last executing test programs: 14.162989557s ago: executing program 2 (id=221): socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x1, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1, @le_set_ext_scan_params={{0x2041, 0x79}, {0x2, 0x9, 0x15, "ad88de6023fa62ba12c32ccc199a1b940cde532acc074fd2d02c3626701c6da08bcaa20922d2339636de8366adb7a96f34d0bca22ef4373b7a3034a80767d1f5bbb53bf9c510b15a532be572ae2c3835fbe6e1531338ca23f2450b0407419119e3503ae75a48623817209df0aa31cdde266035b5bb64"}}}, 0x7d) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 13.752736447s ago: executing program 1 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 13.19592469s ago: executing program 0 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ffe4000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, 0x0, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b8000000190001000000000000000100e0000002000000000000000000000000000000000000000000000000000000000000fffc000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800020000000000100000000000000002000000010000000000000000000000060000000000000075b4ffffffffffffffffffffffffffff0400000000000000030000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0xfffffffffffffe87, 0x0, 0x0, 0x0, 0x15, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x800000000000000, 0x200000000000001}}}, 0xb8}}, 0x2c000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x121083, 0x0) close(r6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000, 0x1}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.496922237s ago: executing program 2 (id=226): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) 12.480883957s ago: executing program 1 (id=227): mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x400202, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7) 12.314893111s ago: executing program 1 (id=228): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xabe0}}, './file0\x00'}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000200)={0x80}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$full(0xffffffffffffff9c, 0x0, 0x400100, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000001050005000a000000050001000700000005000400000000000900020073797a3f0000000015000300686173683a69702c706f72742c6e6574000000001400078008000840000000100800124000000007"], 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = dup(r6) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) sendfile(r7, r8, 0x0, 0x80001d00c0d1) 12.260903372s ago: executing program 4 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0x1, 0xffff, 0x20, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2004}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x2, 0x4002) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaad01762aaaaaaaaaaaaaaaaaaaa330800461f002000640000010290780a010101ac1e01010183038917089078ffffffff"], 0x0) connect$pppl2tp(r7, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.092265366s ago: executing program 0 (id=230): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r0, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{0x0}, {&(0x7f0000004480)="5e72d8", 0x3}], 0x2}}], 0x1, 0x4000) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, &(0x7f0000000180)={0xa}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @loopback, 0xfff}, 0x1c) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'vlan1\x00'}}, 0x1e) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000100001040000", @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc142e00004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000480)={0x0, 0x2, 0x2, 0x2, &(0x7f0000000440)=[{0x9, 0xb, 0x9, 0x9}, {0x8, 0x101, 0x700, 0x6}]}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x10, 0x8000000, 0x0}) 10.993062462s ago: executing program 1 (id=232): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='ext2\x00', 0x294000, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x0, 0x3, 0xd, 0x3}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000300000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xff, 0xffff, 0x0, 0x693fffd, 0xa0, 0x9, 0xfe}, &(0x7f0000000300)=0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000180)={r6, 0xfffffec1}, &(0x7f00000001c0)=0x8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) 10.726359708s ago: executing program 4 (id=234): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x4, 0x62cf, 0x9}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000ffffffff0095854b1d721f79b104000000000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 8.598020548s ago: executing program 2 (id=235): syz_usb_connect(0x2, 0x2f, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0xfb, 0xd2, 0xb3, 0x40, 0xcaa, 0x3001, 0x3ec2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0xa0, 0x13, 0x80, 0x5, "", [{{0x9, 0x4, 0xbb, 0x8, 0x1, 0xef, 0xfa, 0x53, 0x1, [], [{{0x9, 0x5, 0x1, 0x10, 0x20, 0x81, 0x3, 0x8, [@generic={0x2, 0x5}]}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 8.453269622s ago: executing program 3 (id=236): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x344f, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0xc12, &(0x7f0000000740)={[{@check_relaxed}, {@session={'session', 0x3d, 0x13}}, {@unhide}, {@cruft}, {@check_strict}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@hide}, {@unhide}, {}, {@hide}, {@session={'session', 0x3d, 0x5d}}]}, 0x4, 0xa09, &(0x7f0000003280)="$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") 7.382291977s ago: executing program 0 (id=237): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) 7.324747508s ago: executing program 3 (id=238): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000"], 0x0}, 0x94) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) chroot(0x0) 6.548799286s ago: executing program 4 (id=239): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r0, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{0x0}, {&(0x7f0000004480)="5e72d8", 0x3}], 0x2}}], 0x1, 0x4000) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, &(0x7f0000000180)={0xa}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'vlan1\x00'}}, 0x1e) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000100001040000", @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc142e00004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000480)={0x0, 0x2, 0x2, 0x2, &(0x7f0000000440)=[{0x9, 0xb, 0x9, 0x9}, {0x8, 0x101, 0x700, 0x6}]}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x10, 0x8000000, 0x0}) 6.482460817s ago: executing program 1 (id=240): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1d}, 0x1, 0x0, 0x0, 0x618b37b527276fec}, 0x20004000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 6.433005369s ago: executing program 0 (id=241): syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x808c10, &(0x7f0000000000)=ANY=[], 0x3, 0x1c1, &(0x7f0000000440)="$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") r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x2, @pix={0xfffff26d, 0x40000000, 0x42303159, 0x5, 0x10, 0xf21, 0xb, 0x8000, 0x0, 0x6, 0x2, 0x7}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x9, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x7fff, 0xc000, 0x1, 0x0, 0x0, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xf5}}], 0x48}, 0x0) 4.890686025s ago: executing program 0 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42141, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.116821893s ago: executing program 2 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = fanotify_init(0x8, 0x80000) fanotify_mark(r0, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) truncate(0x0, 0x7f0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r4, 0x3) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x4, 0x62cf, 0x9}) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000ffffffff0095854b1d721f79b104000000000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.620962258s ago: executing program 2 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0x1, 0xffff, 0x20, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2004}) 2.54350672s ago: executing program 3 (id=245): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xabe0}}, './file0\x00'}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000200)={0x80}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$full(0xffffffffffffff9c, 0x0, 0x400100, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000001050005000a000000050001000700000005000400000000000900020073797a3f0000000015000300686173683a69702c706f72742c6e6574000000001400078008000840000000100800124000000007"], 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = dup(r6) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) sendfile(r7, r8, 0x0, 0x80001d00c0d1) 2.431897412s ago: executing program 1 (id=246): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x2, 0x1, 0x5, '\x00\x00'}, @local=@item_012={0x1, 0x2, 0x7, '9'}, @global=@item_4={0x3, 0x1, 0x7, "44b17561"}, @main=@item_4={0x3, 0x0, 0x9, "4070f43f"}]}}, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000050) 2.334666425s ago: executing program 2 (id=247): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 2.14977093s ago: executing program 4 (id=248): socket$netlink(0x10, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) shutdown(0xffffffffffffffff, 