last executing test programs: 9.659235309s ago: executing program 2 (id=196): syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x400281e, 0x40, 0x3, 0x267}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x801, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000004c0)=""/2, &(0x7f0000000500)=0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000080)={r0}, 0x1) sendto$inet(r0, &(0x7f0000000040)="134e", 0x2, 0x20004050, 0x0, 0x0) shutdown(r0, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) 9.314360112s ago: executing program 2 (id=198): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 9.06503771s ago: executing program 4 (id=200): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000"], 0x0, 0x37, 0x0, 0x1}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x6) r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000040)=0x1) userfaultfd(0x80001) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) ptrace(0x10, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x43) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000014b500010031bd5000fedbdf250a0010bc5500000300000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200408f0}, 0x4000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 8.189389699s ago: executing program 0 (id=202): r0 = socket$inet6(0xa, 0x1, 0x0) close(0x3) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x9f, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='highspeed', 0x9) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 7.433772241s ago: executing program 4 (id=203): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) 7.227074675s ago: executing program 3 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) sendto(r3, 0x0, 0x0, 0x80, 0x0, 0x0) 6.969745673s ago: executing program 0 (id=206): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140)=0x63ba, 0x4) fcntl$setlease(0xffffffffffffffff, 0x403, 0x0) ioctl$KVM_CAP_XEN_HVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x26, 0x0, 0x2}) sendmmsg$inet6(r4, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) 6.969301813s ago: executing program 2 (id=207): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x3, 0x100) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.777890166s ago: executing program 4 (id=208): syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x400281e, 0x40, 0x3, 0x267}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x801, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000004c0)=""/2, &(0x7f0000000500)=0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000080)={r0}, 0x1) sendto$inet(r0, &(0x7f0000000040)="134e", 0x2, 0x20004050, 0x0, 0x0) shutdown(r0, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) 5.706618399s ago: executing program 0 (id=209): syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 5.558207589s ago: executing program 4 (id=210): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x26, 0x6, 0xb77) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)) 5.330515165s ago: executing program 3 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0xfffffd6b, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.329756045s ago: executing program 2 (id=212): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) 5.25781593s ago: executing program 0 (id=213): r0 = syz_clone(0x91, 0x0, 0xd5cc402235073f75, 0x0, 0x0, 0x0) ptrace(0x10, r0) setpgid(r0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = dup(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x8}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x80000001, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x38}}, 0xc800) 3.776260061s ago: executing program 2 (id=214): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x8, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) 3.664778399s ago: executing program 3 (id=215): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 3.404207347s ago: executing program 4 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$pppoe(0x18, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000080)='y\x10\x01)\xbay\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8bz', 0x2) ftruncate(r2, 0x2000000) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1f, 0x0, 0x1000000}) 3.403660247s ago: executing program 1 (id=217): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000006e40)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)="5996948d57f50ebc57527832511e2ffc7063beb66f2d9cd9f69e77a0841f66d5877ba51bb9a27e13e848f77256caef4ee3f9336a14517f91aed5cf1e3a4f63374412758c4c561afc47e47f5cf374ff44", 0x50}], 0x1, 0x0, 0x0, 0x8001}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.793791979s ago: executing program 4 (id=218): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080004400000000b080002400000000d0900020073797a3200000000140000001100010000000000000000000100000a286d3c57c94fb94090e826d02cab9216d6c269877f7619c741a831e34721e6419de8141f4327fd798ab3168e14c421a6c4d9bbf5387c277e01c6cef7da9ac5bc262ccaed2089062904126934959e7483d01152f03806f29f2255e0239b319d5285"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406000005240002000d240f0110000000d500ff000306241a0300d509050a"], 0x0) 2.793624369s ago: executing program 1 (id=219): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) socket$kcm(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.760488881s ago: executing program 3 (id=220): syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x400281e, 0x40, 0x3, 0x267}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x801, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000004c0)=""/2, &(0x7f0000000500)=0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="134e", 0x2, 0x20004050, 0x0, 0x0) shutdown(r0, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) 1.7577098s ago: executing program 3 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) sendto(r3, 0x0, 0x0, 0x80, 0x0, 0x0) 1.641941367s ago: executing program 1 (id=222): socket$rxrpc(0x21, 0x2, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e5a, 0x0, 0xfffffffffffffff3}) close_range(r2, r0, 0x0) 1.531013915s ago: executing program 1 (id=223): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x3, 0x100) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.340184828s ago: executing program 1 (id=224): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 97.227363ms ago: executing program 0 (id=225): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x9, r0, 0x7, 0x80) 86.752194ms ago: executing program 1 (id=226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @pic={0x4, 0x8c, 0xe, 0x92, 0x40, 0xc, 0x0, 0xc0, 0x2b, 0xd, 0x1, 0xc, 0x9, 0x8a, 0xf5, 0x5}}) 41.793307ms ago: executing program 3 (id=227): socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000440)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x1000, @remote, 0x9}, 0x1c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xe5fb, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 24.902018ms ago: executing program 2 (id=228): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000003500)=[{&(0x7f0000000580)=""/72, 0x48}], 0x1, 0x0, 0x80, 0x10) 0s ago: executing program 0 (id=229): syz_mount_image$msdos(&(0x7f0000000e80), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000001740)=ANY=[], 0x5, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xcc042, 0x8) read$FUSE(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. [ 65.688619][ T4173] cgroup: Unknown subsys name 'net' [ 65.852353][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.347736][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.449106][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 69.483490][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.522551][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 69.562724][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.609793][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 69.633187][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.641119][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.649536][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.664267][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.671678][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.680099][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.790040][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.809592][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.819448][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.827121][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.836583][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.849576][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.856977][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.865797][ T4189] device bridge_slave_0 entered promiscuous mode [ 69.887337][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.894446][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.902995][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.911764][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.919139][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.927630][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.949548][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.957118][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.966300][ T4189] device bridge_slave_1 entered promiscuous mode [ 69.974228][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.981930][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.990535][ T4190] device bridge_slave_1 entered promiscuous mode [ 70.034822][ T4188] team0: Port device team_slave_0 added [ 70.050089][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.060952][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.069281][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.078080][ T4187] device bridge_slave_0 entered promiscuous mode [ 70.094594][ T4188] team0: Port device team_slave_1 added [ 70.102796][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.115120][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.124677][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.132395][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.141116][ T4187] device bridge_slave_1 entered promiscuous mode [ 70.150508][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.176596][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.194656][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.238498][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.245705][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.272641][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.287336][ T4186] team0: Port device team_slave_0 added [ 70.293865][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.302002][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.328349][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.349261][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.367234][ T4186] team0: Port device team_slave_1 added [ 70.376317][ T4189] team0: Port device team_slave_0 added [ 70.388769][ T4190] team0: Port device team_slave_0 added [ 70.397998][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.430583][ T4189] team0: Port device team_slave_1 added [ 70.437992][ T4190] team0: Port device team_slave_1 added [ 70.465467][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.472761][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.499456][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.532048][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.539370][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.568338][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.583448][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.590870][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.617522][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.632307][ T4187] team0: Port device team_slave_0 added [ 70.647200][ T4187] team0: Port device team_slave_1 added [ 70.664740][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.672151][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.699000][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.710841][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.718157][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.744468][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.776118][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.783344][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.795620][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.802697][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.829851][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.842240][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.849447][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.876052][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.908747][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.916289][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.942980][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.977427][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.985364][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.992179][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.000469][ T4186] Cannot create hsr debugfs directory [ 71.029808][ T4189] device hsr_slave_0 entered promiscuous mode [ 71.037445][ T4189] device hsr_slave_1 entered promiscuous mode [ 71.044275][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.052044][ T4189] Cannot create hsr debugfs directory [ 71.106342][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 71.113249][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 71.117747][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 71.121096][ T4175] Bluetooth: hci2: command 0x0409 tx timeout [ 71.140482][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 71.153969][ T4187] device hsr_slave_0 entered promiscuous mode [ 71.161646][ T4187] device hsr_slave_1 entered promiscuous mode [ 71.169222][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.178086][ T4187] Cannot create hsr debugfs directory [ 71.202700][ T4190] device hsr_slave_0 entered promiscuous mode [ 71.210335][ T4190] device hsr_slave_1 entered promiscuous mode [ 71.217205][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.224790][ T4190] Cannot create hsr debugfs directory [ 71.534197][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.547264][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.558148][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.568249][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.589773][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.596637][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.643017][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.668214][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.684435][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.709238][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.727794][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.744914][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.761365][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.772047][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.845437][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.865268][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.876121][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.887273][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.914143][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.952751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.964149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.988200][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.014701][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.027460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.037195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.047090][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.054707][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.076814][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.101685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.111473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.123213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.132355][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.139690][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.149313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.168401][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.180213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.189489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.206982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.220145][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.230355][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.251038][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.288566][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.295732][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.305948][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.315385][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.324240][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.333619][