last executing test programs: 23m36.040104296s ago: executing program 0 (id=1180): openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc00) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) semop(0x0, 0x0, 0x0) r1 = semget(0x3, 0x4, 0x39c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000440)=""/133) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) 23m34.314247058s ago: executing program 0 (id=1183): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003880)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) 23m32.487530214s ago: executing program 0 (id=1187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000600850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) 23m31.414324911s ago: executing program 0 (id=1190): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) 23m30.735050617s ago: executing program 0 (id=1196): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r4}, 0x38) 23m27.141124437s ago: executing program 0 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$video4linux(0x0, 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0xb, 0x3, 0x3007, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x5, 0x5, 0x7, 0x80000008, 0x4, 0x5, 0xeb]}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x200040c4) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 23m11.711700661s ago: executing program 32 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$video4linux(0x0, 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0xb, 0x3, 0x3007, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x5, 0x5, 0x7, 0x80000008, 0x4, 0x5, 0xeb]}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x200040c4) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 21m23.54380697s ago: executing program 1 (id=1493): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x8001) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x100750, 0x2, 0x0, 'queue1\x00', 0x5}) fcntl$setown(r1, 0x8, 0x0) close(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xa, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x6481, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3a0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'sit0\x00', 0x0}) sendto$inet6(r4, &(0x7f0000000280)='0', 0x1, 0x4000854, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4, @loopback, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}, 0xa}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x2, 0x48081) 21m19.853999441s ago: executing program 1 (id=1503): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x932, 0x0) 21m18.907953575s ago: executing program 1 (id=1506): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000240)='./file0\x00', 0x97) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x8041) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 21m16.465271006s ago: executing program 1 (id=1511): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 21m14.569187233s ago: executing program 1 (id=1517): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) 21m11.734703123s ago: executing program 1 (id=1523): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xf}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000) 21m10.583344882s ago: executing program 33 (id=1523): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xf}, {&(0x7f00000001c0)="fe112162c63e6da8bc8432294ef18af53cc330a64c2c7035246635093ba4d30fcf19a90804f04a10939db8f4e1b4acab11d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a51db7555c3b49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f0000000000eba1ada452cfe17b0000096f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d87120000000000007077ea7362eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9623810aca432a0415ad7e85dfafe625ad68f8fd9ef5c5dd59296895d1672efa7072477de47b1aec5a72376e7b0b558765ec7435f5aa572dc93b407411a3faad6b07cf54ab3cafcec4347f48120cea1ee1bb51e5c5f429fa352fb21dc81666b3b1e48a01976654c3a54eaca18432e45e25622e1f67f81ec2ac12796efffdc3a92efb57590a8a18a3f974b4a8b90f4c63b9a74ab91d44ac075b94e90bfb43983aa2e048ce4ebee34bdb97f41f645e5f8e540e39d33fc4c6a", 0x259}], 0x4}, 0x20004000) 2m58.200855402s ago: executing program 6 (id=3595): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, 0x0) 2m51.86268868s ago: executing program 6 (id=3604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m51.703137074s ago: executing program 4 (id=3605): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000480)="2399", 0x2}], 0x1) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001680), 0x0, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8) 2m50.482687304s ago: executing program 6 (id=3606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x3e, r4, 0x2}) 2m50.406389356s ago: executing program 4 (id=3607): syz_open_procfs$namespace(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247, 0x1, @discrete={0x10000}}) 2m48.922405473s ago: executing program 6 (id=3608): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) 2m47.812615991s ago: executing program 4 (id=3609): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 2m43.570580156s ago: executing program 4 (id=3619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x3e, r4, 0x2}) 2m41.498773568s ago: executing program 6 (id=3620): syz_open_procfs$namespace(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247, 0x1, @discrete={0x10000}}) 2m39.263387894s ago: executing program 6 (id=3623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 2m38.363119206s ago: executing program 5 (id=3624): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000f4c000/0x2000)=nil, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(0xffffffffffffffff, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e20, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, {0xa, 0x4e22, 0x0, @empty, 0x7ff}, 0x1, {[0x0, 0x6, 0x7, 0x10000, 0x6, 0xa, 0x8, 0xff]}}, 0x5c) mount(&(0x7f0000000340)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) 2m37.583903596s ago: executing program 4 (id=3626): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x2}, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x8}, @mss, @sack_perm, @window={0x3, 0x7fff, 0x2}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 2m37.544439626s ago: executing program 5 (id=3627): ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000380)={&(0x7f0000000240)=[{&(0x7f0000000000)="bd83dd", 0x3}, {0x0}], 0x2, 0x5, 0x0, 0x0, 0x7, 0x800000000000000, 0x1, 0x4}) 2m37.325108212s ago: executing program 5 (id=3630): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) 2m36.436054054s ago: executing program 5 (id=3633): syz_open_procfs$namespace(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247, 0x1, @discrete={0x10000}}) 2m33.80713293s ago: executing program 5 (id=3635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, 0x0) 2m32.823223415s ago: executing program 4 (id=3637): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd, 0xc}, {0x5, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xb, [0x4, 0x7, 0x45, 0x10, 0xff, 0x1d, 0x9, 0x8, 0xa, 0x5, 0xf, 0xd, 0x9, 0x6, 0xc, 0xe], 0x1, [0x200, 0xe, 0x101, 0x7, 0x486, 0x40, 0x8, 0x5, 0x8, 0x2a, 0x2, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48aa, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2m29.78641922s ago: executing program 5 (id=3639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff0200000000000200000000000000000000000000640031040000040433", @ANYBLOB="0400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400", @ANYRESOCT, @ANYBLOB="0400010004000100040001000400010004"], 0x460}}, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a) 2m23.648807813s ago: executing program 34 (id=3623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 2m16.777385484s ago: executing program 35 (id=3637): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd, 0xc}, {0x5, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xb, [0x4, 0x7, 0x45, 0x10, 0xff, 0x1d, 0x9, 0x8, 0xa, 0x5, 0xf, 0xd, 0x9, 0x6, 0xc, 0xe], 0x1, [0x200, 0xe, 0x101, 0x7, 0x486, 0x40, 0x8, 0x5, 0x8, 0x2a, 0x2, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48aa, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2m13.970332414s ago: executing program 36 (id=3639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff0200000000000200000000000000000000000000640031040000040433", @ANYBLOB="0400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400", @ANYRESOCT, @ANYBLOB="0400010004000100040001000400010004"], 0x460}}, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a) 11.282232469s ago: executing program 3 (id=3798): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$alg(0x26, 0x5, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x57a, 0x1000, 0x40002, 0x2a7}, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) r5 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x252}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2100, 0x1b4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3d88, 0x40000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587f, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0xf0}}, 0x0) 9.847949275s ago: executing program 3 (id=3800): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = syz_io_uring_setup(0x363, &(0x7f00000000c0)={0x0, 0xd057, 0x1000, 0x0, 0x2b7}, &(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r2]) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) 9.633092101s ago: executing program 3 (id=3801): ioperm(0x4, 0x8, 0x5) timerfd_create(0x8, 0x0) 9.205030661s ago: executing program 3 (id=3802): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) 8.719951603s ago: executing program 3 (id=3803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "b84d"}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x24040800) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.631177615s ago: executing program 9 (id=3804): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x4, 0x4, 0x3e, 0x7fff0200}, {0x6, 0x40, 0x3, 0x40}]}) 8.43169177s ago: executing program 2 (id=3805): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f000000d000)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8.383927881s ago: executing program 9 (id=3806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000000, 0x0) syz_fuse_handle_req(r4, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) 7.077853564s ago: executing program 9 (id=3807): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6.170797557s ago: executing program 2 (id=3808): socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) read$dsp(r2, &(0x7f0000000280)=""/189, 0xbd) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8993, 0x0) 4.365695472s ago: executing program 2 (id=3809): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = syz_io_uring_setup(0x363, &(0x7f00000000c0)={0x0, 0xd057, 0x1000, 0x0, 0x2b7}, &(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r2]) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) 4.216908845s ago: executing program 2 (id=3810): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2.953507496s ago: executing program 9 (id=3811): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x91], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.391807531s ago: executing program 9 (id=3812): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r4, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1.61560496s ago: executing program 3 (id=3813): r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, 0xdfd}}, {@space_cache_v2}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1a22a}}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0x1, 0x510a, &(0x7f000000d000)="$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") ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000380)={&(0x7f0000000240)=[{0x0}, {0x0}], 0x2, 0x5, 0x0, 0x0, 0x7, 0x800000000000000, 0x1, 0x4}) 1.366580136s ago: executing program 9 (id=3814): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141a42, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000000000000000074") 1.336305427s ago: executing program 2 (id=3815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) 0s ago: executing program 2 (id=3816): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f000000d000)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): 0x060100 [ 1383.540994][T10243] tipc: Resetting bearer [ 1383.652083][T10243] tipc: Disabling bearer [ 1383.914242][T16382] misc userio: No port type given on /dev/userio [ 1384.074327][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.990831][T12715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1385.015330][T12715] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1385.027650][T12715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1385.065747][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.081608][T12715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1385.097788][T12715] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1385.106804][T12715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1385.414888][T16395] loop6: detected capacity change from 0 to 40427 [ 1385.445367][T16395] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1385.453450][T16395] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1385.487794][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.558391][T16395] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1385.689262][T16395] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1385.696628][T16395] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1385.722423][T16402] jffs2: notice: (16402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1386.253179][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.687424][T12715] Bluetooth: hci3: command 0x0409 tx timeout [ 1388.164013][T16392] chnl_net:caif_netlink_parms(): no params data found [ 1388.403589][ T47] tipc: Left network mode [ 1388.567475][T16392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.609638][T16392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.640780][T16392] device bridge_slave_0 entered promiscuous mode [ 1388.985249][T16392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.019812][T16392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.048717][T16392] device bridge_slave_1 entered promiscuous mode [ 1389.418881][T16392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.454283][T16392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.638389][T16443] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1389.769746][T12715] Bluetooth: hci3: command 0x041b tx timeout [ 1390.897733][T16392] team0: Port device team_slave_0 added [ 1391.760175][T16450] loop3: detected capacity change from 0 to 4096 [ 1391.781816][T16450] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1391.799815][T16392] team0: Port device team_slave_1 added [ 1391.849704][T12715] Bluetooth: hci3: command 0x040f tx timeout [ 1392.098898][T16462] UBIFS error (pid: 16462): cannot open "(null)", error -22 [ 1393.100226][T16392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.177809][T16392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1394.650991][T12715] Bluetooth: hci3: command 0x0419 tx timeout [ 1396.079423][T16392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.190035][T16481] 9pnet_fd: Insufficient options for proto=fd [ 1396.505083][T16392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.569606][T16392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.331161][T16392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.571529][T16392] device hsr_slave_0 entered promiscuous mode [ 1398.622631][T16392] device hsr_slave_1 entered promiscuous mode [ 1399.040211][T16498] UBIFS error (pid: 16498): cannot open "(null)", error -22 [ 1399.241154][T16495] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1400.565179][ T47] device veth0_to_bond left promiscuous mode [ 1400.612965][ T47] bridge8: port 2(veth0_to_bond) entered disabled state [ 1400.649044][ T47] device veth3 left promiscuous mode [ 1400.687398][ T47] bridge8: port 1(veth3) entered disabled state [ 1401.926735][ T47] device hsr_slave_0 left promiscuous mode [ 1401.956152][ T47] device hsr_slave_1 left promiscuous mode [ 1403.386333][T16527] loop4: detected capacity change from 0 to 4096 [ 1403.439568][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.451093][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.459914][T16527] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1404.845350][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.890738][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.044358][ T47] device veth1_macvtap left promiscuous mode [ 1405.060424][ T47] device veth0_macvtap left promiscuous mode [ 1405.079845][ T47] device veth1_vlan left promiscuous mode [ 1405.085732][ T47] device veth0_vlan left promiscuous mode [ 1407.111210][T16553] UBIFS error (pid: 16553): cannot open "(null)", error -22 [ 1407.332576][T16557] 9pnet_fd: Insufficient options for proto=fd [ 1408.316680][T16568] jffs2: notice: (16568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1411.254422][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1411.314379][T16584] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1411.407015][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1411.518438][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.603580][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.503399][ T47] bond0 (unregistering): Released all slaves [ 1416.655553][ T26] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1416.839339][ T26] usb 6-1: device descriptor read/64, error -71 [ 1416.925004][T16607] 9pnet_fd: Insufficient options for proto=fd [ 1417.654479][T16605] jffs2: notice: (16605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1417.759352][ T26] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1418.649679][ T26] usb 6-1: device descriptor read/64, error -71 [ 1419.170717][ T26] usb usb6-port1: attempt power cycle [ 1419.193366][T16622] jffs2: notice: (16622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1419.928954][T16632] UBIFS error (pid: 16632): cannot open "(null)", error -22 [ 1420.119409][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 1422.542574][T16647] 9pnet_fd: Insufficient options for proto=fd [ 1423.131548][T14488] usbduxfast 7-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1423.131646][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.147438][ T4350] usbduxfast 4-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1423.156836][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.286707][ T4350] usbduxfast: probe of 4-1:1.0 failed with error -110 [ 1423.295824][ T4350] usb 4-1: USB disconnect, device number 6 [ 1423.357504][T14488] usbduxfast: probe of 7-1:1.0 failed with error -2 [ 1423.493675][T14488] usb 7-1: USB disconnect, device number 11 [ 1423.561278][T16392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1423.653349][T16657] jffs2: notice: (16657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1424.356416][T16657] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1424.401495][T16392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1424.517057][T16392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1424.558874][T16392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1424.860232][T16392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.933030][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1424.989310][T14488] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1425.027531][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1425.103795][T16392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.134258][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1425.149534][T14488] usb 6-1: device descriptor read/64, error -71 [ 1425.165313][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1425.208534][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.216047][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.252427][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1425.266290][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1425.278998][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.286361][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.419486][T14488] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1425.459662][T16392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1425.504322][T16392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1425.579470][T14488] usb 6-1: device descriptor read/64, error -71 [ 1425.769869][T14488] usb usb6-port1: attempt power cycle [ 1425.776305][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1425.791211][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1425.808826][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1425.818485][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1425.835955][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1425.845709][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1426.000855][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1426.146397][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1426.249564][T14488] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1426.302103][T14488] usb 6-1: device descriptor read/8, error -71 [ 1426.609595][T14488] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1427.375733][T14488] usb 6-1: device descriptor read/8, error -71 [ 1427.394344][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1427.499471][T14488] usb usb6-port1: unable to enumerate USB device [ 1427.526602][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1427.569021][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1427.599525][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1427.632451][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1430.449511][T16377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1430.457135][T16377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1430.505239][T16392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1431.922598][T15737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1431.950284][T15737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1432.066318][T15737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1432.080698][T15737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1432.140824][T15737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1432.160389][T15737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1433.659844][T16392] device veth0_vlan entered promiscuous mode [ 1433.742276][T16392] device veth1_vlan entered promiscuous mode [ 1433.840932][T16377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1433.852517][T16377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1433.900135][T16392] device veth0_macvtap entered promiscuous mode [ 1433.940176][T16392] device veth1_macvtap entered promiscuous mode [ 1434.085013][T16721] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1434.219640][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.469813][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.673313][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.806268][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.816540][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.827366][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.849832][T16392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.863964][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1434.900291][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1434.949832][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1435.010789][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1435.037861][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.059940][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.113102][T16727] FAULT_INJECTION: forcing a failure. [ 1435.113102][T16727] name failslab, interval 1, probability 5, space 0, times 9995 [ 1435.115051][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.184395][T16727] CPU: 1 PID: 16727 Comm: syz.4.3206 Not tainted syzkaller #0 [ 1435.191963][T16727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1435.199277][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.202080][T16727] Call Trace: [ 1435.215514][T16727] [ 1435.218574][T16727] dump_stack_lvl+0x188/0x24e [ 1435.223393][T16727] ? show_regs_print_info+0x12/0x12 [ 1435.228721][T16727] ? load_image+0x410/0x410 [ 1435.233286][T16727] ? __might_sleep+0xd0/0xd0 [ 1435.236573][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.237896][T16727] ? __lock_acquire+0x7ea0/0x7ea0 [ 1435.253655][T16727] ? format_decode+0xb38/0x1330 [ 1435.258596][T16727] should_fail_ex+0x390/0x4c0 [ 1435.263313][T16727] should_failslab+0x5/0x20 [ 1435.267838][T16727] slab_pre_alloc_hook+0x59/0x300 [ 1435.272889][T16727] ? snd_seq_create_port+0x99/0x6a0 [ 1435.278221][T16727] __kmem_cache_alloc_node+0x4f/0x270 [ 1435.283708][T16727] ? snd_seq_create_port+0x99/0x6a0 [ 1435.288923][T16727] kmalloc_trace+0x26/0xe0 [ 1435.293531][T16727] snd_seq_create_port+0x99/0x6a0 [ 1435.298588][T16727] snd_seq_ioctl_create_port+0xd3/0x640 [ 1435.304589][T16727] snd_seq_oss_open+0x551/0xf00 [ 1435.309567][T16727] ? snd_seq_oss_delete_client+0x50/0x50 [ 1435.315350][T16727] ? __mutex_trylock_common+0x15c/0x260 [ 1435.321548][T16727] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1435.327846][T16727] ? odev_open+0x58/0x90 [ 1435.332209][T16727] ? __lock_acquire+0x7ea0/0x7ea0 [ 1435.337435][T16727] ? snd_seq_oss_process_event+0x2910/0x2910 [ 1435.343432][T16727] ? async_call_lookup_ports+0x10/0x10 [ 1435.348950][T16727] ? do_raw_spin_unlock+0x11d/0x230 [ 1435.354165][T16727] ? soundcore_open+0x309/0x4b0 [ 1435.359039][T16727] odev_open+0x63/0x90 [ 1435.363128][T16727] chrdev_open+0x585/0x5f0 [ 1435.367565][T16727] ? cd_forget+0x160/0x160 [ 1435.372086][T16727] ? fsnotify_perm+0x39b/0x550 [ 1435.376868][T16727] ? cd_forget+0x160/0x160 [ 1435.381300][T16727] do_dentry_open+0x7dd/0x10b0 [ 1435.386266][T16727] path_openat+0x2674/0x2f10 [ 1435.390885][T16727] ? kasan_set_track+0x60/0x70 [ 1435.395671][T16727] ? verify_lock_unused+0x140/0x140 [ 1435.400892][T16727] ? do_sys_openat2+0xdd/0x4f0 [ 1435.405678][T16727] ? do_filp_open+0x420/0x420 [ 1435.410390][T16727] do_filp_open+0x1ee/0x420 [ 1435.414913][T16727] ? vfs_tmpfile+0x470/0x470 [ 1435.419534][T16727] ? _raw_spin_unlock+0x24/0x40 [ 1435.424420][T16727] ? alloc_fd+0x590/0x640 [ 1435.429039][T16727] do_sys_openat2+0x14b/0x4f0 [ 1435.433855][T16727] ? do_sys_open+0xe0/0xe0 [ 1435.438296][T16727] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1435.444472][T16727] ? lock_chain_count+0x20/0x20 [ 1435.449343][T16727] __x64_sys_openat+0x135/0x160 [ 1435.454228][T16727] do_syscall_64+0x4c/0xa0 [ 1435.458771][T16727] ? clear_bhb_loop+0x60/0xb0 [ 1435.463556][T16727] ? clear_bhb_loop+0x60/0xb0 [ 1435.468339][T16727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.474246][T16727] RIP: 0033:0x7f8f1019e199 [ 1435.478865][T16727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.498580][T16727] RSP: 002b:00007f8f11063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1435.507021][T16727] RAX: ffffffffffffffda RBX: 00007f8f10425fa0 RCX: 00007f8f1019e199 [ 1435.515100][T16727] RDX: 0000000000123482 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 1435.523256][T16727] RBP: 00007f8f102358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1435.531249][T16727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1435.539526][T16727] R13: 00007f8f10426038 R14: 00007f8f10425fa0 R15: 00007fff05686828 [ 1435.547560][T16727] [ 1435.577814][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.597283][T16392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1435.612852][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1435.631755][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1435.651790][T16734] jffs2: notice: (16734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1435.684688][T16392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.702498][T16392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.715239][T16392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.727066][T16392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.739541][T16727] ALSA: seq_oss: can't create port [ 1437.001603][ T4553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.019261][ T4553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.159530][T14488] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1437.555000][T14488] usb 5-1: config 0 has no interfaces? [ 1437.562824][T14488] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1437.737073][T14488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.783103][T14488] usb 5-1: config 0 descriptor?? [ 1439.341615][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1439.398606][ T6322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.422222][ T6322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.479654][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1439.728854][T16758] loop6: detected capacity change from 0 to 40427 [ 1439.750559][T16758] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1439.758637][T16758] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1439.805885][T16758] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1439.843238][T16758] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1439.850602][T16758] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1441.669520][T12366] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1441.687270][ T4321] usb 5-1: USB disconnect, device number 10 [ 1441.851115][T12366] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.879292][T12366] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1441.909655][T12366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.123753][T16776] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1442.517674][T12366] usb 3-1: Direct firmware load for usbduxfast_firmware.bin failed with error -2 [ 1442.759369][T12366] usb 3-1: Falling back to sysfs fallback for: usbduxfast_firmware.bin [ 1443.538117][T16784] tipc: Started in network mode [ 1443.543497][T16784] tipc: Node identity 4, cluster identity 4711 [ 1443.549891][T16784] tipc: Node number set to 4 [ 1445.375008][T16803] capability: warning: `syz.3.3213' uses 32-bit capabilities (legacy support in use) [ 1446.440798][T16806] Set syz1 is full, maxelem 1029 reached [ 1451.456843][T12365] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1451.702207][T12365] usb 4-1: config 0 has no interfaces? [ 1451.707912][T12365] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1451.788628][T12365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.857751][T12365] usb 4-1: config 0 descriptor?? [ 1453.637031][T12365] usb 4-1: USB disconnect, device number 7 [ 1453.809288][ T4350] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1454.911281][ T4350] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.945153][ T4350] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1454.979430][ T4350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.111443][T16886] loop2: detected capacity change from 0 to 128 [ 1455.224811][T16886] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1456.650660][T16886] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1460.769578][T16930] loop3: detected capacity change from 0 to 40427 [ 1460.849423][T16930] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1460.857383][T16930] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1460.947792][T16930] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1460.992000][T16930] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1460.999555][T16930] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1474.792932][T17023] loop5: detected capacity change from 0 to 40427 [ 1474.832724][T17023] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1474.840611][T17023] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1474.898019][T17023] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1474.971952][T17023] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1474.979262][T17023] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1475.324005][T17035] jffs2: notice: (17035) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1475.797042][T17035] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1483.029914][T17090] loop2: detected capacity change from 0 to 40427 [ 1483.064519][T17090] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1483.072386][T17090] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1483.178282][T17090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1483.260248][T17090] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1483.267529][T17090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1483.679419][ T7] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1484.572011][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.578528][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.199327][ T7] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1488.321619][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.348324][ T7] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1488.357783][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.071536][T17168] jffs2: notice: (17168) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1493.903542][T17177] loop6: detected capacity change from 0 to 128 [ 1493.925827][T17177] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1494.751225][T17177] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1496.416103][T17195] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1497.729280][T12519] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1497.921070][T12519] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.955603][T12519] usb 7-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1497.995821][T12519] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.186046][T17200] loop5: detected capacity change from 0 to 32768 [ 1500.219529][T17200] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.3290 (17200) [ 1500.278940][T17200] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1500.349502][T17200] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1500.358258][T17200] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1500.532237][T17200] BTRFS info (device loop5): force clearing of disk cache [ 1500.595928][T17230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3295'. [ 1500.611595][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3295'. [ 1501.333147][T17200] BTRFS info (device loop5): turning off barriers [ 1501.405819][T17228] jffs2: notice: (17228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1501.859550][T17228] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1501.868484][T17200] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1501.908732][T17200] BTRFS info (device loop5): use lzo compression, level 0 [ 1501.940165][T17200] BTRFS info (device loop5): disabling free space tree [ 1501.967809][T17200] BTRFS info (device loop5): enabling ssd optimizations [ 1501.995980][T17200] BTRFS info (device loop5): using spread ssd allocation scheme [ 1502.030209][T17200] BTRFS info (device loop5): not using