0x0) 2.148978279s ago: executing program 0 (id=249): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x4, 0x62cf, 0x9}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000ffffffff0095854b1d721f79b104000000000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.231630101s ago: executing program 4 (id=250): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) r1 = io_uring_setup(0x344f, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0) 1.231133121s ago: executing program 3 (id=251): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) 116.228647ms ago: executing program 3 (id=252): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @empty}}}}}}, 0x0) 756.249µs ago: executing program 4 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 3 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x2000000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) rmdir(&(0x7f0000000800)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 60.999020][ T4174] cgroup: Unknown subsys name 'net' [ 61.126380][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.602661][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.945621][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 64.075317][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.082569][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.090892][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.108079][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.126732][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.134084][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.142509][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.182050][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 64.234563][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.248955][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.265267][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 64.300323][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 64.320776][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.327913][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.336175][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.368250][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.375607][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.384265][ T4187] device bridge_slave_1 entered promiscuous mode [ 64.394040][ T4188] team0: Port device team_slave_0 added [ 64.407104][ T4188] team0: Port device team_slave_1 added [ 64.478066][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.485230][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.511373][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.523482][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.530733][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.538530][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.547992][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.573969][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.581137][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.607161][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.618629][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.625872][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.634128][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.642900][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.652115][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.659182][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.667207][ T4190] device bridge_slave_0 entered promiscuous mode [ 64.699353][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.706889][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.715356][ T4190] device bridge_slave_1 entered promiscuous mode [ 64.729200][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.736446][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.744341][ T4189] device bridge_slave_0 entered promiscuous mode [ 64.783600][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.790896][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.798670][ T4189] device bridge_slave_1 entered promiscuous mode [ 64.808687][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.822320][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.829200][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.838688][ T4187] team0: Port device team_slave_0 added [ 64.858265][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.873116][ T4187] team0: Port device team_slave_1 added [ 64.888174][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.912999][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.930923][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.948762][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.989564][ T4190] team0: Port device team_slave_0 added [ 64.996050][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.003786][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.030116][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.044167][ T4193] team0: Port device team_slave_0 added [ 65.065033][ T4189] team0: Port device team_slave_0 added [ 65.076686][ T4190] team0: Port device team_slave_1 added [ 65.090742][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.097726][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.124180][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.137179][ T4193] team0: Port device team_slave_1 added [ 65.155461][ T4189] team0: Port device team_slave_1 added [ 65.193648][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.200752][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.226750][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.246423][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.253518][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.279520][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.304851][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.313180][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.339244][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.366957][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.374054][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.400039][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.412655][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.419633][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.445627][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.457492][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.464535][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.490569][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.505674][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.512613][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.519444][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.527825][ T4187] Cannot create hsr debugfs directory [ 65.594875][ T4190] device hsr_slave_0 entered promiscuous mode [ 65.601781][ T4190] device hsr_slave_1 entered promiscuous mode [ 65.608393][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.616221][ T4190] Cannot create hsr debugfs directory [ 65.679459][ T4189] device hsr_slave_0 entered promiscuous mode [ 65.686431][ T4189] device hsr_slave_1 entered promiscuous mode [ 65.693184][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.701192][ T4189] Cannot create hsr debugfs directory [ 65.710746][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 65.710769][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 65.711983][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 65.729044][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.729072][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 65.742345][ T4193] device hsr_slave_1 entered promiscuous mode [ 65.748881][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.756860][ T4193] Cannot create hsr debugfs directory [ 65.800043][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 