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.345751][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.354361][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.380809][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.393241][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.429098][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.441957][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.453945][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.464829][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.475542][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.484576][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.500808][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.508119][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.521947][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.533035][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.543163][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.550422][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.559139][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.569723][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.587512][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.598159][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.663966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.681625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.692442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.701201][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.708728][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.719634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.729264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.738526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.750206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.759211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.768813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.779457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.788250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.796928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.805181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.818910][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.828013][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.836430][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.844431][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.853831][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.863604][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.870762][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.893505][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.904888][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.929594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.940033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.949050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.959004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.969672][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.976966][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.984906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.994274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.018640][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.032129][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.042150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.053683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.068499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.081536][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.088872][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.103421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.121929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.130323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.185741][ T1325] Bluetooth: hci2: command 0x041b tx timeout [ 73.196053][ T1325] Bluetooth: hci4: command 0x041b tx timeout [ 73.202765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.212286][ T1325] Bluetooth: hci0: command 0x041b tx timeout [ 73.225689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.226292][ T1325] Bluetooth: hci3: command 0x041b tx timeout [ 73.247427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.248832][ T1325] Bluetooth: hci1: command 0x041b tx timeout [ 73.265794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.274627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.283993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.293100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.302280][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.309585][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.319749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.328817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.337856][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.345113][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.353336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.362844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.371944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.381925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.391398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.401253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.410416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.425101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.433419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.442649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.471745][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.496352][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.511353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.526044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.546740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.566655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.583112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.592210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.608244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.620467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.658958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.686881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.706176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.722447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.731843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.754770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.764043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.773420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.789895][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.806454][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.817069][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.834880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.844877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.863735][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.921014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.948069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.007723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.031588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.053918][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.063820][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.089151][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.110659][ T4188] device veth0_vlan entered promiscuous mode [ 74.124119][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.142143][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.162877][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.172225][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.187709][ T4189] device veth0_vlan entered promiscuous mode [ 74.209887][ T4188] device veth1_vlan entered promiscuous mode [ 74.238505][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.248187][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.256578][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.266497][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.274528][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.292476][ T4189] device veth1_vlan entered promiscuous mode [ 