Unknown parameter 'fscontext' [ 198.352091][ T4281] Bluetooth: hci2: command 0x2021 tx timeout [ 198.407318][ T5289] loop6: detected capacity change from 0 to 7 [ 198.420086][ T5289] Dev loop6: unable to read RDB block 7 [ 198.426384][ T5289] loop6: unable to read partition table [ 198.432906][ T5289] loop6: partition table beyond EOD, truncated [ 198.439560][ T5289] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 198.995746][ T5235] team0: Port device team_slave_1 added [ 199.050994][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.078648][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.297015][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 199.980929][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.993540][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.000855][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.027208][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.277816][ T5235] device hsr_slave_0 entered promiscuous mode [ 202.508543][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 202.516436][ T5235] device hsr_slave_1 entered promiscuous mode [ 202.523835][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.532714][ T5235] Cannot create hsr debugfs directory [ 204.395406][ T5336] loop4: detected capacity change from 0 to 32768 [ 205.765102][ T5346] No such timeout policy "syz1" [ 206.804063][ T5336] XFS (loop4): Mounting V5 Filesystem [ 206.942158][ T5336] XFS (loop4): Ending clean mount [ 206.951223][ T5336] XFS (loop4): Quotacheck needed: Please wait. [ 207.065047][ T4281] Bluetooth: min 0 < 6 [ 208.478492][ T5336] XFS (loop4): Quotacheck: Done. [ 208.663898][ T4268] XFS (loop4): Unmounting Filesystem [ 209.006452][ T4351] device hsr_slave_0 left promiscuous mode [ 209.213804][ T4277] Bluetooth: hci3: command 0x2021 tx timeout [ 210.485382][ T4351] device hsr_slave_1 left promiscuous mode [ 210.505506][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.532805][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.547050][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.564278][ T4351] device bridge_slave_1 left promiscuous mode [ 210.603989][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.623773][ T4351] device bridge_slave_0 left promiscuous mode [ 210.644180][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.745404][ T4351] device veth1_macvtap left promiscuous mode [ 210.758067][ T4351] device veth0_macvtap left promiscuous mode [ 210.773931][ T4351] device veth1_vlan left promiscuous mode [ 210.787857][ T4351] device veth0_vlan left promiscuous mode [ 212.533950][ T5387] Mount JFS Failure: -22 [ 212.558478][ T5387] jfs_mount failed w/return code = -22 [ 212.966348][ T4351] team0 (unregistering): Port device team_slave_1 removed [ 213.016922][ T4351] team0 (unregistering): Port device team_slave_0 removed [ 213.063213][ T4351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.113688][ T4351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.388990][ T4351] bond0 (unregistering): Released all slaves [ 213.806753][ T5235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.828762][ T5235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.839834][ T5235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.856917][ T5235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.041971][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.063661][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.079564][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.092770][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.105114][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.114659][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.125732][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.133086][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.143656][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.154992][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.164217][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.173154][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.180258][ T4442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.198307][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.208998][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.231551][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.244929][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.261825][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.290984][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.299973][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.309243][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.318922][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.335389][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.349068][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.361462][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.630583][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.638927][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.656895][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.029104][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.044387][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.066604][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.076717][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.085723][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.097050][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.107311][ T5235] device veth0_vlan entered promiscuous mode [ 215.123905][ T5235] device veth1_vlan entered promiscuous mode [ 215.162506][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.173349][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.184529][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.193357][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.204634][ T5235] device veth0_macvtap entered promiscuous mode [ 215.226117][ T5235] device veth1_macvtap entered promiscuous mode [ 215.242812][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.259371][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.269609][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.283699][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.293621][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.304743][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.314582][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.325616][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.338032][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.349381][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.360255][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.375056][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.386583][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.396552][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.407163][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.417019][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.427696][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.438648][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.446215][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.455015][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.463974][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.472664][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.481637][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.490966][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.504519][ T5235] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.514660][ T5235] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.523649][ T5235] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.533832][ T5235] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.620849][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.634788][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.642633][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.676021][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.684876][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.695993][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.215235][ T5443] binder: BINDER_SET_CONTEXT_MGR already set [ 216.221314][ T5443] binder: 5436:5443 ioctl 4018620d 200000000040 returned -16 [ 217.248470][ T5452] loop5: detected capacity change from 0 to 1024 [ 217.820374][ T5455] loop4: detected capacity change from 0 to 512 [ 217.869506][ T5455] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 217.879393][ T5455] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 217.940539][ T5455] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.189: Invalid inode table block 1 in block_group 0 [ 217.989190][ T5455] EXT4-fs (loop4): get root inode failed [ 218.009478][ T5455] EXT4-fs (loop4): mount failed [ 218.107732][ T4484] hfsplus: b-tree write err: -5, ino 25 [ 218.131017][ T4484] hfsplus: b-tree write err: -5, ino 4 [ 218.142404][ T4484] hfsplus: b-tree write err: -5, ino 2 [ 218.148469][ T4484] hfsplus: b-tree write err: -5, ino 26 [ 218.883428][ T5467] overlayfs: missing 'lowerdir' [ 219.155515][ T5471] netlink: 'syz.0.191': attribute type 4 has an invalid length. [ 222.072906][ T5492] No such timeout policy "syz1" [ 223.985138][ T5504] overlayfs: missing 'lowerdir' [ 224.761063][ T5509] loop2: detected capacity change from 0 to 32768 [ 224.999283][ T5502] netlink: 'syz.4.182': attribute type 4 has an invalid length. [ 225.326349][ T5509] XFS (loop2): Mounting V5 Filesystem [ 226.204595][ T5509] XFS (loop2): Ending clean mount [ 226.213307][ T5509] XFS (loop2): Quotacheck needed: Please wait. [ 226.604930][ T5509] XFS (loop2): Quotacheck: Done. [ 227.087456][ T5539] netlink: 168 bytes leftover after parsing attributes in process `syz.2.190'. [ 227.088334][ T26] audit: type=1800 audit(1773849659.485:6): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.190" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 227.290627][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 227.939270][ T4270] XFS (loop2): Unmounting Filesystem [ 229.322374][ T5565] loop5: detected capacity change from 0 to 32768 [ 229.373429][ T5552] xt_TPROXY: Can be used only with -p tcp or -p udp [ 229.479453][ T5565] XFS (loop5): Mounting V5 Filesystem [ 229.611722][ T5565] XFS (loop5): Ending clean mount [ 229.618300][ T5565] XFS (loop5): Quotacheck needed: Please wait. [ 230.520857][ T5565] XFS (loop5): Quotacheck: Done. [ 230.552131][ T5588] No such timeout policy "syz1" [ 230.886852][ T5591] netlink: 168 bytes leftover after parsing attributes in process `syz.5.180'. [ 230.939452][ T26] audit: type=1800 audit(1773849663.022:7): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.180" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 233.449021][ T5235] XFS (loop5): Unmounting Filesystem [ 233.722569][ T4277] Bluetooth: min 0 < 6 [ 235.693989][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.204'. [ 235.703061][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.204'. [ 235.915951][ T4277] Bluetooth: hci2: command 0x2021 tx timeout [ 238.721777][ T5634] loop4: detected capacity change from 0 to 40427 [ 239.393385][ T5634] F2FS-fs (loop4): invalid crc value [ 239.499115][ T5646] overlayfs: missing 'lowerdir' [ 239.567697][ T5651] netlink: 'syz.2.214': attribute type 4 has an invalid length. [ 241.791240][ T5652] xt_TPROXY: Can be used only with -p tcp or -p udp [ 241.854887][ T5634] F2FS-fs (loop4): Found nat_bits in checkpoint [ 241.888582][ T5634] F2FS-fs (loop4): Start checkpoint disabled! [ 243.665919][ T5668] netlink: 'syz.5.216': attribute type 13 has an invalid length. [ 243.746945][ T5674] syz.2.218 uses obsolete (PF_INET,SOCK_PACKET) [ 243.756650][ T5674] netlink: 'syz.2.218': attribute type 2 has an invalid length. [ 243.964324][ T5668] gretap0: refused to change device tx_queue_len [ 243.971078][ T5668] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 245.076260][ T5691] tmpfs: Unknown parameter 'fscontext' [ 245.131759][ T5686] netlink: 'syz.0.231': attribute type 6 has an invalid length. [ 248.230656][ T4277] Bluetooth: min 0 < 6 [ 248.299733][ T26] audit: type=1326 audit(1773849679.333:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9d9c799 code=0x7ffc0000 [ 248.387013][ T5720] netlink: 'syz.4.224': attribute type 1 has an invalid length. [ 248.455181][ T26] audit: type=1326 audit(1773849679.333:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9d9c799 code=0x7ffc0000 [ 248.483450][ T5720] netlink: 'syz.4.224': attribute type 2 has an invalid length. [ 248.668032][ T5720] netlink: 165 bytes leftover after parsing attributes in process `syz.4.224'. [ 249.429264][ T26] audit: type=1326 audit(1773849679.333:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd6e9d9c799 code=0x7ffc0000 [ 249.745815][ T26] audit: type=1326 audit(1773849679.333:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9d9c799 code=0x7ffc0000 [ 249.797560][ T26] audit: type=1326 audit(1773849679.333:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9d9c799 code=0x7ffc0000 [ 250.113109][ T26] audit: type=1326 audit(1773849679.352:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9d9c799 code=0x7ffc0000 [ 250.210022][ T26] audit: type=1326 audit(1773849679.352:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9d9c799 code=0x7ffc0000 [ 250.318097][ T26] audit: type=1326 audit(1773849679.352:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6e9d9c799 code=0x7ffc0000 [ 250.419011][ T4277] Bluetooth: hci3: command 0x2021 tx timeout [ 250.463171][ T26] audit: type=1326 audit(1773849679.352:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9d9c799 code=0x7ffc0000 [ 250.492848][ T26] audit: type=1326 audit(1773849679.352:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9d9c799 code=0x7ffc0000 [ 250.961588][ T5715] netlink: 'syz.4.224': attribute type 4 has an invalid length. [ 250.970322][ T5717] netlink: 'syz.4.224': attribute type 4 has an invalid length. [ 251.184809][ T5748] netlink: 'syz.5.232': attribute type 1 has an invalid length. [ 251.216250][ T5748] netlink: 'syz.5.232': attribute type 2 has an invalid length. [ 254.250180][ T5748] fuse: Bad value for 'blksize' [ 255.618801][ T5780] tmpfs: Unknown parameter 'fscontext' [ 256.951266][ T4277] Bluetooth: min 0 < 6 [ 259.459656][ T4277] Bluetooth: hci0: command 0x2021 tx timeout [ 260.079598][ T5802] tmpfs: Unknown parameter 'usrquota' [ 261.159823][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 262.987397][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.993737][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.909877][ T5827] loop3: detected capacity change from 0 to 2048 [ 265.214890][ T5827] loop3: p1 < > p3 [ 265.277035][ T5827] loop3: p3 size 134217728 extends beyond EOD, truncated [ 266.670059][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 267.317243][ T5843] loop2: detected capacity change from 0 to 2048 [ 267.346292][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 267.503970][ T5843] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 268.424987][ T4277] Bluetooth: hci0: command 0x0411 tx timeout [ 269.186322][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 269.388769][ T5865] capability: warning: `syz.3.253' uses deprecated v2 capabilities in a way that may be insecure [ 269.441593][ T5868] lo speed is unknown, defaulting to 1000 [ 270.283671][ T5868] lo speed is unknown, defaulting to 1000 [ 271.002498][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 271.013595][ T4277] Bluetooth: min 0 < 6 [ 271.075365][ T5878] No such timeout policy "syz1" [ 272.116754][ T5865] netlink: 'syz.3.253': attribute type 10 has an invalid length. [ 272.382357][ T5865] team0: Device vxcan1 is of different type [ 273.028230][ T5868] lo speed is unknown, defaulting to 1000 [ 273.101645][ T5868] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 273.468803][ T4277] Bluetooth: hci0: command 0x2021 tx timeout [ 273.496089][ T5868] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 274.762112][ T5868] lo speed is unknown, defaulting to 1000 [ 274.775509][ T5868] lo speed is unknown, defaulting to 1000 [ 274.789755][ T5868] lo speed is unknown, defaulting to 1000 [ 274.813078][ T5868] lo speed is unknown, defaulting to 1000 [ 274.854872][ T5868] lo speed is unknown, defaulting to 1000 [ 277.982249][ T5922] loop2: detected capacity change from 0 to 164 [ 278.588535][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.263'. [ 279.241034][ T4277] Bluetooth: min 0 < 6 [ 280.149887][ T5939] loop5: detected capacity change from 0 to 2048 [ 280.832797][ T5939] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 280.841521][ T5939] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.081624][ T5939] EXT4-fs (loop5): unmounting filesystem. [ 281.585822][ T4277] Bluetooth: hci4: command 0x2021 tx timeout [ 283.381466][ T5943] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 283.503544][ T5943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.266'. [ 283.543026][ T5943] bridge0: port 3(dummy0) entered blocking state [ 284.371046][ T5943] bridge0: port 3(dummy0) entered disabled state [ 284.385764][ T5943] device dummy0 entered promiscuous mode [ 284.400210][ T5943] bridge0: port 3(dummy0) entered blocking state [ 284.407102][ T5943] bridge0: port 3(dummy0) entered forwarding state [ 287.280538][ T5973] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 287.287562][ T5973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 287.296237][ T5973] vhci_hcd vhci_hcd.0: Device attached [ 288.067330][ T5977] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 288.074252][ T5977] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 288.085058][ T5977] vhci_hcd vhci_hcd.0: Device attached [ 288.095989][ T5973] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 288.102706][ T5973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 288.111559][ T5973] vhci_hcd vhci_hcd.0: Device attached [ 288.162015][ T126] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 288.177051][ T5998] vhci_hcd: connection closed [ 288.180084][ T5994] vhci_hcd: connection closed [ 288.275702][ T5988] vhci_hcd: connection closed [ 288.368701][ T5989] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 288.731923][ T4294] vhci_hcd: stop threads [ 289.009403][ T4294] vhci_hcd: release socket [ 289.054766][ T4294] vhci_hcd: disconnect device [ 289.099779][ T4294] vhci_hcd: stop threads [ 289.114791][ T4294] vhci_hcd: release socket [ 289.156776][ T4294] vhci_hcd: disconnect device [ 289.203956][ T4294] vhci_hcd: stop threads [ 289.364232][ T4294] vhci_hcd: release socket [ 289.375111][ T4294] vhci_hcd: disconnect device [ 289.392220][ T6011] loop3: detected capacity change from 0 to 16 [ 289.701313][ T6011] erofs: (device loop3): mounted with root inode @ nid 36. [ 293.437076][ T6045] loop2: detected capacity change from 0 to 512 [ 293.444307][ T6045] EXT4-fs: Ignoring removed nobh option [ 293.459161][ T6045] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 294.488545][ T126] vhci_hcd: vhci_device speed not set [ 297.415615][ T6012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.663982][ T6012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.182923][ T6089] loop5: detected capacity change from 0 to 512 [ 299.204393][ T6089] EXT4-fs: Mount option(s) incompatible with ext3 [ 299.501215][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.514467][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.785019][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.795649][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.807031][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.815453][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.845528][ T4260] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.256127][ T6012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.383162][ T6103] loop5: detected capacity change from 0 to 16 [ 300.494105][ T6103] erofs: (device loop5): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 300.504973][ T6103] erofs: (device loop5): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 301.865136][ T6012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.055217][ T6115] comedi comedi1: bad chanlist[0]=0xfffffffd chan=65533 range length=1 [ 302.064716][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 302.078509][ T6080] lo speed is unknown, defaulting to 1000 [ 302.749440][ T4281] Bluetooth: min 0 < 6 [ 303.758782][ T6135] loop5: detected capacity change from 0 to 32768 [ 303.772936][ T6135] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.302 (6135) [ 303.806502][ T6135] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.817446][ T6135] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 303.826522][ T6135] BTRFS info (device loop5): setting nodatasum [ 303.832832][ T6135] BTRFS info (device loop5): force zlib compression, level 3 [ 303.840467][ T6135] BTRFS info (device loop5): setting nodatasum [ 303.846734][ T6135] BTRFS info (device loop5): turning on flush-on-commit [ 303.854353][ T6135] BTRFS warning (device loop5): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 303.865310][ T6135] BTRFS info (device loop5): max_inline at 4096 [ 303.871717][ T6135] BTRFS info (device loop5): using free space tree [ 304.428165][ T6147] 9pnet_fd: Insufficient options for proto=fd [ 305.022408][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 305.031414][ T4277] Bluetooth: hci4: command 0x2021 tx timeout [ 305.315520][ T6135] BTRFS info (device loop5): enabling ssd optimizations [ 305.557489][ T5235] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 305.672963][ T6080] chnl_net:caif_netlink_parms(): no params data found [ 306.516932][ T6186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.541817][ T6186] loop2: detected capacity change from 0 to 64 [ 307.183564][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 307.622482][ T6184] vivid-000: kernel_thread() failed [ 308.491116][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.524066][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.541094][ T6080] device bridge_slave_0 entered promiscuous mode [ 308.687357][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.406289][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 309.482139][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.517041][ T6211] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 309.523687][ T6211] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.556727][ T6211] vhci_hcd vhci_hcd.0: Device attached [ 309.562689][ T6212] vhci_hcd: connection closed [ 309.576647][ T5585] vhci_hcd: stop threads [ 310.133993][ T6080] device bridge_slave_1 entered promiscuous mode [ 310.218096][ T5585] vhci_hcd: release socket [ 310.257783][ T5585] vhci_hcd: disconnect device [ 310.467293][ T6080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.655417][ T6080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.916670][ T4281] Bluetooth: min 0 < 6 [ 313.475621][ T6080] team0: Port device team_slave_0 added [ 313.539648][ T6080] team0: Port device team_slave_1 added [ 313.621500][ T6238] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 313.629857][ T6238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.313'. [ 313.818655][ T6238] batman_adv: batadv0: Adding interface: vlan1 [ 313.826752][ T6238] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.854379][ T6238] batman_adv: batadv0: Interface activated: vlan1 [ 314.107841][ T4281] Bluetooth: hci4: command 0x2021 tx timeout [ 316.242441][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.298411][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.459971][ T6080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.744885][ T6267] loop5: detected capacity change from 0 to 2048 [ 317.261223][ T6267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.940792][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.959309][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.802374][ T6080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.976204][ T4281] Bluetooth: min 0 < 6 [ 320.748504][ T6301] ubi31: attaching mtd0 [ 320.757288][ T6301] ubi31: scanning is finished [ 321.489738][ T4281] Bluetooth: hci0: command 0x2021 tx timeout [ 323.520352][ T6301] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 323.567830][ T6012] device hsr_slave_0 left promiscuous mode [ 323.658921][ T6298] 9pnet_fd: Insufficient options for proto=fd [ 324.343483][ T6012] device hsr_slave_1 left promiscuous mode [ 324.469146][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.951292][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.979989][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.988122][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.998042][ T6012] device bridge_slave_1 left promiscuous mode [ 325.005618][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.018534][ T6012] device bridge_slave_0 left promiscuous mode [ 325.028656][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.157064][ T6323] loop5: detected capacity change from 0 to 512 [ 326.247811][ T6012] device veth1_macvtap left promiscuous mode [ 326.274184][ T6323] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 326.298553][ T6012] device veth0_macvtap left promiscuous mode [ 326.546354][ T6012] device veth1_vlan left promiscuous mode [ 326.552422][ T6012] device veth0_vlan left promiscuous mode [ 326.573034][ T6323] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 326.601940][ T6323] EXT4-fs (loop5): orphan cleanup on readonly fs [ 326.638638][ T6323] __quota_error: 22 callbacks suppressed [ 326.638664][ T6323] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 326.822062][ T6323] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 326.838039][ T6323] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 326.887553][ T6323] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.335: bg 0: block 64: padding at end of block bitmap is not set [ 327.732709][ T6323] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 327.767232][ T6323] EXT4-fs (loop5): 1 truncate cleaned up [ 327.878575][ T6323] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 328.552262][ T4281] Bluetooth: min 0 < 6 [ 328.644800][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.651187][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.704164][ T5235] EXT4-fs (loop5): unmounting filesystem. [ 328.783698][ T4281] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 329.724235][ T6346] 9p: Unknown Cache mode readahead [ 330.404135][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 330.607148][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 330.614681][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.664622][ T14] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 330.681408][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.778010][ T4281] Bluetooth: hci1: command 0x2021 tx timeout [ 330.788867][ T14] usb 6-1: Product: syz [ 330.793189][ T14] usb 6-1: Manufacturer: syz [ 330.797996][ T14] usb 6-1: SerialNumber: syz [ 330.804668][ T6350] loop3: detected capacity change from 0 to 128 [ 330.808003][ T14] usb 6-1: config 0 descriptor?? [ 330.846227][ T14] usb 6-1: bad CDC descriptors [ 330.853713][ T14] usb 6-1: unsupported MDLM descriptors [ 330.937700][ T6350] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 330.982102][ T6350] hpfs: filesystem error: improperly stopped [ 331.012611][ T6350] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 331.021433][ T6350] hpfs: You really don't want any checks? You are crazy... [ 331.110239][ T6350] hpfs: hpfs_map_4sectors(): unaligned read [ 331.170653][ T6350] hpfs: hpfs_map_4sectors(): unaligned read [ 331.181621][ T14] usb 6-1: USB disconnect, device number 2 [ 331.194995][ T6350] hpfs: filesystem error: unable to find root dir [ 331.374074][ T6355] loop0: detected capacity change from 0 to 512 [ 331.586823][ T6353] netlink: 'syz.2.343': attribute type 4 has an invalid length. [ 331.917181][ T6355] EXT4-fs (loop0): filesystem is read-only [ 332.065251][ T6355] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 333.730831][ T6355] EXT4-fs (loop0): filesystem is read-only [ 333.764918][ T6355] EXT4-fs (loop0): orphan cleanup on readonly fs [ 333.880859][ T6355] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.339: bg 0: block 64: padding at end of block bitmap is not set [ 333.937154][ T6355] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 333.957984][ T6355] EXT4-fs (loop0): 1 orphan inode deleted [ 333.966159][ T6355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 333.977120][ T6379] loop2: detected capacity change from 0 to 512 [ 334.074094][ T4281] Bluetooth: min 0 < 6 [ 335.168566][ T6379] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 335.762429][ T6382] loop3: detected capacity change from 0 to 40427 [ 335.766226][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 335.787996][ T6382] F2FS-fs (loop3): invalid crc value [ 335.804756][ T6382] F2FS-fs (loop3): Found nat_bits in checkpoint [ 336.174946][ T6382] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 336.249244][ T4281] Bluetooth: hci0: command 0x2021 tx timeout [ 336.622306][ T6398] loop0: detected capacity change from 0 to 1024 [ 336.759780][ T4281] Bluetooth: min 0 < 6 [ 338.048091][ T4277] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 338.058269][ T4277] Bluetooth: hci4: Injecting HCI hardware error event [ 338.079444][ T4281] Bluetooth: hci4: hardware error 0x00 [ 338.342481][ T6392] loop2: detected capacity change from 0 to 32768 [ 338.458760][ T6392] XFS (loop2): Mounting V5 Filesystem [ 339.062407][ T4277] Bluetooth: min 0 < 6 [ 339.066752][ T4277] Bluetooth: hci3: command 0x2021 tx timeout [ 339.214660][ T6187] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 339.227790][ T6187] XFS (loop2): Unmount and run xfs_repair [ 339.234951][ T6187] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 339.242792][ T6187] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 339.287108][ T6187] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 339.296806][ T6187] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 339.306254][ T6187] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 339.315147][ T6187] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 339.326567][ T6187] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 339.336189][ T6187] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 339.345300][ T6187] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 339.356855][ T6392] XFS (loop2): metadata I/O error in "xfs_read_agf+0x2b6/0x630" at daddr 0x1 len 1 error 74 [ 339.410745][ T6392] XFS (loop2): Error -117 reserving per-AG metadata reserve pool. [ 339.434464][ T6392] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c6/0x1f0 (fs/xfs/xfs_fsops.c:587). Shutting down filesystem. [ 339.462225][ T6392] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 339.508811][ T6392] XFS (loop2): Ending clean mount [ 339.537196][ T6392] XFS (loop2): Failed to initialize disk quotas. [ 339.688233][ T4270] XFS (loop2): Unmounting Filesystem [ 339.757144][ T6428] loop3: detected capacity change from 0 to 128 [ 339.798607][ T6428] befs: (loop3): No write support. Marking filesystem read-only [ 339.856784][ T6428] befs: (loop3): invalid magic header [ 339.968121][ T4283] Bluetooth: min 0 < 6 [ 340.609337][ T4277] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 340.618693][ T4277] Bluetooth: hci1: Injecting HCI hardware error event [ 340.625826][ T4281] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 340.636499][ T4281] Bluetooth: hci1: hardware error 0x00 [ 342.147952][ T4277] Bluetooth: hci0: command 0x2021 tx timeout [ 342.335417][ T6012] team0 (unregistering): Port device team_slave_1 removed [ 342.612433][ T4277] Bluetooth: hci1: Malformed LE Event: 0x0b [ 342.795212][ T6453] loop2: detected capacity change from 0 to 164 [ 342.805112][ T6012] team0 (unregistering): Port device team_slave_0 removed [ 342.960805][ T126] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 343.977518][ T4281] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 343.984406][ T4281] Bluetooth: min 0 < 6 [ 344.005222][ T4260] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.235104][ T6464] loop2: detected capacity change from 0 to 22 [ 344.308678][ T126] usb 6-1: config 9 has an invalid interface number: 32 but max is 0 [ 344.318328][ T126] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 344.328550][ T126] usb 6-1: config 9 has no interface number 0 [ 344.334871][ T126] usb 6-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid wMaxPacketSize 0 [ 344.344685][ T126] usb 6-1: config 9 interface 32 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 344.358426][ T126] usb 6-1: config 9 interface 32 has no altsetting 0 [ 344.383089][ T6012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.394671][ T6464] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 344.434761][ T126] usb 6-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 344.444041][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.530399][ T126] usb 6-1: Product: syz [ 344.535069][ T126] usb 6-1: Manufacturer: syz [ 344.539680][ T126] usb 6-1: SerialNumber: syz [ 344.589608][ T6464] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 344.807665][ T6012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.835356][ T126] usb 6-1: USB disconnect, device number 3 [ 344.897241][ T6467] loop3: detected capacity change from 0 to 64 [ 345.017006][ T6467] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 346.165880][ T4277] Bluetooth: hci3: command 0x2021 tx timeout [ 346.255502][ T6485] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.266775][ T6485] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 349.004497][ T6510] loop3: detected capacity change from 0 to 128 [ 349.053065][ T6510] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 349.063745][ T6510] MINIX-fs: bad superblock [ 349.277294][ T4260] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 349.462697][ T6521] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 349.587714][ T6524] loop0: detected capacity change from 0 to 512 [ 350.088018][ T6524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 350.097232][ T6524] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.130197][ T6534] loop3: detected capacity change from 0 to 64 [ 350.155929][ T4260] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 350.202392][ T6534] hfs: get root inode failed [ 350.486312][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 352.167647][ T6550] loop0: detected capacity change from 0 to 4096 [ 352.230723][ T6550] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 352.315164][ T6550] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 352.423471][ T6012] bond0 (unregistering): Released all slaves [ 352.458863][ T6550] ntfs: volume version 3.1. [ 352.528752][ T6550] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 352.575163][ T6550] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 352.588350][ T6550] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 352.750195][ T6080] device hsr_slave_0 entered promiscuous mode [ 352.772075][ T6080] device hsr_slave_1 entered promiscuous mode [ 352.810791][ T6080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.857436][ T6080] Cannot create hsr debugfs directory [ 354.031490][ T4277] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 354.090092][ T6080] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 354.116540][ T6584] loop0: detected capacity change from 0 to 2048 [ 354.825600][ T6080] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 354.884901][ T6080] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 354.955487][ T6584] NILFS (loop0): Invalid checkpoint (checkpoint number=2) [ 354.982485][ T6080] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 354.982897][ T6584] NILFS (loop0): error -22 while loading last checkpoint (checkpoint number=2) [ 355.432269][ T6080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.516577][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.543684][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.556614][ T4281] Bluetooth: hci3: Malformed LE Event: 0x0d [ 355.685610][ T6612] loop2: detected capacity change from 0 to 1024 [ 355.768101][ T6080] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.794968][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.806674][ T6612] EXT4-fs (loop2): can't read group descriptor 0 [ 355.819572][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.319329][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.326699][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.434035][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.443196][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.463219][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.470569][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.520196][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.661669][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.679048][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.708938][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.863791][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.918630][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.022864][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 357.116636][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.309995][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.340262][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.348087][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.360541][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.376306][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.447466][ T6636] loop0: detected capacity change from 0 to 8192 [ 358.166476][ T4314] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 358.369386][ T4314] usb 1-1: Using ep0 maxpacket: 32 [ 358.377078][ T4314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 358.399582][ T4314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.438936][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.450628][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.459831][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.476415][ T4314] usb 1-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.492930][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.500694][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 358.509202][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.516958][ T4314] usb 1-1: config 1 interface 0 has no altsetting 0 [ 358.552499][ T4314] usb 1-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 358.572364][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.580770][ T4314] usb 1-1: Product: syz [ 358.586200][ T4314] usb 1-1: Manufacturer: syz [ 358.590819][ T4314] usb 1-1: SerialNumber: syz [ 358.874155][ T6657] lo speed is unknown, defaulting to 1000 [ 358.881560][ T4314] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 [ 358.917025][ T3622] bcm5974 1-1:1.0: could not read from device [ 358.928278][ T6181] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 358.952008][ T4314] usb 1-1: USB disconnect, device number 8 [ 359.112296][ T6189] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 359.170030][ T6181] usb 4-1: Using ep0 maxpacket: 8 [ 359.187848][ T6181] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.254628][ T6181] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.289360][ T6181] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.339742][ T6181] usb 4-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 359.355898][ T6189] usb 6-1: unable to get BOS descriptor or descriptor too short [ 359.374073][ T6181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.382733][ T6189] usb 6-1: not running at top speed; connect to a high speed hub [ 359.400206][ T6181] usb 4-1: Product: syz [ 359.405050][ T6181] usb 4-1: Manufacturer: syz [ 359.414786][ T6189] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 359.426166][ T6181] usb 4-1: SerialNumber: syz [ 