last executing test programs: 12.77972603s ago: executing program 2 (id=178): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0xd5d2, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080)=0x1, 0x7f08) 8.875393954s ago: executing program 2 (id=191): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010097c60000feb0"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r1, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x20) landlock_restrict_self(0xffffffffffffffff, 0xc) 8.63968796s ago: executing program 2 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) 7.776298241s ago: executing program 2 (id=196): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1}, 0x4}], 0x1, 0x40002122, 0x0) 6.099601701s ago: executing program 4 (id=203): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000211000/0x1000)=nil) pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r2, 0xa) connect$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "0200000000"}], 0x18}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 6.074296862s ago: executing program 2 (id=204): sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='super-speed', 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ptrace$pokeuser(0x6, r1, 0x21c, 0x1) syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000000)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) 5.647070272s ago: executing program 4 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, 0x0, 0x24008040) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x6, 0x0, &(0x7f0000000880)="40f05373f047", 0x0, 0xbaa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.630054857s ago: executing program 0 (id=207): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = timerfd_create(0x8, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x28a102) readv(r2, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x20) r3 = socket$inet(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x7, &(0x7f00000003c0)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r3, 0x5) setsockopt$inet_buf(r3, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r6 = accept$inet(r3, 0x0, 0x0) read(r6, &(0x7f0000000100), 0x4) r7 = io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0xb1d4, 0x400, 0x0, 0x200019f}) r8 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r8, 0xc0506107, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000400)={{0x77359400}, {0x77359400}}, &(0x7f0000000440)) close_range(r7, 0xffffffffffffffff, 0x0) write(r6, &(0x7f0000000300), 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 4.629403787s ago: executing program 4 (id=208): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000211000/0x1000)=nil) munlockall() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r5, 0xa) sendmsg(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "0200000000"}], 0x18}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 3.963648433s ago: executing program 1 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2400c800) 3.71230353s ago: executing program 0 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) 3.631647171s ago: executing program 4 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e25, 0x10, @private2, 0xcfd}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}}], 0x1, 0x24000890) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x10, 0x2, 0x9, 0x3, 0x3, 0x5, 0x7, 0x5, 0x7f, 0x31, 0x1, 0x2, 0x7, 0xe}, 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079000c000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0x11, 0x5}, 0x20) write(r1, &(0x7f0000000400)='common_pid > 0', 0xe) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1, 0x0, 0x42}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x0, 0x1, 0x80, "3173bd53cb064a7e67268bca02a4c9fa34825187c1b94d651bf1db50c41a024c", 0x51424752}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB='\x00\x00\x00\x00\"'], 0x20000600}, 0x1, 0x0, 0x0, 0x44810}, 0x1) close(r4) write$binfmt_format(r1, 0x0, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) 3.602652442s ago: executing program 0 (id=213): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000001380)={[{@rodir}, {@shortname_win95}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@utf8}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x3, 0x28f, &(0x7f0000001480)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0xc97}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x4000cdd) 3.538489984s ago: executing program 1 (id=214): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5e8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbfe, 0x38, 0x8, 0x70, 0x6e}) 3.219707991s ago: executing program 0 (id=215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6020400) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="fe24b7d5d310b899f8c24f7391ddc4a7", 0x10) 3.219341551s ago: executing program 0 (id=216): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x108) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x8000c61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x8, 0x2}) fcntl$lock(r4, 0x26, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000280)={0x1, 0x1, 0x2f, 0x200400a}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004810) 3.187813942s ago: executing program 1 (id=217): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r2, 0xa) connect$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "0200000000"}], 0x18}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 3.129285644s ago: executing program 3 (id=218): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0xd5d2, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080)=0x1, 0x7f08) 3.023881776s ago: executing program 4 (id=219): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x1, 0x2, 0x8000, 0xffffff01}) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) 3.022266796s ago: executing program 1 (id=220): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) 2.903569849s ago: executing program 2 (id=221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000740)=0x18ff5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0xffffffff, 0x21f9, 0x86a9, 0x4, 0x9, 0x9, 0x9e}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) 2.663977335s ago: executing program 1 (id=222): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000211000/0x1000)=nil) munlockall() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r5, 0xa) sendmsg(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "0200000000"}], 0x18}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 1.680539639s ago: executing program 0 (id=223): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f00000002c0)='snd_aloop.0', 0xb) 1.660798349s ago: executing program 3 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 1.656251769s ago: executing program 1 (id=225): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x82640, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20044884) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x4, 0x4a, 0x0, 0xf}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r4 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, 0x0, 0x0) 1.569238002s ago: executing program 3 (id=226): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r0], 0x18}, 0x2000c8d0) 1.569103182s ago: executing program 3 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000040900010073797a300000000080000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000081800019b0e000100636f6e6e6c696d69740000000400028008000340000001"], 0xc8}}, 0x20050800) 1.499557303s ago: executing program 4 (id=228): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$swradio(&(0x7f0000000580), 0x0, 0x2) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x4, 0x4002) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r3, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) 1.438669045s ago: executing program 3 (id=229): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) fanotify_init(0x40, 0x101000) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r4, &(0x7f0000000100)="96", 0x1) write$binfmt_misc(r4, &(0x7f0000000040), 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 0s ago: executing program 3 (id=230): write(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1', 0x1) mount(0x0, 0x0, &(0x7f0000000100)='nfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. [ 59.013084][ T4174] cgroup: Unknown subsys name 'net' [ 59.149792][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.402622][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.772225][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.812438][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.855534][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.940851][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.959578][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.966810][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.974739][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.990409][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 62.009308][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.016471][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.024660][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.051804][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.059272][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.067156][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.081888][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.089117][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.097508][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.143378][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.150558][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.158823][ T4186] device bridge_slave_0 entered promiscuous mode [ 62.168351][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.193993][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.201173][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.208986][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.217271][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.228471][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.260095][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.274155][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.281509][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.289328][ T4193] device bridge_slave_0 entered promiscuous mode [ 62.302963][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.310106][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.318077][ T4193] device bridge_slave_1 entered promiscuous mode [ 62.335816][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.342890][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.351111][ T4196] device bridge_slave_0 entered promiscuous mode [ 62.360122][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.378378][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.390390][ T4189] team0: Port device team_slave_0 added [ 62.401611][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.408804][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.417048][ T4196] device bridge_slave_1 entered promiscuous mode [ 62.435912][ T4189] team0: Port device team_slave_1 added [ 62.443702][ T4194] team0: Port device team_slave_0 added [ 62.451875][ T4194] team0: Port device team_slave_1 added [ 62.463861][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.497537][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.510469][ T4186] team0: Port device team_slave_0 added [ 62.523785][ T4186] team0: Port device team_slave_1 added [ 62.536070][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.550820][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.558148][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.584178][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.597151][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.604113][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.630135][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.646628][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.653600][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.679892][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.692328][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.725417][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.732387][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.758856][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.772486][ T4193] team0: Port device team_slave_0 added [ 62.785488][ T4193] team0: Port device team_slave_1 added [ 62.812360][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.819493][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.845527][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.861902][ T4196] team0: Port device team_slave_0 added [ 62.881502][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.888525][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.917448][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.929674][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.936805][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.963566][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.986711][ T4196] team0: Port device team_slave_1 added [ 62.996618][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.003664][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.013411][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.020466][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.046502][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.081633][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.088676][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.115012][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.128065][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.135077][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.160973][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.201103][ T4194] device hsr_slave_0 entered promiscuous mode [ 63.208287][ T4194] device hsr_slave_1 entered promiscuous mode [ 63.214972][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.222788][ T4194] Cannot create hsr debugfs directory [ 63.253288][ T4193] device hsr_slave_0 entered promiscuous mode [ 63.260227][ T4193] device hsr_slave_1 entered promiscuous mode [ 63.267759][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.275902][ T4193] Cannot create hsr debugfs directory [ 63.291442][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.298569][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.305286][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.312831][ T4186] Cannot create hsr debugfs directory [ 63.346193][ T4196] device hsr_slave_0 entered promiscuous mode [ 63.353006][ T4196] device hsr_slave_1 entered promiscuous mode [ 63.359969][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.367637][ T4196] Cannot create hsr debugfs directory [ 63.507447][ T2304] Bluetooth: hci3: command 0x0409 tx timeout [ 63.514540][ T1109] Bluetooth: hci2: command 0x0409 tx timeout [ 63.519266][ T2304] Bluetooth: hci0: command 0x0409 tx timeout [ 63.520677][ T1109] Bluetooth: hci1: command 0x0409 tx timeout [ 63.585245][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 63.688798][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.700142][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.713824][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.725488][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.768637][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.784162][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.795339][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.804034][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.831194][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.852945][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.861728][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.880648][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.963949][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.979830][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.991820][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.010429][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.018716][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.027134][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.037630][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.062648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.071846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.080903][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.088127][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.097146][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.128196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.136671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.145916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.154489][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.161578][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.169513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.178478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.219550][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.229527][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.241952][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.252309][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.262214][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.272820][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.300559][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.310143][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.320184][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.329165][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.340067][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.349171][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.360311][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.369305][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.386586][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.395896][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.404261][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.412573][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.423467][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.435981][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.443771][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.459603][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.473203][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.481793][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.488889][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.498451][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.507677][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.516703][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.523887][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.531691][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.556052][