74.328266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.337702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.347162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.356677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.366042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.379476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.389008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.400628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.408995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.441760][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.452846][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.463341][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.476962][ T4188] device veth0_macvtap entered promiscuous mode [ 74.500428][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.509623][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.519438][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.530765][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.559433][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.567856][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.580019][ T4188] device veth1_macvtap entered promiscuous mode [ 74.603124][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.611469][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.621815][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.646671][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.656611][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.668459][ T4187] device veth0_vlan entered promiscuous mode [ 74.681184][ T4190] device veth0_vlan entered promiscuous mode [ 74.690088][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.699248][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.713228][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.722748][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.734747][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.747124][ T4189] device veth0_macvtap entered promiscuous mode [ 74.763185][ T4187] device veth1_vlan entered promiscuous mode [ 74.771877][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.780812][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.790727][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.806460][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.814546][ T4189] device veth1_macvtap entered promiscuous mode [ 74.829302][ T4190] device veth1_vlan entered promiscuous mode [ 74.848173][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.857871][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.870991][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.880444][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.895702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.903842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.914188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.964239][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.975568][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.987988][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.009415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.018741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.030128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.039673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.071072][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.084747][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.098973][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.110463][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.119460][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.128945][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.138824][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.160038][ T4190] device veth0_macvtap entered promiscuous mode [ 75.167839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.176859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.188136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.197093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.230880][ T4186] device veth0_vlan entered promiscuous mode [ 75.238343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.247491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.257012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.265852][ T1106] Bluetooth: hci1: command 0x040f tx timeout [ 75.271999][ T1106] Bluetooth: hci3: command 0x040f tx timeout [ 75.278725][ T1106] Bluetooth: hci0: command 0x040f tx timeout [ 75.284651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.292817][ T1106] Bluetooth: hci4: command 0x040f tx timeout [ 75.299569][ T1106] Bluetooth: hci2: command 0x040f tx timeout [ 75.306676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.317827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.326176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.342923][ T4190] device veth1_macvtap entered promiscuous mode [ 75.357818][ T4187] device veth0_macvtap entered promiscuous mode [ 75.383584][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.401875][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.412064][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.427973][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.441791][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.459112][ T4187] device veth1_macvtap entered promiscuous mode [ 75.474526][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.488374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.495355][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.504093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.514760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.523745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.533198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.543395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.558639][ T4186] device veth1_vlan entered promiscuous mode [ 75.600412][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.613127][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.625243][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.636208][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.649973][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.670721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.680091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.689110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.698740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.717195][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.726924][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.736723][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.746329][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.805747][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.813615][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.824342][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.840934][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.851370][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.862522][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.872685][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.883793][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.895516][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.922658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.932040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.942918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.952937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.962586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.980068][ T4186] device veth0_macvtap entered promiscuous mode [ 76.000698][ T4186] device veth1_macvtap entered promiscuous mode [ 