ssd optimizations [ 1502.068035][T17200] BTRFS info (device loop5): not using spread ssd allocation scheme [ 1503.300646][ T3638] udevd[3638]: worker [16722] /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0 is taking a long time [ 1503.510332][T17200] BTRFS error (device loop5): open_ctree failed: -12 [ 1505.563137][ T4350] usbduxfast 5-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1505.564644][T12366] usbduxfast 3-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1505.572875][ T7] usbduxfast 6-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1505.589398][T12519] usbduxfast 7-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1505.659195][ T4350] usbduxfast: probe of 5-1:1.0 failed with error -2 [ 1505.666589][T12519] usbduxfast: probe of 7-1:1.0 failed with error -2 [ 1505.691055][T12366] usbduxfast: probe of 3-1:1.0 failed with error -110 [ 1505.704557][ T7] usbduxfast: probe of 6-1:1.0 failed with error -2 [ 1505.730665][ T4350] usb 5-1: USB disconnect, device number 11 [ 1505.821345][T17275] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1506.386959][T12366] usb 3-1: USB disconnect, device number 8 [ 1506.493234][T12519] usb 7-1: USB disconnect, device number 12 [ 1506.509252][ T7] usb 6-1: USB disconnect, device number 19 [ 1508.669341][T12519] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1508.913176][T12519] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.951521][T17297] jffs2: notice: (17297) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1508.984600][T12519] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1509.058504][T12519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.762281][T12519] usb 6-1: Direct firmware load for usbduxfast_firmware.bin failed with error -2 [ 1509.772555][T12519] usb 6-1: Falling back to sysfs fallback for: usbduxfast_firmware.bin [ 1514.179761][T12715] Bluetooth: hci3: command 0x0406 tx timeout [ 1516.649601][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1516.991082][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.029265][ T7] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1517.284303][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.686083][ T7] usb 3-1: selecting invalid altsetting 1 [ 1517.753152][T17350] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1518.013444][ T7] comedi comedi6: could not switch to alternate setting 1 [ 1518.022103][ T7] usbduxfast 3-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1518.474809][T17357] jffs2: notice: (17357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1519.499691][T17368] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1520.381249][T10482] usb 3-1: USB disconnect, device number 9 [ 1521.771181][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1522.023739][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.039416][ T14] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1522.058879][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.621450][T17433] 9pnet_fd: Insufficient options for proto=fd [ 1530.870970][T17445] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1537.589797][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1538.223660][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.274788][ T7] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1538.339795][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.769696][T17540] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1546.020888][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.027274][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.878580][T17551] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1555.063907][T17602] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1558.039342][T12647] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1558.232529][T12647] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.253409][T12647] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1558.290425][T12647] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1559.625666][T12647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.667079][T12647] usb 5-1: selecting invalid altsetting 1 [ 1559.674514][T12647] comedi comedi8: could not switch to alternate setting 1 [ 1559.689723][T12647] usbduxfast 5-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1560.113237][T17644] jffs2: notice: (17644) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1562.278118][T12366] usb 5-1: USB disconnect, device number 12 [ 1564.803086][T17664] loop2: detected capacity change from 0 to 32768 [ 1565.037056][T17664] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1567.067780][T16780] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1567.901502][T17702] jffs2: notice: (17702) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1570.663738][ T3638] udevd[3638]: worker [16748] /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0 is taking a long time [ 1571.613951][T12519] usbduxfast 6-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1571.624827][ T14] usbduxfast 3-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1571.633839][ T7] usbduxfast 4-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1571.647320][T12519] usbduxfast: probe of 6-1:1.0 failed with error -110 [ 1571.660895][ T7] usbduxfast: probe of 4-1:1.0 failed with error -2 [ 1571.673202][ T14] usbduxfast: probe of 3-1:1.0 failed with error -2 [ 1571.711658][T12519] usb 6-1: USB disconnect, device number 20 [ 1571.784985][ T7] usb 4-1: USB disconnect, device number 8 [ 1571.801028][ T14] usb 3-1: USB disconnect, device number 10 [ 1573.349260][T12519] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1573.539251][T12519] usb 7-1: Using ep0 maxpacket: 8 [ 1573.550380][T12519] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1573.558754][T12519] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1573.620992][T12519] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1573.654244][T12519] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1573.691800][T12519] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1573.745148][T12519] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1573.785624][T12519] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.049329][T12519] usb 7-1: GET_CAPABILITIES returned 0 [ 1574.054911][T12519] usbtmc 7-1:16.0: can't read capabilities [ 1575.095416][ T4323] usb 7-1: USB disconnect, device number 13 [ 1575.149492][T10482] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1575.351112][T10482] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.389258][T10482] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1575.419357][T10482] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1575.428641][T10482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.518241][T10482] usb 4-1: selecting invalid altsetting 1 [ 1575.524394][T10482] comedi comedi5: could not switch to alternate setting 1 [ 1575.543202][T10482] usbduxfast 4-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1575.941577][T17765] jffs2: notice: (17765) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1577.640826][ T7] usb 4-1: USB disconnect, device number 9 [ 1578.312235][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1579.855697][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.887482][ T7] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1579.935934][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.183028][ T7] usb 4-1: Direct firmware load for usbduxfast_firmware.bin failed with error -2 [ 1580.199197][ T7] usb 4-1: Falling back to sysfs fallback for: usbduxfast_firmware.bin [ 1583.423973][T17819] loop2: detected capacity change from 0 to 8 [ 1583.511084][T17821] jffs2: notice: (17821) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1583.897052][T17819] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1584.049498][T17819] SQUASHFS error: Failed to read block 0x0: -5 [ 1584.193482][T17819] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1584.269482][T17819] SQUASHFS error: Failed to read block 0x0: -5 [ 1584.327118][ T27] audit: type=1800 audit(1791422762.541:232): pid=17819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3419" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 1585.066537][T17838] program syz.2.3425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1587.944755][T17841] loop3: detected capacity change from 0 to 32768 [ 1588.251414][T17841] XFS (loop3): Mounting V5 Filesystem [ 1588.446955][T17869] FAULT_INJECTION: forcing a failure. [ 1588.446955][T17869] name failslab, interval 1, probability 5, space 0, times 9994 [ 1588.485397][T17841] XFS (loop3): log mount failed [ 1589.257131][T17869] CPU: 0 PID: 17869 Comm: syz.2.3430 Not tainted syzkaller #0 [ 1589.264778][T17869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1589.274925][T17869] Call Trace: [ 1589.278226][T17869] [ 1589.281185][T17869] dump_stack_lvl+0x188/0x24e [ 1589.286002][T17869] ? show_regs_print_info+0x12/0x12 [ 1589.291394][T17869] ? load_image+0x410/0x410 [ 1589.295929][T17869] ? __might_sleep+0xd0/0xd0 [ 1589.300627][T17869] ? __lock_acquire+0x7ea0/0x7ea0 [ 1589.305669][T17869] ? format_decode+0xb38/0x1330 [ 1589.310542][T17869] should_fail_ex+0x390/0x4c0 [ 1589.315234][T17869] should_failslab+0x5/0x20 [ 1589.319754][T17869] slab_pre_alloc_hook+0x59/0x300 [ 1589.324801][T17869] ? snd_seq_create_port+0x99/0x6a0 [ 1589.330009][T17869] __kmem_cache_alloc_node+0x4f/0x270 [ 1589.335383][T17869] ? snd_seq_create_port+0x99/0x6a0 [ 1589.340593][T17869] kmalloc_trace+0x26/0xe0 [ 1589.345031][T17869] snd_seq_create_port+0x99/0x6a0 [ 1589.350173][T17869] snd_seq_ioctl_create_port+0xd3/0x640 [ 1589.355846][T17869] snd_seq_oss_open+0x551/0xf00 [ 1589.360721][T17869] ? snd_seq_oss_delete_client+0x50/0x50 [ 1589.366400][T17869] ? __mutex_trylock_common+0x15c/0x260 [ 1589.371963][T17869] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1589.378151][T17869] ? odev_open+0x58/0x90 [ 1589.382437][T17869] ? __lock_acquire+0x7ea0/0x7ea0 [ 1589.387589][T17869] ? snd_seq_oss_process_event+0x2910/0x2910 [ 1589.393656][T17869] ? async_call_lookup_ports+0x10/0x10 [ 1589.399166][T17869] ? do_raw_spin_unlock+0x11d/0x230 [ 1589.404394][T17869] ? soundcore_open+0x309/0x4b0 [ 1589.409268][T17869] odev_open+0x63/0x90 [ 1589.413439][T17869] chrdev_open+0x585/0x5f0 [ 1589.418048][T17869] ? cd_forget+0x160/0x160 [ 1589.422679][T17869] ? fsnotify_perm+0x39b/0x550 [ 1589.427548][T17869] ? cd_forget+0x160/0x160 [ 1589.432118][T17869] do_dentry_open+0x7dd/0x10b0 [ 1589.437000][T17869] path_openat+0x2674/0x2f10 [ 1589.441620][T17869] ? kasan_set_track+0x60/0x70 [ 1589.446411][T17869] ? verify_lock_unused+0x140/0x140 [ 1589.451895][T17869] ? do_sys_openat2+0xdd/0x4f0 [ 1589.456711][T17869] ? do_filp_open+0x420/0x420 [ 1589.461527][T17869] do_filp_open+0x1ee/0x420 [ 1589.466056][T17869] ? vfs_tmpfile+0x470/0x470 [ 1589.470677][T17869] ? _raw_spin_unlock+0x24/0x40 [ 1589.475660][T17869] ? alloc_fd+0x590/0x640 [ 1589.480054][T17869] do_sys_openat2+0x14b/0x4f0 [ 1589.484783][T17869] ? do_sys_open+0xe0/0xe0 [ 1589.489228][T17869] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1589.495241][T17869] ? lock_chain_count+0x20/0x20 [ 1589.500208][T17869] __x64_sys_openat+0x135/0x160 [ 1589.505081][T17869] do_syscall_64+0x4c/0xa0 [ 1589.509602][T17869] ? clear_bhb_loop+0x60/0xb0 [ 1589.514312][T17869] ? clear_bhb_loop+0x60/0xb0 [ 1589.519046][T17869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1589.525251][T17869] RIP: 0033:0x7ff23f39e199 [ 1589.529694][T17869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.549322][T17869] RSP: 002b:00007ff2401cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1589.557762][T17869] RAX: ffffffffffffffda RBX: 00007ff23f625fa0 