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.569796][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.580992][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.611167][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.623799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.641718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.651822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.666725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.678174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.687872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.697647][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.704756][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.721425][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.734083][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.757570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.771199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.780328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.796005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.806290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.815416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.823603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.832841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.842520][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.849628][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.862001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.870895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.890491][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.906584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.915245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.923065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.931512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.939801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.953742][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.974332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.985155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.016097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.025012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.033658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.043689][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.050799][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.060182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.069212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.078054][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.085177][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.093413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.102042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.110887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.119880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.128645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.137456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.146145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.154035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.170682][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.181384][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.200128][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.210735][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.238591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.247737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.256601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.265492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.273817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.281761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.290359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.298885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.307448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.316056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.324354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.333048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.342006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.351007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.360100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.368416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.397121][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.435316][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.443568][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.466698][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.474737][ T4189] device veth0_vlan entered promiscuous mode [ 65.489417][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.498049][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.520849][ T4189] device veth1_vlan entered promiscuous mode [ 65.538911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.555644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.564861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.577566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.586314][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 65.604531][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 65.610626][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 65.611180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.624228][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 65.637995][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.665150][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 65.666644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.679734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.687498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.699264][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.724283][ T4186] device veth0_vlan entered promiscuous mode [ 65.733207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.742438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.752296][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.759430][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.769486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.778398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.786908][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.793946][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.801860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.810375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.817930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.826392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.834741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.842653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.850895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.862654][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.878856][ T4186] device veth1_vlan entered promiscuous mode [ 65.900198][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.912713][ T4189] device veth0_macvtap entered promiscuous mode [ 65.924101][ T4189] device veth1_macvtap entered promiscuous mode [ 65.932243][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.941440][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.950102][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.959745][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.968694][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.994164][ T4186] device veth0_macvtap entered promiscuous mode [ 66.009981][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.019567][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.028513][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.038608][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.047280][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.055715][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.064075][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.074107][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.083379][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.091987][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.110473][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.118966][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.132498][ T4186] device veth1_macvtap entered promiscuous mode [ 66.147173][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.163460][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.172029][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.180481][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.188655][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.197543][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.206138][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.215293][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.242059][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.252936][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.264161][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.275079][ T4193] device veth0_vlan entered promiscuous mode [ 66.283535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.292709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.302221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.311555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.330750][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.341878][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.352657][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.361445][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.372198][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.384285][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.400024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.409158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.417931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.427745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.437490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.447934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.461443][ T4193] device veth1_vlan entered promiscuous mode [ 66.472787][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.482075][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.491627][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.500580][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.513893][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.525166][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.533987][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.543030][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.555189][ T4196] device veth0_vlan entered promiscuous mode [ 66.561934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.571784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.580338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.589745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.598761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.653227][ T4196] device veth1_vlan entered promiscuous mode [ 66.709988][ T4193] device veth0_macvtap entered promiscuous mode [ 66.743998][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.757486][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.771187][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.781917][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.791774][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.810419][ T4196] device veth0_macvtap entered promiscuous mode [ 66.826392][ T4193] device veth1_macvtap entered promiscuous mode [ 66.833958][ T4196] device veth1_macvtap entered promiscuous mode [ 66.858727][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.869010][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.887685][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.902013][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.914128][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.923133][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.931698][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.939323][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.981293][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.006423][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.020269][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.038416][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.049664][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.061461][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.070847][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.081640][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.092668][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.103853][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.115539][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.127868][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.139451][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.159940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.160258][ T1535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.175877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.182182][ T1535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.198890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.207883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.217037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.234677][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.246345][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.256384][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.267439][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.278817][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.286890][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.299365][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.309510][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.320171][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.330293][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.340995][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.352211][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.373889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.384206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.393135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.402427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.424288][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.433960][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.445153][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.453867][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.473489][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.482777][ T1535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.486239][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.492694][ T1535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.509177][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.519028][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.528028][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.536893][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.551283][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.559919][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.571608][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.580307][ T1535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.602922][ T4194] device veth0_vlan entered promiscuous mode [ 67.636162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.650187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.665258][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 67.673544][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 67.679731][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 67.685890][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 67.702440][ T4194] device veth1_vlan entered promiscuous mode [ 67.708516][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.718874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.726306][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.733411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.742514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.751266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.756437][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 67.760977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.865704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.874380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.897212][ T4194] device veth0_macvtap entered promiscuous mode [ 67.913614][ T4194] device veth1_macvtap entered promiscuous mode [ 67.933055][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.979397][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.166129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.227705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.404394][ T4273] loop0: detected capacity change from 0 to 512 [ 68.559991][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.571170][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.581765][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.592404][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.625108][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.637518][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.647606][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.652151][ T4273] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1: invalid indirect mapped block 10 (level 1) [ 68.672695][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.713893][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.724182][ T4273] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1: invalid indirect mapped block 8 (level 1) [ 68.746485][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.759212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.774809][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.783111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.827173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.837167][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.857306][ T4273] EXT4-fs (loop0): 1 truncate cleaned up [ 68.862971][ T4273] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.904631][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.977118][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.994508][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.071610][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.084651][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.094936][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.106410][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.122971][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.133907][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.146004][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.156213][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.165616][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.174148][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.193884][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.203222][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.204723][ T4276] program syz.1.