76.017828][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.036423][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.052071][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.064942][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.083956][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.094849][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.107286][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.125551][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.133504][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.143511][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.163044][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.174134][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.194037][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.208752][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.228289][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.239214][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.249620][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.258826][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.310676][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.334449][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.345441][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.362820][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.373516][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.391790][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.402183][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.423154][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.454046][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.466509][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.484645][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.495303][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.512785][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.523416][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.541950][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.555552][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.572731][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.633065][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.737323][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.771790][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.853218][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.874244][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.950007][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.983822][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.994307][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.008834][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.018564][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.027588][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.073943][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.086764][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.096552][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.109171][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.144893][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.155159][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.172752][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.181704][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.192359][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.206584][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.321034][ T4276] loop2: detected capacity change from 0 to 16 [ 77.337818][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.346867][ T1325] Bluetooth: hci2: command 0x0419 tx timeout [ 77.354298][ T1325] Bluetooth: hci4: command 0x0419 tx timeout [ 77.365238][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.388457][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.390004][ T1325] Bluetooth: hci0: command 0x0419 tx timeout [ 77.409419][ T1325] Bluetooth: hci3: command 0x0419 tx timeout [ 77.431990][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.455394][ T1325] Bluetooth: hci1: command 0x0419 tx timeout [ 77.480485][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.489924][ T4276] erofs: (device loop2): mounted with root inode @ nid 36. [ 77.533742][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.563734][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.584890][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.603522][ T4276] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 77.630586][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.679608][ T4284] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.745713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.754848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.763986][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 77.842601][ T4276] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 77.866121][ T4276] attempt to access beyond end of device [ 77.866121][ T4276] loop2: rw=524288, want=1048592, limit=16 [ 77.905076][ T4276] attempt to access beyond end of device [ 77.905076][ T4276] loop2: rw=524288, want=524304, limit=16 [ 77.959376][ T4276] attempt to access beyond end of device [ 77.959376][ T4276] loop2: rw=0, want=1048592, limit=16 [ 78.002468][ T26] audit: type=1800 audit(1775304751.830:2): pid=4276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 78.695090][ T4276] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 78.706304][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.812544][ T4279] syz.4.5 (4279) used greatest stack depth: 20080 bytes left [ 79.445739][ T4309] loop0: detected capacity change from 0 to 128 [ 79.806657][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 79.835041][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.844174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.853231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.862279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.871497][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 80.222479][ T4309] FAT-fs (loop0): bogus number of reserved sectors [ 80.232502][ T4309] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 80.242084][ T4309] FAT-fs (loop0): Can't find a valid FAT filesystem [ 80.398751][ T4301] loop3: detected capacity change from 0 to 32768 [ 80.531443][ T4314] loop4: detected capacity change from 0 to 256 [ 80.695141][ T4317] loop0: detected capacity change from 0 to 32768 [ 81.511911][ T4301] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.7 (4301) [ 81.555945][ T4314] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 81.655834][ T4317] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.12 (4317) [ 82.357988][ T4320] loop1: detected capacity change from 0 to 4096 [ 82.393184][ T4301] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 82.525259][ T4301] BTRFS info (device loop3): setting nodatacow, compression disabled [ 82.533982][ T4301] BTRFS info (device loop3): enabling auto defrag [ 82.553949][ T4301] BTRFS info (device loop3): max_inline at 0 [ 82.572149][ T4320] ======================================================= [ 82.572149][ T4320] WARNING: The mand mount option has been deprecated and [ 82.572149][ T4320] and is ignored by this kernel. Remove the mand [ 82.572149][ T4320] option from the mount to silence this warning. [ 82.572149][ T4320] ======================================================= [ 83.138447][ T4320] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 83.146928][ T4180] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4180) [ 83.160956][ T4301] BTRFS info (device loop3): using free space tree [ 83.175976][ T4301] BTRFS info (device loop3): has skinny extents [ 84.092603][ T4348] loop2: detected capacity change from 0 to 256 [ 84.209890][ T4301] BTRFS error (device loop3): open_ctree failed: -12 [ 84.248733][ T4348] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 85.342511][ T4348] attempt to access beyond end of device [ 85.342511][ T4348] loop2: rw=524288, want=408, limit=256 [ 85.356401][ T4348] attempt to access beyond end of device [ 85.356401][ T4348] loop2: rw=524288, want=664, limit=256 [ 85.368250][ T4348] attempt to access beyond end of device [ 85.368250][ T4348] loop2: rw=0, want=288, limit=256 [ 85.387812][ T26] audit: type=1800 audit(1775304759.240:3): pid=4348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16" name="file1" dev="loop2" ino=1048591 res=0 errno=0 [ 85.659724][ T4370] loop0: detected capacity change from 0 to 512 [ 85.754210][ T4365] loop3: detected capacity change from 0 to 4096 [ 85.998132][ T4370] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.104378][ T4370] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.272220][ T4370] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 86.301132][ T4188] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 86.349863][ T4188] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 86.402321][ T4370] EXT4-fs (loop0): 1 truncate cleaned up [ 86.419837][ T4370] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,usrquota,abort,debug_want_extra_isize=0x0000000000000080,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 86.625219][ T4387] tipc: Started in network mode [ 86.630489][ T4387] tipc: Node identity bea3b67043f9, cluster identity 4711 [ 86.736209][ T4387] tipc: Enabled bearer , priority 0 [ 86.975538][ T1109] cfg80211: failed to load regulatory.db [ 87.399934][ T4392] device syzkaller0 entered promiscuous mode [ 87.459131][ T4386] tipc: Resetting bearer [ 87.610075][ T4386] tipc: Disabling bearer [ 89.118588][ T4413] loop4: detected capacity change from 0 to 1024 [ 89.299342][ T4413] hfsplus: extend alloc file! (8192,512,16777719) [ 91.181679][ T1203] hfsplus: b-tree