RCX: 00007ff23f39e199 [ 1589.565809][T17869] RDX: 0000000000123482 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 1589.573893][T17869] RBP: 00007ff23f4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1589.582173][T17869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1589.590373][T17869] R13: 00007ff23f626038 R14: 00007ff23f625fa0 R15: 00007ffdd7baef98 [ 1589.598388][T17869] [ 1589.634613][T17881] loop5: detected capacity change from 0 to 164 [ 1589.659351][T17869] ALSA: seq_oss: can't create port [ 1590.479682][T17885] rock: directory entry would overflow storage [ 1590.486321][T17885] rock: sig=0x4f50, size=4, remaining=3 [ 1590.492001][T17885] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1591.428791][T17901] jffs2: notice: (17901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1592.965465][T17928] loop3: detected capacity change from 0 to 1024 [ 1593.029342][T12365] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1593.250781][T12365] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.300411][T12365] usb 7-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1593.322238][T16779] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1593.371728][T12365] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.719582][T17935] 9pnet_fd: Insufficient options for proto=fd [ 1596.646946][T17950] jffs2: notice: (17950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1603.005476][T17997] jffs2: notice: (17997) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1606.519223][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1606.731330][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.769287][ T14] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1606.778572][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.510570][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.633783][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.371377][T18032] loop2: detected capacity change from 0 to 164 [ 1611.751147][T18038] rock: directory entry would overflow storage [ 1611.757472][T18038] rock: sig=0x4f50, size=4, remaining=3 [ 1611.763424][T18038] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1612.965756][T18044] loop2: detected capacity change from 0 to 2048 [ 1613.025604][T18044] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1614.504180][T18044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1617.679230][ T4323] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1618.500703][ T4323] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.511153][ T4323] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1618.520829][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.130923][T18079] loop4: detected capacity change from 0 to 4096 [ 1620.072838][T18086] jffs2: notice: (18086) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1620.127124][T12715] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 1620.137429][T12715] CPU: 1 PID: 12715 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1620.145464][T12715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1620.155671][T12715] Workqueue: hci3 hci_rx_work [ 1620.160521][T12715] Call Trace: [ 1620.163844][T12715] [ 1620.166844][T12715] dump_stack_lvl+0x188/0x24e [ 1620.171580][T12715] ? show_regs_print_info+0x12/0x12 [ 1620.176897][T12715] ? load_image+0x410/0x410 [ 1620.181616][T12715] sysfs_create_dir_ns+0x26a/0x290 [ 1620.186768][T12715] ? __lock_acquire+0x7ea0/0x7ea0 [ 1620.191831][T12715] ? sysfs_warn_dup+0xa0/0xa0 [ 1620.196567][T12715] ? do_raw_spin_unlock+0x11d/0x230 [ 1620.201794][T12715] kobject_add_internal+0x617/0xca0 [ 1620.207177][T12715] kobject_add+0x160/0x230 [ 1620.211896][T12715] ? kobject_init+0x1c0/0x1c0 [ 1620.216734][T12715] ? __raw_spin_lock_init+0x41/0x100 [ 1620.222066][T12715] ? klist_children_get+0x50/0x50 [ 1620.227131][T12715] ? get_device_parent+0x121/0x3e0 [ 1620.232292][T12715] device_add+0x470/0x1050 [ 1620.236778][T12715] hci_conn_add_sysfs+0xd1/0x1e0 [ 1620.241771][T12715] hci_sync_conn_complete_evt+0x707/0xab0 [ 1620.247641][T12715] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 1620.253778][T12715] hci_event_packet+0x806/0x1290 [ 1620.258770][T12715] ? lock_chain_count+0x20/0x20 [ 1620.263672][T12715] ? bis_list+0x280/0x280 [ 1620.268020][T12715] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1620.274057][T12715] ? kcov_remote_start+0x50f/0x810 [ 1620.279202][T12715] ? lockdep_hardirqs_on+0x94/0x140 [ 1620.284783][T12715] ? hci_send_to_monitor+0x9c/0x4a0 [ 1620.290144][T12715] hci_rx_work+0x3eb/0xd40 [ 1620.294607][T12715] ? _raw_spin_unlock+0x40/0x40 [ 1620.299681][T12715] ? process_one_work+0x7b4/0x1160 [ 1620.305043][T12715] process_one_work+0x8ab/0x1160 [ 1620.310220][T12715] ? worker_detach_from_pool+0x240/0x240 [ 1620.315967][T12715] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1620.321153][T12715] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1620.326876][T12715] ? wq_worker_running+0x97/0x190 [ 1620.331944][T12715] worker_thread+0xaf5/0x12a0 [ 1620.336676][T12715] kthread+0x29d/0x330 [ 1620.340753][T12715] ? worker_clr_flags+0x1a0/0x1a0 [ 1620.345800][T12715] ? kthread_blkcg+0xd0/0xd0 [ 1620.350406][T12715] ret_from_fork+0x1f/0x30 [ 1620.354882][T12715] [ 1620.358968][T12715] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1620.374986][T12715] Bluetooth: hci3: failed to register connection device [ 1622.409211][T12715] Bluetooth: hci3: command 0x0409 tx timeout [ 1624.275271][T10482] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1624.506259][T10482] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.522837][T10482] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1624.550432][T10482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.450284][T18110] loop5: detected capacity change from 0 to 128 [ 1625.464653][T18110] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1625.508028][T18110] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1625.855749][ T6322] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1626.768122][T18136] loop4: detected capacity change from 0 to 512 [ 1626.900353][T18136] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1627.048179][ T27] audit: type=1326 audit(1791422805.261:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18135 comm="syz.4.3494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1019e199 code=0x7ffc0000 [ 1627.135760][T18136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.3494: bg 0: bad block bitmap checksum [ 1627.217656][ T27] audit: type=1326 audit(1791422805.261:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18135 comm="syz.4.3494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f1019e199 code=0x7ffc0000 [ 1627.388990][ T27] audit: type=1326 audit(1791422805.321:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18135 comm="syz.4.3494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1019e199 code=0x7ffc0000 [ 1627.510918][ T27] audit: type=1326 audit(1791422805.321:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18135 comm="syz.4.3494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1019e199 code=0x7ffc0000 [ 1627.617262][ T27] audit: type=1326 audit(1791422805.321:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18135 comm="syz.4.3494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f8f1019e199 code=0x7ffc0000 [ 1627.619770][T15690] EXT4-fs (loop4): unmounting filesystem. [ 1628.934709][ T27] audit: type=1326 audit(1791422805.581:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18135 comm="syz.4.3494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1019e199 code=0x7ffc0000 [ 1629.099949][ T27] audit: type=1326 audit(1791422805.581:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18135 comm="syz.4.3494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1019e199 code=0x7ffc0000 [ 1637.193634][T18201] FAULT_INJECTION: forcing a failure. [ 1637.193634][T18201] name failslab, interval 1, probability 5, space 0, times 9993 [ 1637.265442][T18201] CPU: 1 PID: 18201 Comm: syz.6.3513 Not tainted syzkaller #0 [ 1637.273275][T18201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1637.283378][T18201] Call Trace: [ 1637.286700][T18201] [ 1637.289669][T18201] dump_stack_lvl+0x188/0x24e [ 1637.294490][T18201] ? show_regs_print_info+0x12/0x12 [ 1637.300454][T18201] ? load_image+0x410/0x410 [ 1637.305023][T18201] ? __lock_acquire+0x7ea0/0x7ea0 [ 1637.310280][T18201] should_fail_ex+0x390/0x4c0 [ 1637.315017][T18201] should_failslab+0x5/0x20 [ 1637.319571][T18201] slab_pre_alloc_hook+0x59/0x300 [ 1637.325091][T18201] ? __split_vma+0x4f0/0x4f0 [ 1637.329780][T18201] ? up_write+0x1b6/0x410 [ 1637.334354][T18201] kmem_cache_alloc+0x56/0x2f0 [ 1637.339255][T18201] ? vm_area_dup+0x23/0x1a0 [ 1637.343881][T18201] vm_area_dup+0x23/0x1a0 [ 1637.348348][T18201] __split_vma+0xb9/0x4f0 [ 1637.352736][T18201] ? split_vma+0x70/0xf0 [ 1637.357126][T18201] mprotect_fixup+0x5dc/0x840 [ 1637.361907][T18201] ? change_protection+0x3980/0x3980 [ 1637.367315][T18201] ? mas_walk+0x15f/0x180 [ 1637.371833][T18201] ? apparmor_file_mprotect+0xf4/0x110 [ 1637.377341][T18201] ? bpf_lsm_file_mprotect+0x5/0x10 [ 1637.382555][T18201] ? security_file_mprotect+0x7e/0xb0 [ 1637.387946][T18201] do_mprotect_pkey+0x7ff/0xba0 [ 1637.393762][T18201] ? do_futex+0x2e2/0x320 [ 1637.398758][T18201] ? prot_none_test+0x10/0x10 [ 1637.403505][T18201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1637.410362][T18201] __x64_sys_mprotect+0x7c/0x90 [ 1637.415309][T18201] do_syscall_64+0x4c/0xa0 [ 1637.419871][T18201] ? clear_bhb_loop+0x60/0xb0 [ 1637.424584][T18201] ? clear_bhb_loop+0x60/0xb0 [ 1637.429311][T18201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1637.435374][T18201] RIP: 0033:0x7f2e6399e199 [ 1637.439837][T18201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.459907][T18201] RSP: 002b:00007f2e64949028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1637.468367][T18201] RAX: ffffffffffffffda RBX: 00007f2e63c25fa0 RCX: 00007f2e6399e199 [ 1637.476587][T18201] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000147000 [ 1637.484701][T18201] RBP: 00007f2e63a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1637.492992][T18201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1637.501927][T18201] R13: 00007f2e63c26038 R14: 00007f2e63c25fa0 R15: 00007ffe8f688e18 [ 1637.510220][T18201] [ 1637.807401][T18206] 9pnet_fd: Insufficient options for proto=fd [ 1640.925918][T18220] 9pnet_fd: Insufficient options for proto=fd [ 1641.066728][T18223] loop4: detected capacity change from 0 to 512 [ 1643.763378][T12365] usbduxfast 7-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1643.764009][ T7] usbduxfast 4-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1643.772468][ T4323] usbduxfast 6-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1643.781715][ T14] usbduxfast 3-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1643.790369][T10482] usbduxfast 5-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1643.832032][T12365] usbduxfast: probe of 7-1:1.0 failed with error -2 [ 1643.856334][ T14] usbduxfast: probe of 3-1:1.0 failed with error -2 [ 1643.878068][T12365] usb 7-1: USB disconnect, device number 14 [ 1643.889550][T10482] usbduxfast: probe of 5-1:1.0 failed with error -2 [ 1643.899539][ T4323] usbduxfast: probe of 6-1:1.0 failed with error -2 [ 1643.899739][ T7] usbduxfast: probe of 4-1:1.0 failed with error -110 [ 1643.948224][T10482] usb 5-1: USB disconnect, device number 13 [ 1643.955141][ T14] usb 3-1: USB disconnect, device number 11 [ 1643.962740][ T4323] usb 6-1: USB disconnect, device number 21 [ 1644.027765][ T7] usb 4-1: USB disconnect, device number 10 [ 1645.318854][T18244] team0: Device ipvlan1 failed