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.212156][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.221200][ T4276] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 69.229787][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.247456][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.256334][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.265277][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.274125][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.282867][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.291753][ T4274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.306355][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.315373][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.324075][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.333169][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.415493][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.423458][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.580503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.727672][ T4288] loop1: detected capacity change from 0 to 1024 [ 70.608458][ T4288] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 70.693007][ T1109] Bluetooth: hci1: command 0x0419 tx timeout [ 71.280284][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.290806][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.470814][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 71.477502][ T1535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.488984][ T1535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.499991][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.507556][ T1109] Bluetooth: hci2: command 0x0419 tx timeout [ 71.515261][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 71.521418][ T1109] Bluetooth: hci4: command 0x0419 tx timeout [ 71.616337][ T1218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.631131][ T1218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.674404][ T4282] loop3: detected capacity change from 0 to 4096 [ 71.697944][ T4296] Zero length message leads to an empty skb [ 71.717648][ T4296] lo speed is unknown, defaulting to 1000 [ 71.724702][ T4296] lo speed is unknown, defaulting to 1000 [ 71.736529][ T4296] lo speed is unknown, defaulting to 1000 [ 71.763414][ T4296] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.792558][ T4296] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 71.855824][ T4296] lo speed is unknown, defaulting to 1000 [ 71.868036][ T4296] lo speed is unknown, defaulting to 1000 [ 71.878997][ T4296] lo speed is unknown, defaulting to 1000 [ 71.889608][ T4296] lo speed is unknown, defaulting to 1000 [ 71.899599][ T4296] lo speed is unknown, defaulting to 1000 [ 72.152366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.875331][ T4302] process 'syz.1.9' launched './file2' with NULL argv: empty string added [ 73.434501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 73.444481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 73.454474][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #188!!! [ 73.464469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #188!!! [ 73.474472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.137776][ T4305] loop1: detected capacity change from 0 to 64 [ 74.351669][ T4313] tmpfs: Unknown parameter 'usrquota' [ 75.354172][ T4310] ftl_cs: FTL header not found. [ 75.722096][ T4327] attempt to access beyond end of device [ 75.722096][ T4327] loop1: rw=1048577, want=162, limit=64 [ 75.999405][ T4327] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 76.274880][ T4327] attempt to access beyond end of device [ 76.274880][ T4327] loop1: rw=1048577, want=163, limit=64 [ 76.298496][ T4327] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 76.307819][ T4327] attempt to access beyond end of device [ 76.307819][ T4327] loop1: rw=1048577, want=164, limit=64 [ 76.319857][ T4327] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 76.328469][ T4327] attempt to access beyond end of device [ 76.328469][ T4327] loop1: rw=1048577, want=168, limit=64 [ 76.339772][ T4327] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 76.348829][ T4327] attempt to access beyond end of device [ 76.348829][ T4327] loop1: rw=1048577, want=170, limit=64 [ 76.361353][ T4327] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 76.370235][ T4327] attempt to access beyond end of device [ 76.370235][ T4327] loop1: rw=1048577, want=172, limit=64 [ 76.381597][ T4327] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 76.391486][ T4327] attempt to access beyond end of device [ 76.391486][ T4327] loop1: rw=1048577, want=173, limit=64 [ 76.399112][ T4310] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 76.402891][ T4327] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 76.419525][ T4327] attempt to access beyond end of device [ 76.419525][ T4327] loop1: rw=1048577, want=174, limit=64 [ 76.430791][ T4327] Buffer I/O error on dev loop1, logical block 173, lost async page write [ 76.439664][ T4327] attempt to access beyond end of device [ 76.439664][ T4327] loop1: rw=1048577, want=175, limit=64 [ 76.451115][ T4327] Buffer I/O error on dev loop1, logical block 174, lost async page write [ 76.459895][ T4327] attempt to access beyond end of device [ 76.459895][ T4327] loop1: rw=1048577, want=176, limit=64 [ 76.472824][ T4327] Buffer I/O error on dev loop1, logical block 175, lost async page write [ 76.715630][ T4333] loop3: detected capacity change from 0 to 32768 [ 76.744633][ T4254] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.759948][ T4333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.17 (4333) [ 77.964450][ C0] sched: RT throttling activated [ 77.989294][ T4333] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 77.998762][ T4333] BTRFS info (device loop3): force zlib compression, level 3 [ 78.006485][ T4333] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 78.016049][ T4333] BTRFS info (device loop3): use lzo compression, level 0 [ 78.023306][ T4333] BTRFS info (device loop3): turning on flush-on-commit [ 78.030296][ T4333] BTRFS info (device loop3): enabling auto defrag [ 78.037155][ T4333] BTRFS info (device loop3): max_inline at 4096 [ 78.043528][ T4333] BTRFS info (device loop3): using free space tree [ 78.050928][ T4333] BTRFS info (device loop3): has skinny extents [ 78.259669][ T4335] loop4: detected capacity change from 0 to 262144 [ 78.315325][ T4335] F2FS-fs (loop4): Invalid segment/section count (8388607 != 27 * 2) [ 78.323656][ T4335] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 78.335846][ T4335] F2FS-fs (loop4): invalid crc value [ 78.384945][ T4355] __nla_validate_parse: 10 callbacks suppressed [ 78.384957][ T4355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 78.410529][ T4335] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.464209][ T4335] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 78.471795][ T4335] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 78.626409][ T4254] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 78.745093][ T4333] BTRFS info (device loop3): enabling ssd optimizations [ 78.792334][ T4254] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 78.985969][ T4254] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.140933][ T4254] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 79.299439][ T4254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.884454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 80.814480][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.104455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.134455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.174454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.509790][ T1106] cfg80211: failed to load regulatory.db [ 82.234718][ T4254] usb 3-1: can't set config #1, error -71 [ 82.250864][ T4254] usb 3-1: USB disconnect, device number 2 [ 82.405413][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.793128][ T4378] loop2: detected capacity change from 0 to 8192 [ 83.491446][ T4378] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.287738][ T4378] capability: warning: `syz.2.26' uses 32-bit capabilities (legacy support in use) [ 87.183252][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.190932][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.197238][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.204960][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.534754][ T4393] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.726073][ T4419] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 89.146962][ T4393] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 89.177650][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.188398][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.195903][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.274686][ T4393] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 89.475844][ T4393] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 89.500059][ T4393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.528650][ T4393] usb 1-1: Product: syz [ 89.540164][ T4393] usb 1-1: Manufacturer: syz [ 89.702413][ T4393] usb 1-1: SerialNumber: syz [ 89.747820][ T4393] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 90.508138][ T4393] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 90.567405][ T4393] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 