write err: -5, ino 8 [ 91.358440][ T4421] loop4: detected capacity change from 0 to 8 [ 91.759345][ T4415] loop1: detected capacity change from 0 to 32768 [ 91.868188][ T4415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.33 (4415) [ 91.955523][ T4415] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 91.996478][ T4415] BTRFS info (device loop1): turning on sync discard [ 92.004337][ T4415] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 92.063623][ T4415] BTRFS info (device loop1): use zstd compression, level 3 [ 92.388766][ T4415] BTRFS info (device loop1): turning on async discard [ 92.534533][ T4415] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 92.740737][ T4415] BTRFS info (device loop1): trying to use backup root at mount time [ 92.983260][ T4415] BTRFS info (device loop1): enabling auto defrag [ 93.005257][ T4415] BTRFS info (device loop1): using free space tree [ 93.048306][ T4415] BTRFS info (device loop1): has skinny extents [ 93.136643][ T4415] BTRFS error (device loop1): open_ctree failed: -12 [ 93.184254][ T4457] loop3: detected capacity change from 0 to 2048 [ 93.451063][ T4457] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.662181][ T4457] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.701695][ T4482] syz.1.45 uses obsolete (PF_INET,SOCK_PACKET) [ 93.736531][ T4457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 186 with error 28 [ 93.809069][ T4457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.809069][ T4457] [ 93.825414][ T4485] loop0: detected capacity change from 0 to 64 [ 93.862968][ T4457] EXT4-fs (loop3): Total free blocks count 0 [ 93.883691][ T4485] hfs: unable to locate alternate MDB [ 93.892685][ T4457] EXT4-fs (loop3): Free/Dirty block details [ 93.910319][ T4485] hfs: continuing without an alternate MDB [ 93.929405][ T4457] EXT4-fs (loop3): free_blocks=2415919104 [ 93.972217][ T4457] EXT4-fs (loop3): dirty_blocks=192 [ 94.014002][ T4457] EXT4-fs (loop3): Block reservation details [ 94.044807][ T4457] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 94.300255][ T4494] loop0: detected capacity change from 0 to 1024 [ 94.683081][ T4496] loop3: detected capacity change from 0 to 40427 [ 94.745143][ T4496] F2FS-fs (loop3): invalid crc value [ 94.780349][ T4496] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.848247][ T4496] F2FS-fs (loop3): Start checkpoint disabled! [ 95.121647][ T4496] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 95.436029][ T26] audit: type=1800 audit(1775304769.280:4): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.49" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 96.013763][ T26] audit: type=1800 audit(1775304769.400:5): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.49" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 96.054693][ T4322] hfsplus: b-tree write err: -5, ino 25 [ 96.075607][ T4322] hfsplus: b-tree write err: -5, ino 4 [ 96.081380][ T4322] hfsplus: b-tree write err: -5, ino 2 [ 96.143897][ T4322] hfsplus: b-tree write err: -5, ino 20 [ 96.191966][ T4322] hfsplus: b-tree write err: -5, ino 26 [ 96.260870][ T4488] loop2: detected capacity change from 0 to 32768 [ 96.349710][ T4504] loop1: detected capacity change from 0 to 512 [ 96.377058][ T4292] attempt to access beyond end of device [ 96.377058][ T4292] loop3: rw=2049, want=40976, limit=40427 [ 96.389994][ T4488] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.46 (4488) [ 96.430113][ T4504] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.467807][ T4504] EXT4-fs (loop1): 1 truncate cleaned up [ 96.473656][ T4504] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.489034][ T4488] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 96.566022][ T4488] BTRFS info (device loop2): setting nodatasum [ 96.572287][ T4488] BTRFS info (device loop2): force zlib compression, level 3 [ 96.640147][ T4488] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 96.704911][ T4488] BTRFS info (device loop2): use lzo compression, level 0 [ 96.722602][ T4488] BTRFS info (device loop2): turning on flush-on-commit [ 96.740805][ T4488] BTRFS info (device loop2): enabling auto defrag [ 96.768049][ T4488] BTRFS info (device loop2): max_inline at 4096 [ 96.774414][ T4488] BTRFS info (device loop2): using free space tree [ 96.858458][ T4488] BTRFS info (device loop2): has skinny extents [ 98.049120][ T4488] BTRFS error (device loop2): open_ctree failed: -12 [ 98.528948][ T4517] loop0: detected capacity change from 0 to 32768 [ 98.615277][ T4517] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.55 (4517) [ 98.875454][ T4517] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 98.901479][ T4560] Zero length message leads to an empty skb [ 98.913233][ T4517] BTRFS info (device loop0): setting nodatacow, compression disabled [ 98.975367][ T4517] BTRFS info (device loop0): enabling auto defrag [ 98.982044][ T4517] BTRFS info (device loop0): max_inline at 0 [ 99.234415][ T4517] BTRFS info (device loop0): using free space tree [ 99.325803][ T4517] BTRFS info (device loop0): has skinny extents [ 100.468903][ T4517] BTRFS error (device loop0): open_ctree failed: -12 [ 100.478732][ T4536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4536) [ 102.342193][ T4577] loop1: detected capacity change from 0 to 32768 [ 102.658010][ T4577] XFS (loop1): Mounting V5 Filesystem [ 102.737759][ T4577] XFS (loop1): log mount failed [ 103.678562][ T7] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 103.687747][ T7] Bluetooth: hci3: Injecting HCI hardware error event [ 103.696674][ T4192] Bluetooth: hci3: hardware error 0x00 [ 104.258594][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.201189][ T4654] loop0: detected capacity change from 0 to 512 [ 105.225391][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.280509][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.311807][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.371686][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.427466][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.428563][ T4654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 105.488598][ T7] usb 2-1: config 0 descriptor?? [ 105.503895][ T4654] System zones: 1-12 [ 105.577620][ T4654] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.87: error while reading EA inode 32 err=-116 [ 106.134673][ T4654] EXT4-fs (loop0): Remounting filesystem read-only [ 106.149718][ T4654] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.87: error while reading EA inode 32 err=-116 [ 106.169789][ T4654] EXT4-fs (loop0): Remounting filesystem read-only [ 106.196240][ T4654] EXT4-fs (loop0): 1 orphan inode deleted [ 106.202046][ T4654] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 106.372817][ T7] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 106.481414][ T7] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 106.859264][ T4671] loop0: detected capacity change from 0 to 32768 [ 107.093119][ T4354] usb 2-1: USB disconnect, device number 2 [ 107.279942][ T4669] fido_id[4669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 107.355139][ T4671] XFS (loop0): Mounting V5 Filesystem [ 107.528826][ T4671] XFS (loop0): Ending clean mount [ 107.543624][ T4671] XFS (loop0): Quotacheck needed: Please wait. [ 107.780186][ T4671] XFS (loop0): Quotacheck: Done. [ 108.865082][ T4706] syz.1.98 sent an empty control message without MSG_MORE. [ 109.568784][ T4186] XFS (loop0): Unmounting Filesystem [ 112.869970][ T4729] process 'syz.1.105' launched '/dev/fd/4' with NULL argv: empty string added [ 112.926915][ T4723] device vlan2 entered promiscuous mode [ 113.119661][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 116.965144][ T4474] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.225096][ T4474] usb 4-1: Using ep0 maxpacket: 8 [ 117.355165][ T4474] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.393806][ T4474] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.442616][ T4474] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.504312][ T4474] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.549828][ T4474] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.580280][ T4474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.648957][ T4766] loop2: detected capacity change from 0 to 32768 [ 117.691069][ T4774] netlink: 'syz.0.119': attribute type 12 has an invalid length. [ 117.723580][ T4761] loop1: detected capacity change from 0 to 40427 [ 117.738688][ T4766] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.115 (4766) [ 117.754027][ T4766] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 