to register rx_handler [ 1645.446986][T18252] jffs2: notice: (18252) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1645.619178][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1645.811924][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.829462][ T7] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 1645.838882][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.792917][ T7] usb 5-1: Direct firmware load for usbduxfast_firmware.bin failed with error -2 [ 1646.802635][ T7] usb 5-1: Falling back to sysfs fallback for: usbduxfast_firmware.bin [ 1646.938515][T18247] loop5: detected capacity change from 0 to 32768 [ 1646.993270][T18247] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 1647.287456][T18262] 9pnet_fd: Insufficient options for proto=fd [ 1648.272254][T18268] loop2: detected capacity change from 0 to 128 [ 1648.377053][T18120] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 1648.716854][T18270] loop6: detected capacity change from 0 to 4096 [ 1649.926900][T18270] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1650.567809][T18288] 9pnet_fd: Insufficient options for proto=fd [ 1653.287852][T18303] FAULT_INJECTION: forcing a failure. [ 1653.287852][T18303] name failslab, interval 1, probability 5, space 0, times 9992 [ 1653.374176][T18303] CPU: 1 PID: 18303 Comm: syz.4.3549 Not tainted syzkaller #0 [ 1653.381929][T18303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1653.392041][T18303] Call Trace: [ 1653.395359][T18303] [ 1653.398321][T18303] dump_stack_lvl+0x188/0x24e [ 1653.403130][T18303] ? show_regs_print_info+0x12/0x12 [ 1653.408364][T18303] ? load_image+0x410/0x410 [ 1653.412912][T18303] ? __lock_acquire+0x7ea0/0x7ea0 [ 1653.418222][T18303] should_fail_ex+0x390/0x4c0 [ 1653.422966][T18303] should_failslab+0x5/0x20 [ 1653.427608][T18303] slab_pre_alloc_hook+0x59/0x300 [ 1653.432683][T18303] kmem_cache_alloc_lru+0x49/0x2e0 [ 1653.437807][T18303] ? sock_alloc_inode+0x24/0xc0 [ 1653.442786][T18303] sock_alloc_inode+0x24/0xc0 [ 1653.447565][T18303] ? sockfs_init_fs_context+0xa0/0xa0 [ 1653.452949][T18303] new_inode_pseudo+0x5f/0x1c0 [ 1653.457927][T18303] __sock_create+0x129/0x940 [ 1653.462524][T18303] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1653.468533][T18303] __sys_socket+0xc4/0x190 [ 1653.472979][T18303] __x64_sys_socket+0x76/0x80 [ 1653.477756][T18303] do_syscall_64+0x4c/0xa0 [ 1653.482182][T18303] ? clear_bhb_loop+0x60/0xb0 [ 1653.486880][T18303] ? clear_bhb_loop+0x60/0xb0 [ 1653.491590][T18303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1653.497513][T18303] RIP: 0033:0x7f8f1019e199 [ 1653.501935][T18303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1653.521559][T18303] RSP: 002b:00007f8f11063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1653.530037][T18303] RAX: ffffffffffffffda RBX: 00007f8f10425fa0 RCX: 00007f8f1019e199 [ 1653.538080][T18303] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1653.546092][T18303] RBP: 00007f8f102358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1653.554160][T18303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1653.562137][T18303] R13: 00007f8f10426038 R14: 00007f8f10425fa0 R15: 00007fff05686828 [ 1653.570314][T18303] [ 1654.489627][T18303] socket: no more sockets [ 1657.086942][T18333] 9pnet_fd: Insufficient options for proto=fd [ 1659.058866][T18350] jffs2: notice: (18350) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1660.888582][T18355] CacheFiles: No cache directory specified [ 1661.046676][T18357] overlayfs: failed to resolve './file1': -2 [ 1663.327872][T18350] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1664.645778][T18370] 9pnet_fd: Insufficient options for proto=fd [ 1669.492574][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.499358][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.701388][T18395] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1669.710325][T18395] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1678.957296][T18436] 9pnet_fd: Insufficient options for proto=fd [ 1680.280816][T18447] loop4: detected capacity change from 0 to 8 [ 1680.488702][T18452] jffs2: notice: (18452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1680.510377][T18447] SQUASHFS error: Failed to read block 0x8f: -5 [ 1680.548823][ T27] audit: type=1800 audit(1791422858.761:240): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3583" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 1685.409393][ T8825] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1685.610569][ T8825] usb 4-1: not running at top speed; connect to a high speed hub [ 1685.647779][T18479] loop2: detected capacity change from 0 to 40427 [ 1685.656634][T18479] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1685.664528][T18479] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1685.728352][ T8825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.760670][ T8825] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1685.783131][T18479] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1685.789282][ T8825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.838758][T18479] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1685.846438][T18479] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1685.883070][ T27] audit: type=1800 audit(1791422864.101:241): pid=18479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3590" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 1685.918993][ T8825] usb 4-1: Found UVC 1.00 device (046d:0825) [ 1686.060580][T18488] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 1686.206995][T18489] syz.2.3590: attempt to access beyond end of device [ 1686.206995][T18489] loop2: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 1686.473463][ T8825] usb 4-1: No streaming interface found for terminal 2. [ 1687.653674][T18485] 9pnet_fd: Insufficient options for proto=fd [ 1687.708180][ T8825] usb 4-1: USB disconnect, device number 11 [ 1693.573609][T18522] jffs2: notice: (18522) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1693.815392][T18525] 9pnet_fd: Insufficient options for proto=fd [ 1697.209816][T18553] jffs2: notice: (18553) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1697.972577][T18553] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1701.672733][T18573] jffs2: notice: (18573) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1702.459770][T18579] device syzkaller0 entered promiscuous mode [ 1702.623362][T18589] jffs2: notice: (18589) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1708.859639][ T3638] udevd[3638]: worker [16748] /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0 is taking a long time [ 1709.964504][ T7] usbduxfast 5-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 1709.975334][ T7] usbduxfast: probe of 5-1:1.0 failed with error -110 [ 1709.987111][ T7] usb 5-1: USB disconnect, device number 14 [ 1711.790955][T18628] jffs2: notice: (18628) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1712.566806][T18628] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1713.012845][T18632] loop3: detected capacity change from 0 to 256 [ 1713.980375][T18634] jffs2: notice: (18634) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1714.828803][T18634] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1717.335563][T18659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1717.348705][T18659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1717.358468][T18659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1717.385341][T18659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1717.395687][T18659] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1717.405005][T18659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1717.474976][T18662] Bluetooth: MGMT ver 1.22 [ 1719.920305][T18659] Bluetooth: hci4: command 0x0409 tx timeout [ 1722.009618][T18659] Bluetooth: hci4: command 0x041b tx timeout [ 1724.089448][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 1724.096801][ T4272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1724.110577][ T4272] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1724.120953][ T4272] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1724.151296][ T4272] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1724.163336][ T4272] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1724.179003][ T4272] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1724.252293][T18701] jffs2: notice: (18701) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1726.209180][T18659] Bluetooth: hci4: command 0x0419 tx timeout [ 1726.268959][T18659] Bluetooth: hci6: command 0x0409 tx timeout [ 1728.458230][T18659] Bluetooth: hci6: command 0x041b tx timeout [ 1728.483803][ T4272] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1728.495828][ T4272] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1728.505564][ T4272] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1728.514596][ T4272] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1728.523255][ T4272] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1728.530970][ T4272] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1730.342868][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.349382][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.490005][T18659] Bluetooth: hci6: command 0x040f tx timeout [ 1730.571048][T18659] Bluetooth: hci7: command 0x0409 tx timeout [ 1733.412915][T18659] Bluetooth: hci6: command 0x0419 tx timeout [ 1733.413457][ T4272] Bluetooth: hci7: command 0x041b tx timeout [ 1733.807647][T18610] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1733.825495][T18610] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1735.504696][ T4272] Bluetooth: hci7: command 0x040f tx timeout [ 1737.371615][T18657] chnl_net:caif_netlink_parms(): no params data found [ 1737.392814][T18718] chnl_net:caif_netlink_parms(): no params data found [ 1737.416304][T18696] chnl_net:caif_netlink_parms(): no params data found [ 1737.529938][ T4272] Bluetooth: hci7: command 0x0419 tx timeout [ 1739.203106][T16551] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.494474][T16551] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.562797][T18696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.571590][T18696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.580463][T18696] device bridge_slave_0 entered promiscuous mode [ 1739.693210][T18657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.701553][T18657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.823106][T18657] device bridge_slave_0 entered promiscuous mode [ 1739.894245][T18718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.901802][T18718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.923945][T18718] device bridge_slave_0 entered promiscuous mode [ 1739.945311][T18718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.952689][T18718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.967174][T18718] device bridge_slave_1 entered promiscuous mode [ 1740.105090][T18718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.132263][T18718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1740.490611][T18718] team0: Port device team_slave_0 added [ 1740.591759][T16551] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.626204][T18696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.659335][T18696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.686453][T18696] device bridge_slave_1 entered promiscuous mode [ 1740.697957][T18657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.706095][T18657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.495966][T18657] device bridge_slave_1 entered promiscuous mode [ 1741.511842][T18718] team0: Port device team_slave_1 