90.687064][ T4437] loop4: detected capacity change from 0 to 4096 [ 90.725110][ T4437] ======================================================= [ 90.725110][ T4437] WARNING: The mand mount option has been deprecated and [ 90.725110][ T4437] and is ignored by this kernel. Remove the mand [ 90.725110][ T4437] option from the mount to silence this warning. [ 90.725110][ T4437] ======================================================= [ 90.868008][ T4437] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 90.884630][ T4393] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.947378][ T4437] ntfs3: loop4: ino=5, "/" directory corrupted [ 91.160248][ T4431] loop3: detected capacity change from 0 to 32768 [ 91.178703][ T4393] usb 3-1: Using ep0 maxpacket: 8 [ 91.200734][ T4444] syz.4.45 uses obsolete (PF_INET,SOCK_PACKET) [ 91.280071][ T4431] XFS (loop3): Mounting V5 Filesystem [ 91.314792][ T4393] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.344657][ T4393] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 91.359846][ T4393] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.391556][ T4431] XFS (loop3): Ending clean mount [ 91.460094][ T4254] usb 1-1: USB disconnect, device number 2 [ 91.539139][ T4193] XFS (loop3): Unmounting Filesystem [ 91.545334][ T4393] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 91.545473][ T4254] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 91.564719][ T4393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 91.601022][ T4393] usb 3-1: Product: syz [ 91.608974][ T4393] usb 3-1: Manufacturer: syz [ 91.626272][ T4393] usb 3-1: SerialNumber: syz [ 91.765435][ T4393] usb 3-1: config 0 descriptor?? [ 91.923781][ T4393] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 91.994400][ T4393] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 92.059313][ T4393] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 92.454924][ T4254] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 92.487444][ T4254] ti_usb_3410_5052 1-1:2.0: device disconnected [ 92.533576][ T4454] loop4: detected capacity change from 0 to 32768 [ 92.767206][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.775740][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.783256][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.070479][ T4467] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.260167][ T4466] loop3: detected capacity change from 0 to 4096 [ 93.911185][ T4391] usb 3-1: USB disconnect, device number 3 [ 95.191864][ T4481] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.936253][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.036788][ T4496] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 96.056380][ T4496] Remounting filesystem read-only [ 97.342287][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.515383][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.532989][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.261657][ T4502] loop1: detected capacity change from 0 to 512 [ 98.403756][ T4502] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.56: invalid indirect mapped block 10 (level 1) [ 98.424240][ T4502] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.56: invalid indirect mapped block 8 (level 1) [ 98.494501][ T4502] EXT4-fs (loop1): 1 truncate cleaned up [ 98.682311][ T4509] loop3: detected capacity change from 0 to 4096 [ 99.548884][ T4502] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.699582][ T4509] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 100.139999][ T4509] ntfs3: loop3: ino=5, "/" directory corrupted [ 101.687182][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.718681][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.727100][ T4537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'. [ 101.734860][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.133897][ T4254] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.634786][ T4254] usb 5-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 104.746202][ T4254] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.784799][ T4254] usb 5-1: string descriptor 0 read error: -71 [ 104.792540][ T4254] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.808795][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.824551][ T4254] usb 5-1: config 0 descriptor?? [ 104.864723][ T4254] usb 5-1: can't set config #0, error -71 [ 104.931170][ T4254] usb 5-1: USB disconnect, device number 2 [ 105.471579][ T4561] loop3: detected capacity change from 0 to 131072 [ 105.493732][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.503369][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.512041][ T4561] F2FS-fs (loop3): invalid crc value [ 105.520911][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.101944][ T4561] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.204103][ T4561] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 106.354751][ T4561] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 108.327930][ T4584] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.732905][ T4585] overlayfs: './file1' not a directory [ 109.742742][ T4602] loop4: detected capacity change from 0 to 32768 [ 109.868744][ T4602] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.84 (4602) [ 109.903271][ T4602] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 109.912259][ T4602] BTRFS info (device loop4): force zlib compression, level 3 [ 109.919800][ T4602] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 109.929077][ T4602] BTRFS info (device loop4): use lzo compression, level 0 [ 109.936331][ T4602] BTRFS info (device loop4): turning on flush-on-commit [ 109.943282][ T4602] BTRFS info (device loop4): enabling auto defrag [ 109.949849][ T4602] BTRFS info (device loop4): max_inline at 4096 [ 109.956191][ T4602] BTRFS info (device loop4): using free space tree [ 109.962707][ T4602] BTRFS info (device loop4): has skinny extents [ 110.131764][ T4602] BTRFS info (device loop4): enabling ssd optimizations [ 110.193388][ T25] audit: type=1800 audit(1787355135.768:2): pid=4602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.84" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 110.244518][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.634600][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 111.391131][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.401122][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 111.411014][ T21] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 111.420293][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.444772][ T4605] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.465766][ T21] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 111.642096][ T21] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 111.783924][ T4635] tmpfs: Unknown parameter 'usrquota' [ 112.013724][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.038631][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.048965][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.282372][ T4254] usb 1-1: USB disconnect, device number 3 [ 112.308897][ T4254] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 112.345970][ T4254] cyberjack 1-1:1.0: device disconnected [ 112.421877][ T4624] loop3: detected capacity change from 0 to 32768 [ 112.494349][ T4624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.91 (4624) [ 113.361409][ T4651] loop2: detected capacity change from 0 to 262144 [ 113.661599][ T4651] F2FS-fs (loop2): Invalid segment/section count (8388607 != 27 * 2) [ 113.669997][ T4651] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 113.693316][ T4651] F2FS-fs (loop2): invalid crc value [ 113.991470][ T4624] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 114.024214][ T4651] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.089070][ T4624] BTRFS info (device loop3): setting nodatasum [ 114.109413][ T4651] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 114.116641][ T4651] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 114.203773][ T4624] BTRFS info (device loop3): force zlib compression, level 3 [ 114.474763][ T4624] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 114.548521][ T25] audit: type=1800 audit(1787355140.128:3): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.94" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 114.652120][ T4624] BTRFS info (device loop3): use lzo compression, level 0 [ 114.908680][ T4624] BTRFS info (device loop3): turning on flush-on-commit [ 115.121255][ T4624] BTRFS info (device loop3): enabling auto defrag [ 115.141785][ T4624] BTRFS info (device loop3): max_inline at 4096 [ 115.465361][ T4624] BTRFS info (device loop3): using free space tree [ 115.682546][ T4624] BTRFS info (device loop3): has skinny extents [ 116.335137][ T4624] BTRFS error (device loop3): open_ctree failed: -12 [ 117.098508][ T4713] loop2: detected capacity change from 0 to 64 [ 117.313005][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.486322][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.571361][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.078086][ T4702] block2mtd: error: cannot open device /dev/loop0 [ 121.231240][ T4275] handle_bad_sector: 109 callbacks suppressed [ 121.231257][ T4275] attempt to access beyond end of device [ 121.231257][ T4275] loop2: rw=1048577, want=162, limit=64 [ 121.324079][ T4275] buffer_io_error: 94 callbacks suppressed [ 121.324094][ T4275] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 121.359808][ T4275] attempt to access beyond end of device [ 121.359808][ T4275] loop2: rw=1048577, want=163, limit=64 [ 122.793226][ T4275] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 122.807242][ T4275] attempt to access beyond end of device [ 122.807242][ T4275] loop2: rw=1048577, want=164, limit=64 [ 122.854053][ T4275] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 122.904919][ T4275] attempt to access beyond end of device [ 122.904919][ T4275] loop2: rw=1048577, want=168, limit=64 [ 123.002243][ T4275] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 123.024593][ T4275] attempt to access beyond end of device [ 123.024593][ T4275] loop2: rw=1048577, want=170, limit=64 [ 123.097613][ T4275] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 123.109226][ T4275] attempt to access beyond end of device [ 123.109226][ T4275] loop2: rw=1048577, want=172, limit=64 [ 123.122008][ T4275] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 123.145524][ T4275] attempt to access beyond end of device [ 123.145524][ T4275] loop2: rw=1048577, want=173, limit=64 [ 123.157710][ T4275] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 123.210448][ T4275] attempt to access beyond end of device [ 123.210448][ T4275] loop2: rw=1048577, want=174, limit=64 [ 123.537942][ T4275] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 123.875673][ T4275] attempt to access beyond end of device [ 123.875673][ T4275] loop2: rw=1048577, want=175, limit=64 [ 123.987417][ T4275] Buffer I/O error on dev loop2, logical block 174, lost async page write [ 124.009504][ T4275] attempt to access beyond end of device [ 124.009504][ T4275] loop2: rw=1048577, want=176, limit=64 [ 124.052989][ T4275] Buffer I/O error on dev loop2, logical block 175, lost async page write [ 125.215496][ T4764] siw: device registration error -23 [ 126.385973][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 126.395298][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 126.404413][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 126.413656][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 126.422757][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 126.431855][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 126.440862][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 126.449842][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 126.458902][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 126.467931][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 126.496953][ T4762] program syz.3.117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.535063][ T4762] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 126.593190][ T4778] loop4: detected capacity change from 0 to 512 [ 126.596236][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.617818][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.629790][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.659253][ T4778] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 126.778640][ T4775] loop2: detected capacity change from 0 to 4096 [ 126.831264][ T4775] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 128.181204][ T4794] loop1: detected capacity change from 0 to 1024 [ 128.738017][ T25] audit: type=1800 audit(1787355154.318:4): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 128.826596][ T25] audit: type=1800 audit(1787355154.318:5): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 129.180043][ T4804] loop3: detected capacity change from 0 to 4096 [ 129.422699][ T4804] EXT4-fs (loop3): Ignoring removed nobh option [ 129.970262][ T4804] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.993318][ T4804] EXT4-fs (loop3): Ignoring removed bh option [ 130.044281][ T4804] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 130.163447][ T4820] Set syz1 is full, maxelem 1021 reached [ 130.695012][ T4804] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 131.546350][ T4804] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 132.604149][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.704961][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.717947][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736018][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.839831][ T4855] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.224625][ T4390] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.294670][ T4390] usb 2-1: Using ep0 maxpacket: 8 [ 135.365807][ T4876] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 135.386253][ T4876] __nla_validate_parse: 30 callbacks suppressed [ 135.386269][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 135.414814][ T4390] usb 2-1: config 1 interface 0 altsetting 115 bulk endpoint 0x3 has invalid maxpacket 64 [ 135.438158][ T4390] usb 2-1: config 1 interface 0 altsetting 115 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.462645][ T4390] usb 2-1: config 1 interface 0 has no altsetting 0 [ 135.529398][ T4883] capability: warning: `syz.2.155' uses deprecated v2 capabilities in a way that may be insecure [ 135.547339][ T25] audit: type=1326 audit(1787355161.098:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba61ec0d9 code=0x7ffc0000 [ 135.624864][ T4390] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.670813][ T4390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.809583][ T25] audit: type=1326 audit(1787355161.108:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba61ec0d9 code=0x7ffc0000 [ 135.853096][ T25] audit: type=1326 audit(1787355161.108:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba61ec0d9 code=0x7ffc0000 [ 137.095660][ T4390] usb 2-1: Product: syz [ 137.114305][ T4390] usb 2-1: Manufacturer: syz [ 137.140702][ T4390] usb 2-1: SerialNumber: syz [ 137.216747][ T4390] usb 2-1: can't set config #1, error -71 [ 137.226922][ T25] audit: type=1326 audit(1787355161.108:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f3ba61ec0d9 code=0x7ffc0000 [ 137.403582][ T4390] usb 2-1: USB disconnect, device number 3 [ 137.416828][ T25] audit: type=1326 audit(1787355161.128:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba61ec0d9 code=0x7ffc0000 [ 137.444662][ T25] audit: type=1326 audit(1787355161.128:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3ba61ec0d9 code=0x7ffc0000 [ 137.469849][ T25] audit: type=1326 audit(1787355161.128:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3ba61ec0d9 code=0x7ffc0000 [ 137.682559][ T4897] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.668596][ T4390] kernel write not supported for file /failslab/ignore-gfp-wait (pid: 4390 comm: kworker/1:15) [ 140.012897][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.029644][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.037782][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.697797][ T4922] loop3: detected capacity change from 0 to 32768 [ 140.787815][ T4922] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 140.822369][ T4922] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 140.995700][ T4922] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 141.056974][ T4697] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 141.069053][ T4697] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 141.176093][ T4697] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 107ms [ 141.219043][ T4697] gfs2: fsid=syz:syz.0: jid=0: Done [ 141.944520][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.993887][ T4922] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 142.017071][ T4922] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 142.445330][ T21] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 142.494298][ T21] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 142.588021][ T21] usb 5-1: Product: syz [ 142.633414][ T21] usb 5-1: SerialNumber: syz [ 142.773235][ T21] usb 5-1: config 0 descriptor?? [ 143.095562][ T21] hso 5-1:0.0: Can't find BULK IN endpoint [ 143.328913][ T21] usb 5-1: USB disconnect, device number 3 [ 143.431776][ T4967] loop3: detected capacity change from 0 to 32768 [ 143.545097][ T4969] loop1: detected capacity change from 0 to 4096 [ 143.583164][ T4967] JBD2: Ignoring recovery information on journal [ 143.602155][ T4969] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 143.802530][ T4967] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.152278][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.166662][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.175317][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.506579][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 144.942498][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 146.471750][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.485665][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.495324][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.873222][ T5025] loop4: detected capacity change from 0 to 8 [ 148.072603][ T25] audit: type=1800 audit(1787355173.648:13): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="max_speed" dev="configfs" ino=34456 res=0 errno=0 [ 148.544997][ T4697] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 148.764633][ T4697] usb 3-1: device descriptor read/64, error -71 [ 149.044816][ T4697] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 149.166514][ T5043] loop1: detected capacity change from 0 to 1764 [ 149.394704][ T4697] usb 3-1: device descriptor read/64, error -71 [ 149.530309][ T4697] usb usb3-port1: attempt power cycle [ 149.944722][ T4697] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 