117.799953][ T4766] BTRFS info (device loop2): using free space tree [ 117.821407][ T4761] F2FS-fs (loop1): invalid crc value [ 117.842048][ T4766] BTRFS info (device loop2): has skinny extents [ 117.895244][ T4474] usb 4-1: GET_CAPABILITIES returned 0 [ 117.905394][ T4474] usbtmc 4-1:16.0: can't read capabilities [ 117.913021][ T4761] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.092066][ T4761] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 118.135118][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 118.307771][ T4359] usb 4-1: USB disconnect, device number 2 [ 118.601656][ T4766] BTRFS info (device loop2): enabling ssd optimizations [ 121.049858][ T4821] overlayfs: upper fs does not support file handles, falling back to index=off. [ 121.159260][ T4824] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 121.524662][ T4823] loop3: detected capacity change from 0 to 4096 [ 122.723038][ T4832] netlink: 36 bytes leftover after parsing attributes in process `syz.1.131'. [ 122.966663][ T4823] EXT4-fs (loop3): inline encryption not supported [ 123.027710][ T4823] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 123.027710][ T4823] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 123.027710][ T4823] [ 123.251314][ T4823] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 123.405274][ T4823] EXT4-fs (loop3): DAX unsupported by block device. [ 123.465584][ T4840] overlayfs: unrecognized mount option "verity=on" or missing value [ 123.613876][ T4842] loop4: detected capacity change from 0 to 512 [ 123.753230][ T4461] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.874992][ C0] sched: RT throttling activated [ 125.162176][ T4842] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.165295][ T4461] usb 2-1: Using ep0 maxpacket: 8 [ 125.214802][ T4842] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.306072][ T4461] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 125.335367][ T4461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.412100][ T4842] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.135: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 125.423428][ T4461] pvrusb2: Hardware description: Terratec Grabster AV400 [ 125.445523][ T4842] EXT4-fs error (device loop4) in ext4_free_inode:362: Filesystem failed CRC [ 125.474347][ T4461] pvrusb2: ********** [ 125.486929][ T4461] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 125.517133][ T4461] pvrusb2: Important functionality might not be entirely working. [ 125.533134][ T4461] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 125.705232][ T4461] pvrusb2: ********** [ 125.765670][ T2426] pvrusb2: Invalid write control endpoint [ 125.821846][ T4837] loop2: detected capacity change from 0 to 32768 [ 125.924736][ T2426] pvrusb2: Invalid write control endpoint [ 125.951671][ T4837] XFS (loop2): Mounting V5 Filesystem [ 125.974558][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 126.076934][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 126.106299][ T4837] XFS (loop2): Ending clean mount [ 126.115232][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 126.158862][ T4837] XFS (loop2): Quotacheck needed: Please wait. [ 126.176364][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 126.233114][ T4837] XFS (loop2): Quotacheck: Done. [ 126.292448][ T2426] pvrusb2: Device being rendered inoperable [ 126.304603][ T4839] pvrusb2: Attempted to execute control transfer when device not ok [ 126.381980][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 126.394069][ T4353] usb 2-1: USB disconnect, device number 3 [ 126.409578][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 126.455175][ T2426] pvrusb2: Attached sub-driver cx25840 [ 126.472181][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 126.536234][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 126.556809][ T4837] overlayfs: conflicting lowerdir path [ 126.674655][ T4190] XFS (loop2): Unmounting Filesystem [ 129.005400][ T4890] loop1: detected capacity change from 0 to 4096 [ 130.092590][ T4890] ntfs: volume version 3.1. [ 130.650349][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 131.041942][ T4921] loop2: detected capacity change from 0 to 40427 [ 132.148939][ T4921] F2FS-fs (loop2): invalid crc value [ 132.196107][ T4921] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.530010][ T4921] F2FS-fs (loop2): Start checkpoint disabled! [ 132.593108][ T4921] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 132.730566][ T26] audit: type=1800 audit(1775304806.580:6): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.156" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 133.029433][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.036350][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.335150][ T26] audit: type=1800 audit(1775304806.660:7): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.156" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 133.604476][ T4292] attempt to access beyond end of device [ 133.604476][ T4292] loop2: rw=2049, want=40976, limit=40427 [ 135.172522][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 137.001547][ T4966] loop2: detected capacity change from 0 to 32768 [ 137.088772][ T4988] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.673072][ T26] audit: type=1800 audit(1775304811.520:8): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.169" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 138.020306][ T4995] loop3: detected capacity change from 0 to 512 [ 138.263246][ T4995] EXT4-fs (loop3): Ignoring removed orlov option [ 138.333080][ T4984] loop1: detected capacity change from 0 to 32768 [ 138.376510][ T4995] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc=0x0000000000000001,orlov,usrquota,data_err=ignore,sb=0x0000000000000003,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 138.415217][ T4995] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.134117][ T4984] XFS (loop1): Mounting V5 Filesystem [ 139.384521][ T4984] XFS (loop1): Ending clean mount [ 139.531068][ T4984] XFS (loop1): Quotacheck needed: Please wait. [ 139.864540][ T4984] XFS (loop1): Quotacheck: Done. [ 139.912425][ T5019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 139.989612][ T4187] XFS (loop1): Unmounting Filesystem [ 140.154426][ T5021] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 142.505435][ T5053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 142.682247][ T5056] device syzkaller0 entered promiscuous mode [ 143.299462][ T5066] loop2: detected capacity change from 0 to 8192 [ 143.510759][ T5066] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 143.699476][ T5066] REISERFS (device loop2): using ordered data mode [ 144.165559][ T5066] reiserfs: using flush barriers [ 144.397579][ T5066] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.673399][ T5066] REISERFS (device loop2): checking transaction log (loop2) [ 145.022638][ T5066] REISERFS (device loop2): Using tea hash to sort names [ 145.047480][ T5066] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 146.706002][ T5107] device syzkaller0 entered promiscuous mode [ 146.892919][ T5109] 9pnet: Insufficient options for proto=fd [ 146.932575][ T5112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 148.506071][ T5116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.211'. [ 150.828799][ T4465] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 151.206401][ T4465] usb 5-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid wMaxPacketSize 0 [ 151.206891][ T4465] usb 5-1: config 2 interface 0 altsetting 178 bulk endpoint 0xA has invalid maxpacket 0 [ 151.207351][ T4465] usb 5-1: config 2 interface 0 has no altsetting 0 [ 151.428929][ T4465] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 151.428963][ T4465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.428983][ T4465] usb 5-1: Product: syz [ 151.430727][ T4465] usb 5-1: Manufacturer: syz [ 151.430753][ T4465] usb 5-1: SerialNumber: syz [ 152.418097][ T5170] loop0: detected capacity change from 0 to 128 [ 152.450225][ T5162] [ 152.452647][ T5162] ====================================================== [ 152.459787][ T5162] WARNING: possible circular locking dependency detected [ 152.466940][ T5162] syzkaller #0 Not tainted [ 152.471386][ T5162] ------------------------------------------------------ [ 152.478436][ T5162] syz.3.227/5162 is trying to acquire lock: [ 152.484451][ T5162] ffff88802b070c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 152.495646][ T5162] [ 152.495646][ T5162] but task is