359.434750][ T6189] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 90, changing to 4 [ 359.465168][ T6189] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 359.473897][ T6657] chnl_net:caif_netlink_parms(): no params data found [ 359.488538][ T6189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.499057][ T6189] usb 6-1: Product: syz [ 359.510269][ T6189] usb 6-1: Manufacturer: syz [ 359.522216][ T6189] usb 6-1: SerialNumber: syz [ 359.732455][ T6181] usb 4-1: unit 5 not found! [ 359.857569][ T6189] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 359.954796][ T6189] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 359.969093][ T6181] usb 4-1: USB disconnect, device number 2 [ 360.385806][ T6189] usb 6-1: USB disconnect, device number 4 [ 360.421151][ T4314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 360.640172][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.650058][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.663366][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.671772][ T6657] device bridge_slave_0 entered promiscuous mode [ 360.694547][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.724550][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.735855][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 360.763242][ T4314] usb 3-1: Using ep0 maxpacket: 16 [ 360.773125][ T4314] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 360.784489][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 360.796478][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.810077][ T4314] usb 3-1: Product: syz [ 360.814530][ T4314] usb 3-1: Manufacturer: syz [ 360.814642][ T6657] device bridge_slave_1 entered promiscuous mode [ 360.819514][ T4314] usb 3-1: SerialNumber: syz [ 360.833426][ T4314] usb 3-1: config 0 descriptor?? [ 360.843407][ T4314] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 361.012624][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.062955][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.067279][ T4314] ssu100: probe of 3-1:0.0 failed with error -71 [ 361.098607][ T4314] usb 3-1: USB disconnect, device number 2 [ 361.288515][ T4315] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 361.422581][ T6657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.441020][ T6704] loop0: detected capacity change from 0 to 8 [ 361.459325][ T6657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.468055][ T6704] squashfs image failed sanity check [ 361.497002][ T4315] usb 6-1: Using ep0 maxpacket: 16 [ 361.593563][ T4277] Bluetooth: min 0 < 6 [ 361.629933][ T4315] usb 6-1: unable to get BOS descriptor or descriptor too short [ 361.687659][ T4315] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 361.899630][ T4315] usb 6-1: config 13 has no interface number 0 [ 361.992838][ T4315] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 362.088160][ T4315] usb 6-1: config 13 interface 50 has no altsetting 0 [ 362.124425][ T6657] team0: Port device team_slave_0 added [ 362.177872][ T4315] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 362.272072][ T6657] team0: Port device team_slave_1 added [ 362.333188][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.385758][ T4315] usb 6-1: Product: syz [ 363.305698][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 363.312209][ T4281] Bluetooth: min 0 < 6 [ 363.317330][ T4315] usb 6-1: Manufacturer: syz [ 363.321982][ T4315] usb 6-1: SerialNumber: syz [ 363.633744][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.641279][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.748033][ T6697] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 363.788242][ T4281] Bluetooth: hci3: command 0x2021 tx timeout [ 364.023500][ T6657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.123024][ T4315] usb 6-1: MIDIStreaming interface descriptor not found [ 364.157687][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.179373][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.262534][ T6726] loop0: detected capacity change from 0 to 2048 [ 364.315239][ T4315] usb 6-1: USB disconnect, device number 5 [ 364.322567][ T6657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.356363][ T6726] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.451: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 21765(21765) [ 364.438070][ T6726] EXT4-fs (loop0): get root inode failed [ 364.444138][ T6726] EXT4-fs (loop0): mount failed [ 364.548660][ T6657] device hsr_slave_0 entered promiscuous mode [ 364.577321][ T6657] device hsr_slave_1 entered promiscuous mode [ 364.643232][ T6657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.664545][ T6657] Cannot create hsr debugfs directory [ 364.777978][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.920815][ T6734] loop5: detected capacity change from 0 to 512 [ 364.976034][ T6734] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.453: bad orphan inode 15 [ 365.020931][ T6734] ext4_test_bit(bit=14, block=18) = 1 [ 365.026345][ T6734] is_bad_inode(inode)=0 [ 365.067547][ T6734] NEXT_ORPHAN(inode)=1023 [ 365.113785][ T6734] max_ino=32 [ 365.203437][ T6734] i_nlink=0 [ 365.272577][ T6734] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2916: inode #15: comm syz.5.453: corrupted xattr block 19 [ 365.653491][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 365.757540][ T6734] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 366.055162][ T4281] Bluetooth: hci3: command 0x2021 tx timeout [ 366.635548][ T6734] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 366.663810][ T6734] ext4 filesystem being mounted at /62/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 366.709289][ T4281] Bluetooth: Wrong link type (-57) [ 366.769807][ T6756] loop2: detected capacity change from 0 to 64 [ 366.934886][ T6756] hfs: bad allocation block size 0 [ 366.952401][ T6756] hfs: can't find a HFS filesystem on dev loop2 [ 367.052248][ T5235] EXT4-fs (loop5): unmounting filesystem. [ 367.058508][ T4281] Bluetooth: hci3: Malformed Event: 0x2f [ 367.912867][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 368.074002][ T4277] Bluetooth: min 0 < 6 [ 368.121598][ T6781] loop2: detected capacity change from 0 to 64 [ 369.189422][ T6781] MINIX-fs: bad superblock or unable to read bitmaps [ 369.840269][ T6763] loop0: detected capacity change from 0 to 40427 [ 369.849405][ T6763] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 369.858255][ T6763] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 369.872654][ T6763] F2FS-fs (loop0): invalid crc value [ 370.431440][ T4277] Bluetooth: hci0: command 0x2021 tx timeout [ 370.445034][ T6763] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 370.530026][ T4314] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 370.733744][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 370.740926][ T4314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.797404][ T4314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.852968][ T4314] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=ff.40 [ 370.875902][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 370.884531][ T4315] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 370.934648][ T4314] usb 4-1: Product: syz [ 370.939653][ T4314] usb 4-1: SerialNumber: syz [ 370.980013][ T46] device hsr_slave_0 left promiscuous mode [ 371.008668][ T46] device hsr_slave_1 left promiscuous mode [ 371.041221][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.073963][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.084977][ T46] device bridge_slave_1 left promiscuous mode [ 371.096490][ T4315] usb 6-1: Using ep0 maxpacket: 32 [ 371.103732][ T4315] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.120511][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.143241][ T4315] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 371.161967][ T46] device bridge_slave_0 left promiscuous mode [ 371.171342][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.179450][ T4315] usb 6-1: Product: syz [ 