65.999158][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.027893][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.049420][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.068723][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.085182][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.096405][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.107232][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.134328][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.191617][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.207008][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.224933][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.248827][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.315988][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.330377][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.352681][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.364009][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.374388][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.404443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.417229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.428008][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.450767][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.459676][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.473253][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.494404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.503539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.513876][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.521171][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.538578][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.560848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.568915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.578220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.587533][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.594665][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.603344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.612893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.630360][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.641557][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.667635][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.677722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.687196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.696813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.706444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.718114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.741581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.752525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.761208][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.768294][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.776927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.785201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.793943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.809552][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.834099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.845638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.854501][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.861607][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.870616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.879391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.888238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.897158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.906862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.915972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.924965][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.932096][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.941186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.950793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.966996][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.988141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.998092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.006785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.015863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.025425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.034040][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.041148][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.050121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.059422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.068419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.104172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.118626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.130325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.138951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.155740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.167524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.182591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.196503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.208131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.221619][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.236753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.252033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.264215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.276522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.288193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.301113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.333125][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.350223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.359339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.382654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.391617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.401837][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.432639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.450042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.459699][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.487200][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.506774][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.527330][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.541574][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.557958][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.565101][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.573880][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.583787][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.593437][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.600566][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.608587][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.618878][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.638185][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.653317][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.670938][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.681041][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.736883][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.748902][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.762749][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.779554][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.788839][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.803980][ T4176] Bluetooth: hci1: command 0x041b tx timeout [ 67.811522][ T4176] Bluetooth: hci0: command 0x041b tx timeout [ 67.817619][ T4176] Bluetooth: hci2: command 0x041b tx timeout [ 67.825066][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.833285][ T4176] Bluetooth: hci4: command 0x041b tx timeout [ 67.840404][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.852428][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.861176][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.868257][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.877836][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.883610][ T4176] Bluetooth: hci3: command 0x041b tx timeout [ 67.887916][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.900860][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.907950][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.915807][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.925293][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.934557][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.943636][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.953438][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.962265][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.972210][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.981269][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.989135][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.997534][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.031611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.051714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.061690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.072848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.082704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.092824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.100622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.117805][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.129465][ T4188] device veth0_vlan entered promiscuous mode [ 68.150684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.158871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.168544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.177674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.186460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.204386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.213696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.228297][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.244597][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.261056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.268953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.278661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.289234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.304910][ T4188] device veth1_vlan entered promiscuous mode [ 68.319568][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.349524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.358661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.384083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.441269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.450316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.466938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.503044][ T4187] device veth0_vlan entered promiscuous mode [ 68.528228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.538640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.547795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.556937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.566262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.574975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.586069][ T4188] device veth0_macvtap entered promiscuous mode [ 68.600940][ T4187] device veth1_vlan entered promiscuous mode [ 68.619302][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.626858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.635578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.647420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.656357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.672830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.686761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.695286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.709413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.721221][ T4188] device veth1_macvtap entered promiscuous mode [ 68.734241][ T4190] device veth0_vlan entered promiscuous mode [ 68.766463][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.781602][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.792509][ T4190] device veth1_vlan entered promiscuous mode [ 68.810151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.818266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.826545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.835894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.845850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.856409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.864971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.872841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.881996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.893874][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.904055][ T4187] device veth0_macvtap entered promiscuous mode [ 68.945746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.954605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.964378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.975348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.985181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.995729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.008831][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.020329][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.029068][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.046289][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.073351][ T4187] device veth1_macvtap entered promiscuous mode [ 69.126904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.136262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.145194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.155580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.168866][ T4190] device veth0_macvtap entered promiscuous mode [ 69.186503][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.198463][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.211250][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.220145][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.229295][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.244796][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.258686][ T4189] device veth0_vlan entered promiscuous mode [ 69.273241][ T4190] device veth1_macvtap entered promiscuous mode [ 69.290713][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.298744][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.308572][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.318160][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.327196][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.351060][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.366565][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.382300][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.394309][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.403080][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.412017][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.421776][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.434022][ T4193] device veth0_vlan entered promiscuous mode [ 69.441232][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.449663][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.458696][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.467643][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.478338][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.487353][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.515954][ T4189] device veth1_vlan entered promiscuous mode [ 69.547404][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.560740][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.571810][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.582560][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.594680][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.611306][ T4193] device veth1_vlan entered promiscuous mode [ 69.627486][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.638168][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.646784][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.655314][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.665299][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.677213][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.687944][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.698617][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.709299][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.721463][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.746151][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.754618][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.763082][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.775989][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.784801][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.795029][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.803996][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.813975][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.827050][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.835995][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.844993][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.853897][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.871595][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 69.881726][ T4189] device veth0_macvtap entered promiscuous mode [ 69.888809][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 69.908915][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 69.915371][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 69.946474][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.955333][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.964982][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.973558][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 69.976816][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.981232][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.003518][ T4193] device veth0_macvtap entered promiscuous mode [ 70.014364][ T4189] device veth1_macvtap entered promiscuous mode [ 70.026237][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.034839][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.044289][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.078639][ T4193] device veth1_macvtap entered promiscuous mode [ 70.122661][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.139075][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.161535][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.181610][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.192172][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.203660][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.213593][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.224606][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.234634][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.245131][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.257652][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.289115][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.308352][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.318638][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.336399][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.349213][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.362647][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.382229][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.394469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.407231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.417125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.426209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.448324][ T4263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.451932][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.465207][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.473185][ T4265] device gre0 entered promiscuous mode [ 70.491978][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.503408][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.514056][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.523972][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.540786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.615157][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.627578][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.703277][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.720064][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.730393][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.742912][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.753794][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.765416][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.775834][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.787023][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.798949][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.811183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.822258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.831489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.871579][ T4263] Zero length message leads to an empty skb [ 70.876237][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.919548][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.942674][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.964065][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.976233][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.281383][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.292808][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.343476][ T4274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.357250][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.441244][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.574136][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.901455][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.950969][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 71.959286][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 72.157240][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 73.134593][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 73.237823][ T4284] loop0: detected capacity change from 0 to 512 [ 74.753273][ T4284] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.7: inode has both inline data and extents flags [ 74.767936][ T4284] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.7: couldn't read orphan inode 15 (err -117) [ 74.780806][ T4284] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 77.037944][ T4176] Bluetooth: hci3: command 0x0419 tx timeout [ 77.101985][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.110922][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.143311][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.154615][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.164325][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.177256][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.199917][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.207818][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.293978][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.363131][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.417710][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.434860][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.480787][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.510713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.519040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.547435][ T4303] device syzkaller0 entered promiscuous mode [ 77.561192][ T4306] loop2: detected capacity change from 0 to 8 [ 77.561980][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.589490][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.627207][ T4306] squashfs image failed sanity check [ 77.644466][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.695390][ T4309] loop0: detected capacity change from 0 to 64 [ 77.713670][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.730798][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.923081][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.105924][ T4335] device syzkaller0 entered promiscuous mode [ 81.972205][ T4360] loop3: detected capacity change from 0 to 1024 [ 82.110426][ T4360] hfsplus: bad catalog entry used to create inode [ 82.130262][ T4360] hfsplus: failed to load root directory [ 82.370716][ T4371] loop2: detected capacity change from 0 to 8 [ 82.596780][ T4371] squashfs image failed sanity check [ 83.760020][ T4191] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.831356][ T4191] usb 4-1: Using ep0 maxpacket: 16 [ 85.490170][ T4191] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 85.700124][ T4191] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.745586][ T4401] loop1: detected capacity change from 0 to 512 [ 85.873040][ T4401] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.36: inode has both inline data and extents flags [ 85.889687][ T4401] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.36: couldn't read orphan inode 15 (err -117) [ 85.904337][ T4401] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 86.500797][ T4191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.508907][ T4191] usb 4-1: Product: syz [ 86.513305][ T4191] usb 4-1: Manufacturer: syz [ 86.517968][ T4191] usb 4-1: SerialNumber: syz [ 86.526745][ T4191] usb 4-1: config 0 descriptor?? [ 86.592383][ T1107] cfg80211: failed to load regulatory.db [ 86.599787][ T4191] usb 4-1: can't set config #0, error -71 [ 86.609218][ T4191] usb 4-1: USB disconnect, device number 2 [ 86.749824][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 87.369824][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 88.103422][ T4417] loop1: detected capacity change from 0 to 64 [ 88.309418][ T4417] attempt to access beyond end of device [ 88.309418][ T4417] loop1: rw=2049, want=164, limit=64 [ 88.339584][ T4421] loop2: detected capacity change from 0 to 8 [ 88.346336][ T4417] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 88.406891][ T4417] attempt to access beyond end of device [ 88.406891][ T4417] loop1: rw=2049, want=168, limit=64 [ 88.419123][ T4421] squashfs image failed sanity check [ 88.424578][ T4417] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 88.438447][ T4417] attempt to access beyond end of device [ 88.438447][ T4417] loop1: rw=2049, want=170, limit=64 [ 88.452366][ T4417] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 88.462290][ T4417] attempt to access beyond end of device [ 88.462290][ T4417] loop1: rw=2049, want=172, limit=64 [ 88.520003][ T4417] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 88.544636][ T4417] attempt to access beyond end of device [ 88.544636][ T4417] loop1: rw=2049, want=173, limit=64 [ 88.693896][ T4417] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 88.702592][ T4417] attempt to access beyond end of device [ 88.702592][ T4417] loop1: rw=2049, want=174, limit=64 [ 88.713860][ T4417] Buffer I/O error on dev loop1, logical block 173, lost async page write [ 88.722478][ T4417] attempt to access beyond end of device [ 88.722478][ T4417] loop1: rw=2049, want=175, limit=64 [ 88.733329][ T4417] Buffer I/O error on dev loop1, logical block 174, lost async page write [ 88.745232][ T4417] attempt to access beyond end of device [ 88.745232][ T4417] loop1: rw=2049, want=176, limit=64 [ 88.756197][ T4417] Buffer I/O error on dev loop1, logical block 175, lost async page write [ 88.771368][ T4417] attempt to access beyond end of device [ 88.771368][ T4417] loop1: rw=2049, want=177, limit=64 [ 88.817346][ T4417] Buffer I/O error on dev loop1, logical block 176, lost async page write [ 88.846910][ T4417] attempt to access beyond end of device [ 88.846910][ T4417] loop1: rw=2049, want=178, limit=64 [ 88.901425][ T4417] Buffer I/O error on dev loop1, logical block 177, lost async page write [ 91.403396][ T4460] loop2: detected capacity change from 0 to 512 [ 91.552847][ T4460] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.49: inode has both inline data and extents flags [ 91.567724][ T4460] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.49: couldn't read orphan inode 15 (err -117) [ 91.582214][ T4460] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 92.559821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.579821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.609823][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.669820][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 93.029822][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 93.119820][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 93.169820][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 93.459820][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 94.480308][ T4472] loop2: detected capacity change from 0 to 256 [ 94.492056][ T4468] loop1: detected capacity change from 0 to 512 [ 94.531945][ T4474] loop3: detected