already holding lock: [ 152.503160][ T5162] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 152.512969][ T5162] [ 152.512969][ T5162] which lock already depends on the new lock. [ 152.512969][ T5162] [ 152.523409][ T5162] [ 152.523409][ T5162] the existing dependency chain (in reverse order) is: [ 152.532736][ T5162] [ 152.532736][ T5162] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 152.540788][ T5162] __mutex_lock_common+0x1e3/0x2400 [ 152.546559][ T5162] mutex_lock_nested+0x17/0x20 [ 152.551987][ T5162] rfkill_register+0x33/0x8a0 [ 152.557407][ T5162] hci_register_dev+0x452/0x970 [ 152.562830][ T5162] vhci_create_device+0x32c/0x5c0 [ 152.568716][ T5162] vhci_write+0x391/0x450 [ 152.573886][ T5162] vfs_write+0x745/0xd60 [ 152.578710][ T5162] ksys_write+0x152/0x260 [ 152.583791][ T5162] do_syscall_64+0x4c/0xa0 [ 152.588861][ T5162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.595317][ T5162] [ 152.595317][ T5162] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 152.603190][ T5162] __mutex_lock_common+0x1e3/0x2400 [ 152.608963][ T5162] mutex_lock_nested+0x17/0x20 [ 152.614716][ T5162] vhci_send_frame+0x88/0x100 [ 152.619969][ T5162] hci_send_frame+0x1a9/0x2e0 [ 152.625326][ T5162] hci_tx_work+0x9f9/0x1710 [ 152.630398][ T5162] process_one_work+0x85f/0x1010 [ 152.636026][ T5162] worker_thread+0xaa6/0x1290 [ 152.641265][ T5162] kthread+0x436/0x520 [ 152.645893][ T5162] ret_from_fork+0x1f/0x30 [ 152.650879][ T5162] [ 152.650879][ T5162] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 152.660463][ T5162] __flush_work+0x116/0x210 [ 152.665568][ T5162] hci_dev_do_close+0x1e7/0x1030 [ 152.671212][ T5162] hci_error_reset+0x101/0x2c0 [ 152.676545][ T5162] process_one_work+0x85f/0x1010 [ 152.682043][ T5162] worker_thread+0xaa6/0x1290 [ 152.687281][ T5162] kthread+0x436/0x520 [ 152.692004][ T5162] ret_from_fork+0x1f/0x30 [ 152.697471][ T5162] [ 152.697471][ T5162] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 152.705254][ T5162] __mutex_lock_common+0x1e3/0x2400 [ 152.711105][ T5162] mutex_lock_nested+0x17/0x20 [ 152.716549][ T5162] bg_scan_update+0x44/0x3b0 [ 152.722009][ T5162] process_one_work+0x85f/0x1010 [ 152.727539][ T5162] worker_thread+0xaa6/0x1290 [ 152.732802][ T5162] kthread+0x436/0x520 [ 152.737440][ T5162] ret_from_fork+0x1f/0x30 [ 152.742722][ T5162] [ 152.742722][ T5162] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 152.753020][ T5162] __lock_acquire+0x2c42/0x7d10 [ 152.758705][ T5162] lock_acquire+0x19e/0x400 [ 152.763775][ T5162] __flush_work+0x116/0x210 [ 152.768852][ T5162] __cancel_work_timer+0x3f4/0x560 [ 152.774622][ T5162] hci_request_cancel_all+0xcc/0x300 [ 152.780553][ T5162] hci_dev_do_close+0x4e/0x1030 [ 152.785972][ T5162] hci_rfkill_set_block+0x10a/0x190 [ 152.791870][ T5162] rfkill_set_block+0x1c6/0x420 [ 152.797367][ T5162] rfkill_fop_write+0x452/0x560 [ 152.802775][ T5162] vfs_write+0x30b/0xd60 [ 152.807649][ T5162] ksys_write+0x152/0x260 [ 152.812593][ T5162] do_syscall_64+0x4c/0xa0 [ 152.817542][ T5162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.824348][ T5162] [ 152.824348][ T5162] other info that might help us debug this: [ 152.824348][ T5162] [ 152.834872][ T5162] Chain exists of: [ 152.834872][ T5162] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 152.834872][ T5162] [ 152.851325][ T5162] Possible unsafe locking scenario: [ 152.851325][ T5162] [ 152.859008][ T5162] CPU0 CPU1 [ 152.864464][ T5162] ---- ---- [ 152.869833][ T5162] lock(rfkill_global_mutex); [ 152.874611][ T5162] lock(&data->open_mutex); [ 152.882148][ T5162] lock(rfkill_global_mutex); [ 152.890016][ T5162] lock((work_completion)(&hdev->bg_scan_update)); [ 152.897045][ T5162] [ 152.897045][ T5162] *** DEADLOCK *** [ 152.897045][ T5162] [ 152.905757][ T5162] 1 lock held by syz.3.227/5162: [ 152.911049][ T5162] #0: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 152.921449][ T5162] [ 152.921449][ T5162] stack backtrace: [ 152.927574][ T5162] CPU: 0 PID: 5162 Comm: syz.3.227 Not tainted syzkaller #0 [ 152.935075][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.945468][ T5162] Call Trace: [ 152.948762][ T5162] [ 152.951874][ T5162] dump_stack_lvl+0x188/0x250 [ 152.956767][ T5162] ? load_image+0x400/0x400 [ 152.961419][ T5162] ? show_regs_print_info+0x20/0x20 [ 152.966629][ T5162] ? print_circular_bug+0x12b/0x1a0 [ 152.971848][ T5162] check_noncircular+0x296/0x330 [ 152.977643][ T5162] ? look_up_lock_class+0x71/0x110 [ 152.982981][ T5162] ? add_chain_block+0x940/0x940 [ 152.987939][ T5162] ? lockdep_lock+0xf1/0x1f0 [ 152.992681][ T5162] ? __lock_acquire+0x12e8/0x7d10 [ 152.997821][ T5162] ? mark_lock+0x94/0x320 [ 153.002332][ T5162] __lock_acquire+0x2c42/0x7d10 [ 153.007302][ T5162] ? verify_lock_unused+0x140/0x140 [ 153.012520][ T5162] ? verify_lock_unused+0x140/0x140 [ 153.017908][ T5162] ? mark_lock+0x94/0x320 [ 153.022497][ T5162] lock_acquire+0x19e/0x400 [ 153.027143][ T5162] ? __flush_work+0xfa/0x210 [ 153.031833][ T5162] ? __lock_acquire+0x7d10/0x7d10 [ 153.036999][ T5162] ? read_lock_is_recursive+0x10/0x10 [ 153.042586][ T5162] ? start_flush_work+0x776/0x820 [ 153.048171][ T5162] __flush_work+0x116/0x210 [ 153.052888][ T5162] ? __flush_work+0xfa/0x210 [ 153.057669][ T5162] ? flush_work+0x20/0x20 [ 153.062017][ T5162] ? try_to_grab_pending+0xfa/0x7f0 [ 153.067811][ T5162] ? mark_lock+0x94/0x320 [ 153.072250][ T5162] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 153.078609][ T5162] ? lock_chain_count+0x20/0x20 [ 153.083727][ T5162] ? mark_lock+0x94/0x320 [ 153.088266][ T5162] ? __cancel_work_timer+0x36a/0x560 [ 153.093706][ T5162] __cancel_work_timer+0x3f4/0x560 [ 153.098841][ T5162] ? cancel_work_sync+0x20/0x20 [ 153.103967][ T5162] ? __cancel_work+0x1f9/0x2e0 [ 153.109009][ T5162] ? lockdep_hardirqs_on+0x94/0x140 [ 153.114323][ T5162] ? __cancel_work+0x27b/0x2e0 [ 153.119201][ T5162] ? cancel_work+0x20/0x20 [ 153.123884][ T5162] ? lock_chain_count+0x20/0x20 [ 153.128934][ T5162] hci_request_cancel_all+0xcc/0x300 [ 153.134591][ T5162] hci_dev_do_close+0x4e/0x1030 [ 153.140155][ T5162] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 153.146648][ T5162] ? _raw_spin_unlock+0x40/0x40 [ 153.151638][ T5162] hci_rfkill_set_block+0x10a/0x190 [ 153.157478][ T5162] ? rcu_lock_release+0x20/0x20 [ 153.162620][ T5162] rfkill_set_block+0x1c6/0x420 [ 153.167585][ T5162] rfkill_fop_write+0x452/0x560 [ 153.172688][ T5162] ? rfkill_fop_read+0x4d0/0x4d0 [ 153.177828][ T5162] ? common_file_perm+0x110/0x1c0 [ 153.183133][ T5162] ? fsnotify_perm+0x5d/0x560 [ 153.187856][ T5162] ? security_file_permission+0x75/0xa0 [ 153.193408][ T5162] ? rfkill_fop_read+0x4d0/0x4d0 [ 153.198356][ T5162] vfs_write+0x30b/0xd60 [ 153.202615][ T5162] ? file_end_write+0x250/0x250 [ 153.207811][ T5162] ? __fget_files+0x40f/0x480 [ 153.212728][ T5162] ? __fdget_pos+0x1e2/0x370 [ 153.217598][ T5162] ? ksys_write+0x71/0x260 [ 153.222214][ T5162] ksys_write+0x152/0x260 [ 153.226581][ T5162] ? __ia32_sys_read+0x80/0x80 [ 153.231439][ T5162] ? lockdep_hardirqs_on+0x94/0x140 [ 153.236830][ T5162] do_syscall_64+0x4c/0xa0 [ 153.241336][ T5162] ? clear_bhb_loop+0x30/0x80 [ 153.246102][ T5162] ? clear_bhb_loop+0x30/0x80 [ 153.250791][ T5162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.256835][ T5162] RIP: 0033:0x7f967a841819 [ 153.261769][ T5162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.282002][ T5162] RSP: 002b:00007f9678a9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.291042][ T5162] RAX: ffffffffffffffda RBX: 00007f967aabafa0 RCX: 00007f967a841819 [ 153.299255][ T5162] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 153.307503][ T5162] RBP: 00007f967a8d7c91 R08: 0000000000000000 R09: 0000000000000000 [ 153.315938][ T5162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.324645][ T5162] R13: 00007f967aabb038 R14: 00007f967aabafa0 R15: 00007ffef2507078 [ 153.333093][ T5162] [ 153.368068][ T26] audit: type=1800 audit(1775304827.220:9): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.229" name="file2" dev="loop0" ino=1048592 res=0 errno=0 [ 153.402143][ T5170] FAT-fs (loop0): error, clusters badly computed (4 != 3) [ 153.413622][ T5170] FAT-fs (loop0): Filesystem has been set read-only [ 153.421208][ T5170] FAT-fs (loop0): error, clusters badly computed (5 != 4) [ 153.429077][ T5170] FAT-fs (loop0): error, clusters badly computed (6 != 5) [ 153.497102][ T4465] ims_pcu 5-1:2.0: Incorrect number of endpoints on data interface (1) [ 153.511788][ T4465] ims_pcu: probe of 5-1:2.0 failed with error -22 [ 153.563929][ T4465] usb 5-1: USB disconnect, device number 2