150.065421][ T4697] usb 3-1: device descriptor read/8, error -71 [ 150.352369][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.367373][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.375986][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.444289][ T4697] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 150.454793][ T4254] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 150.464254][ T4254] Bluetooth: hci0: Injecting HCI hardware error event [ 150.473310][ T4187] Bluetooth: hci0: hardware error 0x00 [ 150.543744][ T4697] usb 3-1: device descriptor read/8, error -71 [ 150.603576][ T5058] futex_wake_op: syz.4.212 tries to shift op by 144; fix this program [ 150.666478][ T4697] usb usb3-port1: unable to enumerate USB device [ 150.821678][ T5078] loop4: detected capacity change from 0 to 128 [ 151.181712][ T5078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 151.255758][ T5078] System zones: 1-3, 19-19, 35-36 [ 151.489536][ T5078] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 151.523262][ T5078] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.356269][ T5102] loop1: detected capacity change from 0 to 512 [ 152.483483][ T5102] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 152.540407][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.554991][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.563257][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.624409][ T5102] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.839829][ T5102] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 153.902294][ T5094] ================================================================== [ 153.910733][ T5094] BUG: KASAN: use-after-free in release_card_device+0x1e1/0x1f0 [ 153.918406][ T5094] Read of size 1 at addr ffff88802b5acdf9 by task syz.0.223/5094 [ 153.926229][ T5094] [ 153.928574][ T5094] CPU: 0 PID: 5094 Comm: syz.0.223 Not tainted syzkaller #0 [ 153.935864][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.946127][ T5094] Call Trace: [ 153.949451][ T5094] [ 153.952558][ T5094] dump_stack_lvl+0x188/0x250 [ 153.957254][ T5094] ? show_regs_print_info+0x20/0x20 [ 153.962591][ T5094] ? load_image+0x410/0x410 [ 153.967107][ T5094] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 153.972582][ T5094] print_address_description+0x60/0x2d0 [ 153.978341][ T5094] ? release_card_device+0x1e1/0x1f0 [ 153.983823][ T5094] kasan_report+0xdf/0x130 [ 153.988249][ T5094] ? release_card_device+0x1e1/0x1f0 [ 153.993609][ T5094] release_card_device+0x1e1/0x1f0 [ 153.998737][ T5094] ? snd_power_wait+0x80/0x80 [ 154.003418][ T5094] device_release+0x92/0x1c0 [ 154.008031][ T5094] kobject_put+0x217/0x450 [ 154.012658][ T5094] snd_card_file_remove+0x32d/0x380 [ 154.017866][ T5094] snd_pcm_release+0x12b/0x150 [ 154.022644][ T5094] ? snd_disconnect_mmap+0x10/0x10 [ 154.027790][ T5094] __fput+0x212/0x8c0 [ 154.031827][ T5094] task_work_run+0x125/0x1a0 [ 154.036430][ T5094] exit_to_user_mode_loop+0x10f/0x130 [ 154.042071][ T5094] exit_to_user_mode_prepare+0xee/0x180 [ 154.047630][ T5094] syscall_exit_to_user_mode+0x16/0x40 [ 154.053097][ T5094] do_syscall_64+0x58/0xa0 [ 154.057515][ T5094] ? clear_bhb_loop+0x30/0x80 [ 154.062210][ T5094] ? clear_bhb_loop+0x30/0x80 [ 154.066894][ T5094] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.072812][ T5094] RIP: 0033:0x7fe1963820d9 [ 154.077246][ T5094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.096970][ T5094] RSP: 002b:00007ffefb86e7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 154.105756][ T5094] RAX: 0000000000000000 RBX: 00007fe19660bda0 RCX: 00007fe1963820d9 [ 154.113741][ T5094] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 154.121720][ T5094] RBP: 00007fe19660bda0 R08: 0000000000000006 R09: 0000000000000000 [ 154.129806][ T5094] R10: 00007fe19660bcb0 R11: 0000000000000246 R12: 00000000000255da [ 154.138244][ T5094] R13: 00007fe196609fac R14: 00000000000252ea R15: 00007ffefb86e8d0 [ 154.146226][ T5094] [ 154.149245][ T5094] [ 154.151554][ T5094] The buggy address belongs to the page: [ 154.157311][ T5094] page:ffffea0000ad6b00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b5ac [ 154.167732][ T5094] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 154.174853][ T5094] raw: 00fff00000000000 ffffea00017f4708 ffff8880b90409f0 0000000000000000 [ 154.183933][ T5094] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 154.192701][ T5094] page dumped because: kasan: bad access detected [ 154.199224][ T5094] page_owner tracks the page as freed [ 154.204835][ T5094] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), pid 1, ts 16250391189, free_ts 153901124559 [ 154.220297][ T5094] get_page_from_freelist+0x24f6/0x2670 [ 154.225838][ T5094] __alloc_pages+0x1ee/0x480 [ 154.230413][ T5094] kmalloc_large_node+0x7d/0x1a0 [ 154.235333][ T5094] __kmalloc_node_track_caller+0x219/0x3a0 [ 154.241138][ T5094] __devres_alloc_node+0x49/0x110 [ 154.246160][ T5094] snd_devm_card_new+0x74/0x150 [ 154.250992][ T5094] loopback_probe+0x14d/0x1a20 [ 154.255839][ T5094] platform_probe+0x137/0x1c0 [ 154.259750][ T5102] EXT4-fs (loop1): 1 truncate cleaned up [ 154.260523][ T5094] really_probe+0x276/0xc70 [ 154.270696][ T5094] __driver_probe_device+0x1f5/0x390 [ 154.275997][ T5094] driver_probe_device+0x4f/0x420 [ 154.281077][ T5094] __device_attach_driver+0x2b0/0x500 [ 154.286536][ T5094] bus_for_each_drv+0x184/0x210 [ 154.291366][ T5094] __device_attach+0x2a7/0x480 [ 154.296109][ T5094] bus_probe_device+0xba/0x1d0 [ 154.300849][ T5094] device_add+0xbcf/0x1050 [ 154.305248][ T5094] page last free stack trace: [ 154.309912][ T5094] free_unref_page_prepare+0x637/0x6c0 [ 154.315371][ T5094] free_unref_page+0x8f/0x2a0 [ 154.320042][ T5094] free_nonslab_page+0xde/0x150 [ 154.324893][ T5094] devres_release_all+0x1a9/0x230 [ 154.329899][ T5094] device_release_driver_internal+0x496/0x710 [ 154.336022][ T5094] unbind_store+0x2e2/0x300 [ 154.340524][ T5094] kernfs_fop_write_iter+0x3a8/0x500 [ 154.345852][ T5094] vfs_write+0x748/0xd70 [ 154.350079][ T5094] ksys_write+0x153/0x260 [ 154.354655][ T5094] do_syscall_64+0x4c/0xa0 [ 154.359361][ T5094] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.365250][ T5094] [ 154.367572][ T5094] Memory state around the buggy address: [ 154.373450][ T5094] ffff88802b5acc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 154.381493][ T5094] ffff88802b5acd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 154.389558][ T5094] >ffff88802b5acd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 154.397710][ T5094] ^ [ 154.405682][ T5094] ffff88802b5ace00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 154.413728][ T5094] ffff88802b5ace80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 154.421892][ T5094] ================================================================== [ 154.429951][ T5094] Disabling lock debugging due to kernel taint [ 154.464642][ T5094] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.472065][ T5094] CPU: 1 PID: 5094 Comm: syz.0.223 Tainted: G B syzkaller #0 [ 154.480746][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.490971][ T5094] Call Trace: [ 154.494252][ T5094] [ 154.497355][ T5094] dump_stack_lvl+0x188/0x250 [ 154.502421][ T5094] ? show_regs_print_info+0x20/0x20 [ 154.507627][ T5094] ? load_image+0x410/0x410 [ 154.512139][ T5094] panic+0x2f8/0x850 [ 154.516124][ T5094] ? bpf_jit_dump+0xd0/0xd0 [ 154.520631][ T5094] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 154.526802][ T5094] ? _raw_spin_unlock+0x40/0x40 [ 154.531657][ T5094] ? release_card_device+0x1e1/0x1f0 [ 154.536946][ T5094] check_panic_on_warn+0x80/0xa0 [ 154.541901][ T5094] ? release_card_device+0x1e1/0x1f0 [ 154.547186][ T5094] end_report+0x6d/0xf0 [ 154.551348][ T5094] kasan_report+0x102/0x130 [ 154.555857][ T5094] ? release_card_device+0x1e1/0x1f0 [ 154.561242][ T5094] release_card_device+0x1e1/0x1f0 [ 154.566441][ T5094] ? snd_power_wait+0x80/0x80 [ 154.571122][ T5094] device_release+0x92/0x1c0 [ 154.575728][ T5094] kobject_put+0x217/0x450 [ 154.580190][ T5094] snd_card_file_remove+0x32d/0x380 [ 154.585453][ T5094] snd_pcm_release+0x12b/0x150 [ 154.590312][ T5094] ? snd_disconnect_mmap+0x10/0x10 [ 154.595432][ T5094] __fput+0x212/0x8c0 [ 154.599422][ T5094] task_work_run+0x125/0x1a0 [ 154.604016][ T5094] exit_to_user_mode_loop+0x10f/0x130 [ 154.609390][ T5094] exit_to_user_mode_prepare+0xee/0x180 [ 154.614950][ T5094] syscall_exit_to_user_mode+0x16/0x40 [ 154.620422][ T5094] do_syscall_64+0x58/0xa0 [ 154.624930][ T5094] ? clear_bhb_loop+0x30/0x80 [ 154.629614][ T5094] ? clear_bhb_loop+0x30/0x80 [ 154.634305][ T5094] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.640211][ T5094] RIP: 0033:0x7fe1963820d9 [ 154.644631][ T5094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.650216][ T5102] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 154.664339][ T5094] RSP: 002b:00007ffefb86e7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 154.664366][ T5094] RAX: 0000000000000000 RBX: 00007fe19660bda0 RCX: 00007fe1963820d9 [ 154.664376][ T5094] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 154.664385][ T5094] RBP: 00007fe19660bda0 R08: 0000000000000006 R09: 0000000000000000 [ 154.664395][ T5094] R10: 00007fe19660bcb0 R11: 0000000000000246 R12: 00000000000255da [ 154.664405][ T5094] R13: 00007fe196609fac R14: 00000000000252ea R15: 00007ffefb86e8d0 [ 154.664422][ T5094] [ 154.664703][ T5094] Kernel Offset: disabled [ 154.739924][ T5094] Rebooting in 86400 seconds..