capacity change from 0 to 8 [ 94.560643][ T4472] ======================================================= [ 94.560643][ T4472] WARNING: The mand mount option has been deprecated and [ 94.560643][ T4472] and is ignored by this kernel. Remove the mand [ 94.560643][ T4472] option from the mount to silence this warning. [ 94.560643][ T4472] ======================================================= [ 94.611157][ T4468] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.52: inode has both inline data and extents flags [ 94.631696][ T4472] FAT-fs (loop2): Unrecognized mount option "utf8­0" or missing value [ 94.679892][ T4474] squashfs image failed sanity check [ 94.762538][ T4468] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.52: couldn't read orphan inode 15 (err -117) [ 94.846053][ T4468] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 95.008986][ T4468] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 95.113881][ T4483] loop0: detected capacity change from 0 to 64 [ 95.181426][ T4480] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.354019][ T4497] device syzkaller0 entered promiscuous mode [ 97.689550][ T4503] tipc: Started in network mode [ 97.706186][ T4503] tipc: Node identity ac14140f, cluster identity 4711 [ 97.730505][ T4503] tipc: New replicast peer: 255.255.255.255 [ 97.769185][ T4503] tipc: Enabled bearer , priority 10 [ 99.125733][ T13] tipc: Node number set to 2886997007 [ 99.987461][ T4519] loop0: detected capacity change from 0 to 512 [ 100.821392][ T4519] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.66: inode has both inline data and extents flags [ 100.836992][ T4519] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.66: couldn't read orphan inode 15 (err -117) [ 100.851362][ T4519] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 101.117069][ T4523] loop3: detected capacity change from 0 to 512 [ 101.332948][ T4523] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.68: inode has both inline data and extents flags [ 101.425762][ T4523] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.68: couldn't read orphan inode 15 (err -117) [ 101.483061][ T4523] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 102.338540][ T4523] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 102.380989][ T4534] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 102.439444][ T4538] loop0: detected capacity change from 0 to 8 [ 102.446163][ T4536] loop2: detected capacity change from 0 to 1024 [ 102.536100][ T4541] loop3: detected capacity change from 0 to 64 [ 102.551957][ T4538] squashfs image failed sanity check [ 104.871927][ T4554] sched: RT throttling activated [ 105.418020][ T4560] device syzkaller0 entered promiscuous mode [ 105.487654][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.721499][ T4572] loop0: detected capacity change from 0 to 1024 [ 106.905873][ T4582] loop3: detected capacity change from 0 to 512 [ 106.963684][ T4582] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.83: inode has both inline data and extents flags [ 107.111118][ T4590] loop0: detected capacity change from 0 to 8 [ 107.119573][ T4582] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.83: couldn't read orphan inode 15 (err -117) [ 107.134485][ T4582] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 107.177423][ T4590] squashfs image failed sanity check [ 107.194652][ T4594] loop4: detected capacity change from 0 to 64 [ 107.202356][ T4582] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 107.226101][ T4596] loop2: detected capacity change from 0 to 512 [ 108.872664][ T4596] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.89: missing EA_INODE flag [ 108.933143][ T4596] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.89: error while reading EA inode 12 err=-117 [ 109.026532][ T4596] EXT4-fs (loop2): 1 orphan inode deleted [ 109.254576][ T4596] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000001,nogrpid,,errors=continue. Quota mode: writeback. [ 109.354864][ T4608] loop3: detected capacity change from 0 to 8 [ 109.691973][ T4608] SQUASHFS error: Unable to read directory block [631:26] [ 111.519861][ T1325] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.992083][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 112.610011][ T1325] usb 5-1: device descriptor read/all, error -71 [ 112.931210][ T4637] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.298992][ T4654] loop3: detected capacity change from 0 to 64 [ 114.437734][ T4657] loop1: detected capacity change from 0 to 8 [ 114.572446][ T4657] squashfs image failed sanity check [ 116.252624][ T4673] loop4: detected capacity change from 0 to 64 [ 116.269479][ T4676] loop1: detected capacity change from 0 to 16 [ 116.757646][ T4676] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 116.860025][ T4687] loop0: detected capacity change from 0 to 1024 [ 116.926226][ T4684] loop3: detected capacity change from 0 to 4096 [ 116.972319][ T4687] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.985437][ T4684] ntfs3: Unknown parameter 'windows_names' [ 118.309744][ T4687] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 120.073098][ T4344] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 120.113063][ T4344] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 768 with error 28 [ 120.155594][ T4700] loop3: detected capacity change from 0 to 4096 [ 120.157268][ T4344] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.157268][ T4344] [ 120.204738][ T4344] EXT4-fs (loop0): Total free blocks count 0 [ 120.219841][ T4344] EXT4-fs (loop0): Free/Dirty block details [ 120.246236][ T4706] loop1: detected capacity change from 0 to 8 [ 120.253653][ T4344] EXT4-fs (loop0): free_blocks=20480 [ 120.273001][ T4700] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 120.281473][ T4344] EXT4-fs (loop0): dirty_blocks=768 [ 120.286728][ T4344] EXT4-fs (loop0): Block reservation details [ 120.394396][ T4344] EXT4-fs (loop0): i_reserved_data_blocks=48 [ 120.483169][ T4706] squashfs image failed sanity check [ 121.268179][ T4720] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.827118][ T4722] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 128.075926][ T4749] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 128.123969][ T4742] netlink: 14 bytes leftover after parsing attributes in process `syz.3.129'. [ 128.151536][ T4751] loop0: detected capacity change from 0 to 8 [ 128.188857][ T4751] squashfs image failed sanity check [ 128.560399][ T4176] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.277185][ T4176] usb 3-1: Using ep0 maxpacket: 8 [ 129.620162][ T4176] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.683118][ T4176] usb 3-1: config 179 has no interface number 0 [ 129.815381][ T4176] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 130.071793][ T4176] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 130.367407][ T4176] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.425463][ T4176] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 130.480102][ T4176] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.540968][ T4768] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 130.690862][ T4760] loop3: detected capacity change from 0 to 32768 [ 130.742708][ T4176] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 130.753077][ T4176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.781093][ T4746] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.835882][ T4760] JBD2: Ignoring recovery information on journal [ 130.880777][ T4760] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 130.972524][ T4780] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.414009][ T4233] usb 3-1: USB disconnect, device number 2 [ 132.420099][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 132.420257][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 132.702469][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.719037][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.254116][ T4797] loop2: detected capacity change from 0 to 8 [ 134.525223][ T4797] squashfs image failed sanity check [ 135.602815][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 137.584358][ T4816] loop1: detected capacity change from 0 to 1024 [ 137.686463][ T4820] loop2: detected capacity change from 0 to 512 [ 137.741737][ T4816] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 137.770051][ T4820] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.826957][ T4816] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.842947][ T26] audit: type=1800 audit(1785370165.219:2): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.151" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 137.867810][ T4815] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.151: lblock 0 mapped to illegal pblock 0 (length 1) [ 137.883581][ T26] audit: type=1800 audit(1785370165.239:3): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.151" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 137.949966][ T4816] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.151: lblock 0 mapped to illegal pblock 0 (length 1) [ 137.985102][ T4820] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.152: EA inode hash validation failed [ 138.045734][ T4816] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.151: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.076619][ T4820] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 138.090878][ T4815] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.151: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.113321][ T4820] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.152: corrupted inode contents [ 138.153334][ T4820] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 138.162361][ T4176] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.253929][ T4815] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.151: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.363369][ T4820] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.152: corrupted inode contents [ 138.422114][ T4815] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.151: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.422266][ T4820] EXT4-fs error (device loop2): ext4_evict_inode:332: inode #15: comm syz.2.152: mark_inode_dirty error [ 138.450094][ T4176] usb 4-1: Using ep0 maxpacket: 8 [ 138.547674][ T4820] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.152: bit already cleared for inode 11 [ 138.771884][ T4815] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.151: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.830044][ T4823] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 138.860182][ T4815] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.151: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.876467][ T4820] EXT4-fs (loop2): 1 orphan inode deleted [ 138.929065][ T4820] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,jqfmt=vfsold,grpid,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003c,nodelalloc,,errors=continue. Quota mode: none. [ 138.980367][ T4815] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.151: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.994499][ T4176] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.042265][ T4820] EXT4-fs error (device loop2): __ext4_iget:4919: inode #14: block 1886221359: comm syz.2.152: invalid block [ 139.079914][ T4176] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 139.087629][ T4176] usb 4-1: can't read configurations, error -71 [ 139.140820][ T4838] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.479375][ T4837] loop4: detected capacity change from 0 to 8192 [ 139.982973][ T4837] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.376440][ T4845] loop1: detected capacity change from 0 to 8 [ 140.579635][ T4845] squashfs image failed sanity check [ 140.591408][ T4837] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 140.630030][ T4849] loop0: detected capacity change from 0 to 512 [ 140.658105][ T4837] FAT-fs (loop4): Filesystem has been set read-only [ 141.361652][ T4849] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 141.447188][ T4849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 141.740975][ T4849] EXT4-fs (loop0): orphan cleanup on readonly fs [ 141.848312][ T4849] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #13: comm syz.0.161: iget: bad i_size value: 12154761577498 [ 141.916009][ T4863] loop2: detected capacity change from 0 to 64 [ 142.055206][ T4849] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.161: couldn't read orphan inode 13 (err -117) [ 142.703642][ T4849] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 142.774352][ T4849] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.161: dx entry: limit 65535 != root limit 120 [ 142.892252][ T4869] loop1: detected capacity change from 0 to 512 [ 142.899207][ T4849] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.161: Corrupt directory, running e2fsck is recommended [ 142.963237][ T4869] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 142.972671][ T4869] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 142.986190][ T4869] EXT4-fs (loop1): can't mount with both data=journal and dax [ 146.817127][ T4901] loop2: detected capacity change from 0 to 64 [ 147.990940][ T4911] loop0: detected capacity change from 0 to 512 [ 148.056718][ T4911] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 148.065631][ T4911] EXT4-fs (loop0): can't mount with both data=journal and dax [ 148.270026][ T4176] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 148.530090][ T4176] usb 3-1: Using ep0 maxpacket: 32 [ 148.660367][ T4176] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 148.752708][ T4176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.864974][ T4176] usb 3-1: config 0 descriptor?? [ 148.956220][ T4176] as10x_usb: device has been detected [ 148.990627][ T4176] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 149.116370][ T4176] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 151.668835][ T4176] as10x_usb: error during firmware upload part1 [ 151.682596][ T4176] Registered device nBox DVB-T Dongle [ 151.692996][ T4176] usb 3-1: USB disconnect, device number 3 [ 151.742957][ T4176] Unregistered device nBox DVB-T Dongle [ 151.745511][ T4176] as10x_usb: device has been disconnected [ 151.851490][ T4927] loop0: detected capacity change from 0 to 8 [ 151.922734][ T4927] squashfs image failed sanity check [ 153.816600][ T4941] loop3: detected capacity change from 0 to 64 [ 153.995612][ T4945] loop1: detected capacity change from 0 to 1764 [ 154.755638][ T4925] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.159926][ T4925] usb 5-1: Using ep0 maxpacket: 16 [ 155.299447][ T4958] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 155.309976][ T4301] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.580011][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 155.701043][ T4301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 156.119986][ T4925] usb 5-1: device descriptor read/all, error -71 [ 156.138296][ T4970] loop0: detected capacity change from 0 to 8 [ 156.172466][ T4970] squashfs image failed sanity check [ 156.382968][ T4301] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.398904][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.409727][ T4301] usb 3-1: Product: syz [ 156.415588][ T4301] usb 3-1: Manufacturer: syz [ 156.423964][ T4301] usb 3-1: SerialNumber: syz [ 156.572151][ T4301] usb 3-1: config 0 descriptor?? [ 156.764677][ T4301] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.917930][ T4301] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 158.410277][ T4301] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 158.919454][ T4995] loop4: detected capacity change from 0 to 64 [ 159.146046][ T4301] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 159.154715][ T4301] em28xx 3-1:0.0: board has no eeprom [ 159.270757][ T5005] loop3: detected capacity change from 0 to 8 [ 159.417233][ T5005] SQUASHFS error: Unable to read directory block [631:26] [ 160.030834][ T5011] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 160.079126][ T5011] device bond1 entered promiscuous mode [ 160.086212][ T5011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.403765][ T5015] loop1: detected capacity change from 0 to 8 [ 160.543540][ T4953] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 160.630075][ T4301] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 160.665263][ T5015] squashfs image failed sanity check [ 160.704959][ T4301] em28xx 3-1:0.0: dvb set to bulk mode. [ 161.208642][ T4301] em28xx 3-1:0.0: Binding DVB extension [ 161.262573][ T1325] usb 3-1: USB disconnect, device number 4 [ 161.273713][ T1325] em28xx 3-1:0.0: Disconnecting em28xx [ 163.207747][ T5028] loop4: detected capacity change from 0 to 131072 [ 163.231866][ T5036] loop2: detected capacity change from 0 to 8 [ 163.261561][ T4301] em28xx 3-1:0.0: Registering input extension [ 163.390366][ T5028] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 163.398928][ T5028] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 163.415488][ T5028] F2FS-fs (loop4): invalid crc value [ 163.440560][ T5032] SQUASHFS error: Unable to read directory block [631:26] [ 163.528043][ T5028] F2FS-fs (loop4): Found nat_bits in checkpoint [ 163.593921][ T5028] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 163.601433][ T5028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 163.710496][ T1325] em28xx 3-1:0.0: Closing input extension [ 163.764429][ T1325] em28xx 3-1:0.0: Freeing device [ 164.917543][ T5052] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 164.993131][ T5052] device bond2 entered promiscuous mode [ 164.999473][ T5052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.259204][ T5033] loop0: detected capacity change from 0 to 16384 [ 166.519576][ T5072] loop3: detected capacity change from 0 to 8 [ 166.536493][ T5033] NILFS (loop0): error -4 creating segctord thread [ 166.585260][ T5075] netlink: 'syz.2.221': attribute type 16 has an invalid length. [ 166.660000][ T5075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 166.853583][ T5072] squashfs image failed sanity check [ 166.992123][ T5080] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.625023][ T5088] loop2: detected capacity change from 0 to 2048 [ 167.652277][ T5086] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 169.139009][ T5088] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.176221][ T5111] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.732043][ T5114] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 169.761887][ T5114] EXT4-fs error (device loop2) in ext4_setattr:5645: error 28 [ 171.965506][ T5129] loop3: detected capacity change from 0 to 1764 [ 172.680078][ T4261] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 173.230349][ T4261] usb 3-1: unable to get BOS descriptor or descriptor too short [ 173.290239][ T4261] usb 3-1: not running at top speed; connect to a high speed hub [ 173.616688][ T5139] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.630141][ T4261] usb 3-1: config 160 has an invalid interface number: 187 but max is 0 [ 173.638534][ T4261] usb 3-1: config 160 has no interface number 0 [ 173.665693][ T5142] loop0: detected capacity change from 0 to 8 [ 173.808504][ T5142] squashfs image failed sanity check [ 176.289211][ T5152] device syzkaller0 entered promiscuous mode [ 176.840889][ T4261] usb 3-1: config 160 interface 187 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 177.388196][ T4261] usb 3-1: config 160 interface 187 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.401628][ T4261] usb 3-1: config 160 interface 187 has no altsetting 0 [ 177.489893][ T4261] usb 3-1: string descriptor 0 read error: -71 [ 177.496834][ T4261] usb 3-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 177.507681][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.610361][ T4261] usb 3-1: can't set config #160, error -71 [ 177.629999][ T4261] usb 3-1: USB disconnect, device number 5 [ 177.906415][ T5168] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 178.040121][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 178.431319][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.469951][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.646647][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.670477][ T4230] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.695725][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.713850][ T4230] usb 2-1: config 0 descriptor?? [ 179.199995][ T4261] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 179.886362][ T4230] plantronics 0003:047F:FFFF.0001: invalid report_size 1635103044 [ 179.895069][ T4230] plantronics 0003:047F:FFFF.0001: item 0 4 1 7 parsing failed [ 179.903377][ T4230] plantronics 0003:047F:FFFF.0001: parse failed [ 179.910370][ T4230] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 180.127074][ T4260] usb 2-1: USB disconnect, device number 2 [ 180.145911][ T5188] [ 180.148312][ T5188] ====================================================== [ 180.155416][ T5188] WARNING: possible circular locking dependency detected [ 180.162452][ T5188] syzkaller #0 Not tainted [ 180.166863][ T5188] ------------------------------------------------------ [ 180.173873][ T5188] syz.3.254/5188 is trying to acquire lock: [ 180.179793][ T5188] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 180.189595][ T5188] [ 180.189595][ T5188] but task is already holding lock: [ 180.196961][ T5188] ffff88805f065590 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 180.206658][ T5188] [ 180.206658][ T5188] which lock already depends on the new lock. [ 180.206658][ T5188] [ 180.217234][ T5188] [ 180.217234][ T5188] the existing dependency chain (in reverse order) is: [ 180.226243][ T5188] [ 180.226243][ T5188] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 180.234962][ T5188] down_write+0x38/0x60 [ 180.239644][ T5188] configfs_depend_item_unlocked+0x14f/0x430 [ 180.246152][ T5188] usbg_make_tpg+0x1f3/0x580 [ 180.251283][ T5188] target_fabric_make_tpg+0xa0/0x6d0 [ 180.257098][ T5188] configfs_mkdir+0x511/0x9e0 [ 180.262297][ T5188] vfs_mkdir+0x386/0x570 [ 180.267074][ T5188] do_mkdirat+0x1dd/0x5c0 [ 180.272043][ T5188] __x64_sys_mkdir+0x6a/0x80 [ 180.277164][ T5188] do_syscall_64+0x4c/0xa0 [ 180.282103][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.288518][ T5188] [ 180.288518][ T5188] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 180.296166][ T5188] __mutex_lock_common+0x1e5/0x2400 [ 180.301900][ T5188] mutex_lock_nested+0x17/0x20 [ 180.307189][ T5188] tcm_set_name+0x26/0x90 [ 180.312039][ T5188] function_make+0x195/0x350 [ 180.317156][ T5188] configfs_mkdir+0x511/0x9e0 [ 180.322370][ T5188] vfs_mkdir+0x386/0x570 [ 180.327135][ T5188] do_mkdirat+0x1dd/0x5c0 [ 180.331988][ T5188] __x64_sys_mkdir+0x6a/0x80 [ 180.337097][ T5188] do_syscall_64+0x4c/0xa0 [ 180.342040][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.348459][ T5188] [ 180.348459][ T5188] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 180.356724][ T5188] __lock_acquire+0x2c66/0x7b50 [ 180.362122][ T5188] lock_acquire+0x19e/0x400 [ 180.367164][ T5188] __mutex_lock_common+0x1e5/0x2400 [ 180.372889][ T5188] mutex_lock_nested+0x17/0x20 [ 180.378185][ T5188] configfs_rmdir+0x638/0x980 [ 180.383383][ T5188] vfs_rmdir+0x19d/0x410 [ 180.388171][ T5188] do_rmdir+0x27f/0x710 [ 180.392881][ T5188] __x64_sys_rmdir+0x45/0x50 [ 180.398019][ T5188] do_syscall_64+0x4c/0xa0 [ 180.403076][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.409504][ T5188] [ 180.409504][ T5188] other info that might help us debug this: [ 180.409504][ T5188] [ 180.419726][ T5188] Chain exists of: [ 180.419726][ T5188] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#26 [ 180.419726][ T5188] [ 180.434448][ T5188] Possible unsafe locking scenario: [ 180.434448][ T5188] [ 180.442335][ T5188] CPU0 CPU1 [ 180.447704][ T5188] ---- ---- [ 180.453065][ T5188] lock(&sb->s_type->i_mutex_key#26); [ 180.458529][ T5188] lock(&opts->dep_lock); [ 180.465471][ T5188] lock(&sb->s_type->i_mutex_key#26); [ 180.473458][ T5188] lock(gadget_subsys.su_mutex); [ 180.478481][ T5188] [ 180.478481][ T5188] *** DEADLOCK *** [ 180.478481][ T5188] [ 180.486712][ T5188] 3 locks held by syz.3.254/5188: [ 180.491750][ T5188] #0: ffff88801e0da460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 180.500980][ T5188] #1: ffff88807441eee0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710 [ 180.511777][ T5188] #2: ffff88805f065590 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 180.521880][ T5188] [ 180.521880][ T5188] stack backtrace: [ 180.527772][ T5188] CPU: 1 PID: 5188 Comm: syz.3.254 Not tainted syzkaller #0 [ 180.535063][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 180.545153][ T5188] Call Trace: [ 180.548440][ T5188] [ 180.551376][ T5188] dump_stack_lvl+0x188/0x250 [ 180.556058][ T5188] ? load_image+0x410/0x410 [ 180.560674][ T5188] ? show_regs_print_info+0x20/0x20 [ 180.565905][ T5188] ? print_circular_bug+0x12b/0x1a0 [ 180.571114][ T5188] check_noncircular+0x296/0x330 [ 180.576057][ T5188] ? lockdep_lock+0x1f0/0x1f0 [ 180.580755][ T5188] ? add_chain_block+0x9b0/0x9b0 [ 180.585694][ T5188] ? lockdep_lock+0xf1/0x1f0 [ 180.590302][ T5188] ? __lock_acquire+0x13dc/0x7b50 [ 180.595350][ T5188] ? mark_lock+0x94/0x320 [ 180.599679][ T5188] ? _find_first_zero_bit+0xd1/0xf0 [ 180.604969][ T5188] __lock_acquire+0x2c66/0x7b50 [ 180.609839][ T5188] ? __lock_acquire+0x13dc/0x7b50 [ 180.614887][ T5188] ? verify_lock_unused+0x140/0x140 [ 180.620103][ T5188] ? __lock_acquire+0x1305/0x7b50 [ 180.625170][ T5188] lock_acquire+0x19e/0x400 [ 180.629709][ T5188] ? configfs_rmdir+0x638/0x980 [ 180.634598][ T5188] ? __might_sleep+0xf0/0xf0 [ 180.639192][ T5188] ? read_lock_is_recursive+0x10/0x10 [ 180.644573][ T5188] __mutex_lock_common+0x1e5/0x2400 [ 180.649795][ T5188] ? configfs_rmdir+0x638/0x980 [ 180.654675][ T5188] ? configfs_rmdir+0x638/0x980 [ 180.659542][ T5188] ? __rwlock_init+0x140/0x140 [ 180.664318][ T5188] ? rcu_lock_release+0x5/0x20 [ 180.669189][ T5188] ? mutex_lock_io_nested+0x60/0x60 [ 180.674406][ T5188] ? _raw_spin_unlock+0x24/0x40 [ 180.679282][ T5188] mutex_lock_nested+0x17/0x20 [ 180.684136][ T5188] configfs_rmdir+0x638/0x980 [ 180.688825][ T5188] vfs_rmdir+0x19d/0x410 [ 180.693181][ T5188] do_rmdir+0x27f/0x710 [ 180.697346][ T5188] ? d_delete_notify+0x150/0x150 [ 180.702295][ T5188] ? getname_flags+0x1f9/0x4f0 [ 180.707070][ T5188] __x64_sys_rmdir+0x45/0x50 [ 180.711700][ T5188] do_syscall_64+0x4c/0xa0 [ 180.716120][ T5188] ? clear_bhb_loop+0x30/0x80 [ 180.720813][ T5188] ? clear_bhb_loop+0x30/0x80 [ 180.725508][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.731414][ T5188] RIP: 0033:0x7f174dc2ff99 [ 180.735840][ T5188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.755460][ T5188] RSP: 002b:00007f174be88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 180.763893][ T5188] RAX: ffffffffffffffda RBX: 00007f174deb7fa0 RCX: 00007f174dc2ff99 [ 180.771870][ T5188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000800 [ 180.780053][ T5188] RBP: 00007f174dcc6ec4 R08: 0000000000000000 R09: 0000000000000000 [ 180.788036][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.796015][ T5188] R13: 00007f174deb8038 R14: 00007f174deb7fa0 R15: 00007ffe9e0ee3e8 [ 180.804009][ T5188] [ 180.889902][ T4261] usb 3-1: device descriptor read/all, error -71 [ 185.949843][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 185.955950][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 185.962033][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 185.968089][ T4230] Bluetooth: hci4: command 0x0406 tx timeout