371.189893][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.199160][ T4314] usb 4-1: 0:2 : does not exist [ 371.258769][ T4314] usb 4-1: USB disconnect, device number 3 [ 371.264754][ T4315] usb 6-1: Manufacturer: syz [ 371.274239][ T4315] usb 6-1: SerialNumber: syz [ 371.296303][ T4315] usb 6-1: config 0 descriptor?? [ 371.343748][ T4315] usb 6-1: bad CDC descriptors [ 371.352097][ T4315] usb 6-1: unsupported MDLM descriptors [ 371.578986][ T6187] usb 6-1: USB disconnect, device number 6 [ 371.660595][ T46] team0 (unregistering): Port device team_slave_1 removed [ 371.701550][ T46] team0 (unregistering): Port device team_slave_0 removed [ 371.754788][ T14] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 371.765805][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.830820][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.848300][ T6189] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 371.974931][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 371.983489][ T4277] Bluetooth: min 0 < 6 [ 372.010012][ T14] usb 1-1: not running at top speed; connect to a high speed hub [ 372.046828][ T14] usb 1-1: config 16 has an invalid interface number: 36 but max is 0 [ 372.056271][ T14] usb 1-1: config 16 has no interface number 0 [ 372.065459][ T6189] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.089697][ T6189] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid wMaxPacketSize 0 [ 372.107145][ T14] usb 1-1: config 16 interface 36 has no altsetting 0 [ 372.132293][ T6189] usb 3-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 372.163329][ T14] usb 1-1: New USB device found, idVendor=0408, idProduct=ea04, bcdDevice=4a.9d [ 372.186657][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.207258][ T6189] usb 3-1: config 1 interface 0 has no altsetting 0 [ 372.216866][ T14] usb 1-1: Product: syz [ 372.256498][ T14] usb 1-1: Manufacturer: syz [ 372.262769][ T6189] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.282602][ T14] usb 1-1: SerialNumber: syz [ 372.298683][ T6189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 372.338664][ T6189] usb 3-1: SerialNumber: syz [ 372.364146][ T4281] Bluetooth: Unexpected start frame (len 10) [ 372.417251][ T6189] hub 3-1:1.0: bad descriptor, ignoring hub [ 372.443277][ T6189] hub: probe of 3-1:1.0 failed with error -5 [ 372.463898][ T6189] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 372.495503][ T6189] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 372.544283][ T14] hub 1-1:16.36: bad descriptor, ignoring hub [ 372.560549][ T14] hub: probe of 1-1:16.36 failed with error -5 [ 372.622065][ T14] option 1-1:16.36: GSM modem (1-port) converter detected [ 372.697357][ T6187] usb 3-1: USB disconnect, device number 3 [ 372.726989][ T6824] loop5: detected capacity change from 0 to 64 [ 372.733974][ T14] usb 1-1: USB disconnect, device number 9 [ 372.759898][ T14] option 1-1:16.36: device disconnected [ 372.790229][ T6824] hfs: found bad thread record in catalog [ 372.845505][ T6824] hfs: get root inode failed [ 372.864150][ T6181] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 373.073903][ T6181] usb 4-1: Using ep0 maxpacket: 8 [ 373.108823][ T6181] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.124710][ T6181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 373.138225][ T6181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.173674][ T6181] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 373.206013][ T6181] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.248658][ T6181] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 373.257149][ T6830] loop5: detected capacity change from 0 to 128 [ 373.297415][ T6181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.311275][ T6830] ADFS-fs (loop5): error: can't find an ADFS filesystem on dev loop5. [ 373.328380][ T6181] usb 4-1: config 0 descriptor?? [ 373.460390][ T46] bond0 (unregistering): Released all slaves [ 373.648081][ T6181] usb 4-1: USB disconnect, device number 4 [ 374.216740][ T4281] Bluetooth: hci3: command 0x2021 tx timeout [ 375.040925][ T4281] Bluetooth: min 0 < 6 [ 375.736650][ T6844] netlink: 4508 bytes leftover after parsing attributes in process `syz.0.485'. [ 377.198404][ T4281] Bluetooth: hci0: command 0x2021 tx timeout [ 377.523260][ T6657] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 377.559432][ T6657] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 377.603773][ T6860] loop3: detected capacity change from 0 to 64 [ 377.661439][ T6657] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 377.686897][ T6860] hfs: found bad thread record in catalog [ 377.695249][ T6657] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.712065][ T6860] hfs: get root inode failed [ 377.748536][ T4260] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 378.048699][ T6869] netlink: 193 bytes leftover after parsing attributes in process `syz.2.495'. [ 378.279288][ T6657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.358342][ T6875] loop3: detected capacity change from 0 to 256 [ 378.923126][ T6657] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.958066][ T6875] exfat: Deprecated parameter 'utf8' [ 379.004403][ T6875] exfat: Deprecated parameter 'namecase' [ 379.010131][ T6875] exfat: Deprecated parameter 'utf8' [ 379.013938][ T6657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.101598][ T6875] exFAT-fs (loop3): bogus number of FAT structure [ 379.137956][ T6657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.170843][ T6875] exFAT-fs (loop3): failed to read boot sector [ 379.196573][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.225708][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.229047][ T6875] exFAT-fs (loop3): failed to recognize exfat type [ 379.941865][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 379.946627][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.957835][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.974115][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.981420][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.989574][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.027879][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.072879][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.080317][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.906682][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 381.029984][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 381.289605][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 381.518151][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 381.672450][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 381.785297][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.794357][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 381.802967][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.812336][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 381.822049][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.852151][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.883369][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 381.892962][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.989722][ T4277] Bluetooth: min 0 < 6 [ 384.015797][ T4319] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 384.293783][ T4319] usb 6-1: Using ep0 maxpacket: 8 [ 384.312102][ T4319] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 384.441951][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.529788][ T4319] usb 6-1: Product: syz [ 384.534007][ T4319] usb 6-1: Manufacturer: syz [ 384.590418][ T4319] usb 6-1: SerialNumber: syz [ 384.628346][ T4319] usb 6-1: config 0 descriptor?? [ 384.664514][ T4319] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 384.706182][ T4319] dvb-usb: bulk message failed: -22 (2/0) [ 384.748301][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.767709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.777447][ T4319] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 384.883174][ T4319] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 384.905117][ T6657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.064252][ T4319] usb 6-1: media controller created [ 385.421694][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.507237][ T4319] dvb-usb: bulk message failed: -22 (1/0) [ 386.195827][ T4281] Bluetooth: hci3: command 0x2021 tx timeout [ 386.342260][ T4319] DVB: Unable to find symbol mt352_attach() [ 386.350460][ T4319] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 386.370442][ T4277] block nbd0: Receive control failed (result -32) [ 386.591215][ T4319] rc_core: IR keymap rc-dvico-portable not found [ 386.597682][ T4319] Registered IR keymap rc-empty [ 386.890949][ T4315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 387.102626][ T4315] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 387.128897][ T4315] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 387.191804][ T4315] usb 4-1: config 8 has no interface number 0 [ 387.219472][ T4315] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 388.181490][ T4319] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 388.202282][ T4319] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input11 [ 388.259092][ T4319] dvb-usb: schedule remote query interval to 100 msecs. [ 388.280500][ T4319] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 388.369716][ T4319] usb 6-1: USB disconnect, device number 7 [ 388.468823][ T4315] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 388.490864][ T4315] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 388.512374][ T4315] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 388.536231][ T4315] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 388.556356][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.582333][ T6956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 388.592256][ T4315] usb 4-1: NFC: intf ffff88807a094000 id ffffffff8d4055e0 [ 388.785619][ T4319] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 388.861488][ T6966] device wlan0 entered promiscuous mode [ 389.022703][ T14] usb 4-1: USB disconnect, device number 5 [ 389.839720][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.864947][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.746213][ T7000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.792060][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 390.917629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 390.946783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.961786][ T4281] Bluetooth: hci0: command 0x2021 tx timeout [ 391.055029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.509187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.519482][ T6657] device veth0_vlan entered promiscuous mode [ 392.707550][ T6657] device veth1_vlan entered promiscuous mode [ 393.164882][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 393.173535][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 393.246544][ T6657] device veth0_macvtap entered promiscuous mode [ 393.421489][ T6657] device veth1_macvtap entered promiscuous mode [ 394.696542][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.705603][ T4277] ------------[ cut here ]------------ [ 394.711487][ T4277] WARNING: CPU: 0 PID: 4277 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 394.721504][ T4277] Modules linked in: [ 394.725505][ T4277] CPU: 0 PID: 4277 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 394.733351][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.743486][ T4277] Workqueue: hci0 hci_conn_timeout [ 394.748689][ T4277] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 394.754336][ T4277] Code: 1f 8e e8 24 11 9f f8 48 8b 35 05 8b eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 ff 1f f8 e8 01 26 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 394.774039][ T4277] RSP: 0018:ffffc900045d7c08 EFLAGS: 00010293 [ 394.780139][ T4277] RAX: ffffffff89344caf RBX: ffff888073e60330 RCX: ffff8880792b9dc0 [ 394.788178][ T4277] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 394.796153][ T4277] RBP: 00000000ffffffff R08: ffff888073e60013 R09: 1ffff1100e7cc002 [ 394.804382][ T4277] R10: dffffc0000000000 R11: ffffed100e7cc003 R12: dffffc0000000000 [ 394.812437][ T4277] R13: dffffc0000000000 R14: ffff888073e60000 R15: ffff888073e60010 [ 394.820446][ T4277] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 394.829483][ T4277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.836172][ T4277] CR2: 0000200000003000 CR3: 00000000552bb000 CR4: 00000000003506f0 [ 394.844311][ T4277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 394.852318][ T4277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 394.860327][ T4277] Call Trace: [ 394.863687][ T4277] [ 394.866647][ T4277] ? process_one_work+0x7b0/0x1160 [ 394.871968][ T4277] process_one_work+0x8a2/0x1160 [ 394.876974][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 394.882697][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 394.887750][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 394.893370][ T4277] ? kthread_data+0x4b/0xc0 [ 394.897982][ T4277] worker_thread+0xaa2/0x1270 [ 394.902706][ T4277] kthread+0x29d/0x330 [ 394.907091][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 394.912118][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 394.916743][ T4277] ret_from_fork+0x1f/0x30 [ 394.921159][ T4277] [ 394.924615][ T4277] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 394.932157][ T4277] CPU: 0 PID: 4277 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 394.939861][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.949898][ T4277] Workqueue: hci0 hci_conn_timeout [ 394.955002][ T4277] Call Trace: [ 394.958274][ T4277] [ 394.961186][ T4277] dump_stack_lvl+0x188/0x24e [ 394.965944][ T4277] ? memcpy+0x3c/0x60 [ 394.969998][ T4277] ? show_regs_print_info+0x12/0x12 [ 394.975276][ T4277] ? load_image+0x400/0x400 [ 394.979780][ T4277] panic+0x2e5/0x730 [ 394.983676][ T4277] ? bpf_jit_dump+0xd0/0xd0 [ 394.988200][ T4277] ? ret_from_fork+0x1f/0x30 [ 394.992983][ T4277] __warn+0x2f8/0x4f0 [ 394.997050][ T4277] ? hci_conn_timeout+0x24f/0x450 [ 395.002079][ T4277] ? hci_conn_timeout+0x24f/0x450 [ 395.007186][ T4277] report_bug+0x2ba/0x4f0 [ 395.011605][ T4277] ? hci_conn_timeout+0x24f/0x450 [ 395.016629][ T4277] handle_bug+0x3a/0x70 [ 395.020774][ T4277] exc_invalid_op+0x16/0x40 [ 395.025268][ T4277] asm_exc_invalid_op+0x16/0x20 [ 395.030377][ T4277] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 395.036115][ T4277] Code: 1f 8e e8 24 11 9f f8 48 8b 35 05 8b eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 ff 1f f8 e8 01 26 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 395.055737][ T4277] RSP: 0018:ffffc900045d7c08 EFLAGS: 00010293 [ 395.061902][ T4277] RAX: ffffffff89344caf RBX: ffff888073e60330 RCX: ffff8880792b9dc0 [ 395.069997][ T4277] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 395.077968][ T4277] RBP: 00000000ffffffff R08: ffff888073e60013 R09: 1ffff1100e7cc002 [ 395.085951][ T4277] R10: dffffc0000000000 R11: ffffed100e7cc003 R12: dffffc0000000000 [ 395.094016][ T4277] R13: dffffc0000000000 R14: ffff888073e60000 R15: ffff888073e60010 [ 395.102111][ T4277] ? hci_conn_timeout+0x24f/0x450 [ 395.107239][ T4277] ? hci_conn_timeout+0x24f/0x450 [ 395.112322][ T4277] ? process_one_work+0x7b0/0x1160 [ 395.117519][ T4277] process_one_work+0x8a2/0x1160 [ 395.122528][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 395.128217][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 395.133358][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 395.139081][ T4277] ? kthread_data+0x4b/0xc0 [ 395.143600][ T4277] worker_thread+0xaa2/0x1270 [ 395.148301][ T4277] kthread+0x29d/0x330 [ 395.152368][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 395.157405][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 395.161978][ T4277] ret_from_fork+0x1f/0x30 [ 395.166525][ T4277] [ 395.170205][ T4277] Kernel Offset: disabled [ 395.174650][ T4277] Rebooting in 86400 seconds..