added [ 1741.645675][T16551] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.745797][T18696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1741.793583][T18696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1741.822895][T18718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1741.842943][T18718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.929244][T18718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1742.015731][T18657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.147929][T18718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1742.164213][T18718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1742.314075][T18718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1742.417216][T18657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1742.736835][T18696] team0: Port device team_slave_0 added [ 1743.661973][T18657] team0: Port device team_slave_0 added [ 1743.681471][T18696] team0: Port device team_slave_1 added [ 1743.721326][T18718] device hsr_slave_0 entered promiscuous mode [ 1743.749601][T18718] device hsr_slave_1 entered promiscuous mode [ 1743.779438][T18718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1743.787660][T18718] Cannot create hsr debugfs directory [ 1743.812193][T18657] team0: Port device team_slave_1 added [ 1743.871646][T18696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.878839][T18696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1743.959347][T18696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1744.041445][T18696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1744.048652][T18696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.129912][T18696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.259693][T18657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1744.266719][T18657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.385041][T18657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1744.446293][T16551] tipc: Left network mode [ 1744.463961][T18696] device hsr_slave_0 entered promiscuous mode [ 1744.482432][T18696] device hsr_slave_1 entered promiscuous mode [ 1744.589234][T18696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1744.596980][T18696] Cannot create hsr debugfs directory [ 1744.640829][T18657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1744.647992][T18657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.719192][T18657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.991718][T18806] overlayfs: unrecognized mount option "verity=require" or missing value [ 1748.201802][T18814] loop2: detected capacity change from 0 to 164 [ 1748.233482][T18814] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1748.402435][T18657] device hsr_slave_0 entered promiscuous mode [ 1748.440702][T18814] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1748.467047][T18657] device hsr_slave_1 entered promiscuous mode [ 1748.480168][T18657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1748.514751][T18657] Cannot create hsr debugfs directory [ 1748.733237][T18819] loop2: detected capacity change from 0 to 512 [ 1749.974960][T18718] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1750.064745][T18718] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1750.190441][T18718] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1750.294997][T18718] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1750.408784][T18696] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1750.457602][T18696] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1750.734639][T18696] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1750.755032][T18825] loop3: detected capacity change from 0 to 40427 [ 1750.846501][T18696] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1750.868404][T18825] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1750.904923][T18825] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1750.933808][T18825] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1751.100220][T18825] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1751.107353][T18825] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1752.133312][ T27] audit: type=1800 audit(1791422930.351:242): pid=18825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3678" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1752.167924][T18825] syz.3.3678: attempt to access beyond end of device [ 1752.167924][T18825] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 1752.197702][T16551] device hsr_slave_0 left promiscuous mode [ 1752.270232][T16551] device hsr_slave_1 left promiscuous mode [ 1752.329528][T16551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1752.349420][T16551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1752.368878][T16551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1752.406052][T16551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1752.434736][T16551] device bridge_slave_1 left promiscuous mode [ 1752.451743][T16551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.473358][T16551] device bridge_slave_0 left promiscuous mode [ 1752.487197][T16551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.597841][T16551] device veth1_macvtap left promiscuous mode [ 1752.631920][T16551] device veth0_macvtap left promiscuous mode [ 1752.638144][T16551] device veth1_vlan left promiscuous mode [ 1752.651034][T16551] device veth0_vlan left promiscuous mode [ 1756.809648][T12647] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1756.875646][T18864] Set syz1 is full, maxelem 6117 reached [ 1757.031187][T12647] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.044284][T12647] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1757.055391][T12647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.064761][T12647] usb 4-1: Product: syz [ 1757.068990][T12647] usb 4-1: Manufacturer: syz [ 1757.074354][T12647] usb 4-1: SerialNumber: syz [ 1757.081705][T12647] usb 4-1: config 0 descriptor?? [ 1757.106643][T12647] powermate: probe of 4-1:0.0 failed with error -22 [ 1757.292987][T16551] team0 (unregistering): Port device team_slave_1 removed [ 1757.333941][T12647] usb 4-1: USB disconnect, device number 12 [ 1757.392971][T16551] team0 (unregistering): Port device team_slave_0 removed [ 1757.473244][T16551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1757.559608][T16551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1759.461973][T18877] overlayfs: unrecognized mount option "verity=require" or missing value [ 1761.269393][T18879] Set syz1 is full, maxelem 6117 reached [ 1761.291755][T16551] bond0 (unregistering): Released all slaves [ 1761.452896][T18657] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1761.486668][T18657] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1761.526151][T18718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.537379][T18657] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1761.604406][T18657] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1761.641075][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1761.655114][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1761.685909][T18718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1761.745214][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1761.755997][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1761.766484][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.773850][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1761.822234][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1761.833010][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1761.880160][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1761.890385][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.897598][ T4553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1761.908324][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1761.936921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1761.959457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1761.985068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1762.051849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1762.071460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1762.081412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1762.107537][T18696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.134945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1762.146510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1762.185950][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1762.204408][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1762.241475][T18696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.248583][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1762.307067][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1762.330274][T18718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1764.641508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1764.662551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1764.695879][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.703210][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.762721][T18657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.797535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1764.816370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1764.838077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1764.854909][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.862247][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.893400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1764.928946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1764.970785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1765.003590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1765.034327][T18657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.099538][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1765.139565][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1765.170170][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1765.199824][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1765.229426][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.236602][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.312493][T18696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1765.349402][T18696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1765.410955][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1765.448288][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1765.460515][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1765.492267][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1765.550611][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1765.579908][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1765.609820][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1765.649560][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1765.680016][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1765.699928][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1765.718556][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.725892][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.770355][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1765.789865][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1765.828213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1765.874086][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1765.921885][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1765.999535][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1766.007758][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1766.067092][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1766.104202][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1766.156512][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1766.188701][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1766.205094][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1766.223898][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1766.244383][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1766.271972][T18657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1766.296550][T18718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1768.229608][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1768.237383][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1768.262204][T18696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1768.674786][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1768.688087][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1768.776911][T18657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1769.183872][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1769.210846][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1769.324441][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1769.365950][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1769.367028][T18967] FAULT_INJECTION: forcing a failure. [ 1769.367028][T18967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1769.387073][T18967] CPU: 0 PID: 18967 Comm: syz.2.3697 Not tainted syzkaller #0 [ 1769.394587][T18967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1769.400961][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1769.404934][T18967] Call Trace: [ 1769.404947][T18967] [ 1769.404958][T18967] dump_stack_lvl+0x188/0x24e [ 1769.405003][T18967] ? show_regs_print_info+0x12/0x12 [ 1769.405029][T18967] ? load_image+0x410/0x410 [ 1769.405069][T18967] ? __lock_acquire+0x7ea0/0x7ea0 [ 1769.405099][T18967] ? __kasan_slab_alloc+0x6b/0x80 [ 1769.405132][T18967] should_fail_ex+0x390/0x4c0 [ 1769.405168][T18967] strncpy_from_user+0x32/0x340 [ 1769.405270][T18967] getname_flags+0xf2/0x500 [ 1769.457980][T18967] do_sys_openat2+0xdd/0x4f0 [ 1769.462704][T18967] ? do_sys_open+0xe0/0xe0 [ 1769.467149][T18967] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1769.473382][T18967] ? lock_chain_count+0x20/0x20 [ 1769.478777][T18967] __x64_sys_openat+0x135/0x160 [ 1769.483670][T18967] do_syscall_64+0x4c/0xa0 [ 1769.488544][T18967] ? clear_bhb_loop+0x60/0xb0 [ 1769.493435][T18967] ? clear_bhb_loop+0x60/0xb0 [ 1769.498142][T18967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1769.504140][T18967] RIP: 0033:0x7ff23f35e9ce [ 1769.509008][T18967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1769.528907][T18967] RSP: 002b:00007ff2401ccec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1769.537358][T18967] RAX: ffffffffffffffda RBX: 00007ff2401cd6c0 RCX: 00007ff23f35e9ce [ 1769.545357][T18967] RDX: 0000000000000002 RSI: 00007ff2401ccf90 RDI: ffffffffffffff9c [ 1769.553451][T18967] RBP: 00007ff23f4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1769.561531][T18967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1769.569700][T18967] R13: 00007ff23f626038 R14: 00007ff23f625fa0 R15: 00007ffdd7baef98 [ 1769.577795][T18967] [ 1769.584519][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1769.597912][T18718] device veth0_vlan entered promiscuous mode [ 1769.664247][T18718] device veth1_vlan entered promiscuous mode [ 1769.781827][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1769.800487][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1769.847849][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1769.901688][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1769.948447][T18718] device veth0_macvtap entered promiscuous mode [ 1769.998000][T18718] device veth1_macvtap entered promiscuous mode [ 1770.081767][T18718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1770.133398][T18718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.177719][T18718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1770.191569][T18718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.209664][T18718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1770.228965][T18718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.263467][T18718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1770.329810][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1770.411166][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1770.440372][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1770.460225][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1771.272816][T18718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1771.382205][T18718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.464343][T18718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1771.597879][T18718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.695260][T18718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1771.848041][T18718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.865631][T18718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1771.887353][T18718] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.896439][T18718] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.906322][T18718] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.915588][T18718] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.967188][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1771.993613][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1772.207374][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1772.312651][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1772.415799][T18988] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1772.455735][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1772.482883][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1772.625540][T18657] device veth0_vlan entered promiscuous mode [ 1772.693881][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1772.709498][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1772.732037][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1774.063876][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1774.074645][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1774.083529][T18995] jffs2: notice: (18995) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1774.083974][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1774.110061][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1774.152559][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1774.182279][T18696] device veth0_vlan entered promiscuous mode [ 1774.231369][T18657] device veth1_vlan entered promiscuous mode [ 1774.256787][ T4553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.261242][T18696] device veth1_vlan entered promiscuous mode [ 1774.277587][ T4553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.311425][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1774.389352][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.397286][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.440062][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1774.459523][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1774.500013][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1775.832034][T18696] device veth0_macvtap entered promiscuous mode [ 1775.857970][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1775.923072][T18696] device veth1_macvtap entered promiscuous mode [ 1775.951325][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1775.980082][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1776.024488][T18657] device veth0_macvtap entered promiscuous mode [ 1776.081861][T18657] device veth1_macvtap entered promiscuous mode [ 1776.102502][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1776.149231][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.179733][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1776.369173][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.649739][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1776.666186][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.712810][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1776.756823][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.947804][T18696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1777.159296][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1777.191708][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1777.239989][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1777.289642][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1777.357279][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1777.389188][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.426906][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1777.527560][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.604344][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1777.659277][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.716649][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1777.768987][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.167474][T18696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1779.224456][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1779.260263][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1779.316219][T18696] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.361108][T18696] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.409192][T18696] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.418070][T18696] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.737231][ T8825] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1779.900962][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1779.929742][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1779.940978][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1779.954932][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1779.963139][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1779.970901][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1780.005976][ T8825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.045382][ T8825] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1780.056135][ T8825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.077974][ T8825] usb 3-1: config 0 descriptor?? [ 1780.085921][T19037] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1780.106897][ T8825] pwc: Askey VC010 type 2 USB webcam detected. [ 1780.507266][ T8825] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1780.531826][ T8825] pwc: recv_control_msg error -32 req 02 val 2700 [ 1780.560138][ T8825] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1780.590061][ T8825] pwc: recv_control_msg error -32 req 04 val 1000 [ 1780.604743][ T8825] pwc: recv_control_msg error -32 req 04 val 1300 [ 1780.624597][ T8825] pwc: recv_control_msg error -32 req 04 val 1400 [ 1780.648780][ T8825] pwc: recv_control_msg error -32 req 02 val 2000 [ 1782.007467][ T8825] pwc: recv_control_msg error -32 req 02 val 2100 [ 1782.014625][T18659] Bluetooth: hci0: command 0x0409 tx timeout [ 1782.233278][ T8825] pwc: recv_control_msg error -71 req 02 val 2500 [ 1782.258525][ T8825] pwc: recv_control_msg error -71 req 02 val 2400 [ 1782.269576][ T8825] pwc: recv_control_msg error -71 req 02 val 2600 [ 1782.284875][ T8825] pwc: recv_control_msg error -71 req 02 val 2900 [ 1782.325202][ T8825] pwc: recv_control_msg error -71 req 02 val 2800 [ 1782.355926][ T8825] pwc: recv_control_msg error -71 req 04 val 1100 [ 1782.404396][ T8825] pwc: recv_control_msg error -71 req 04 val 1200 [ 1782.456051][T10619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.089990][T18659] Bluetooth: hci0: command 0x041b tx timeout [ 1784.120367][T19050] 9pnet_fd: Insufficient options for proto=fd [ 1784.159343][T10619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.176808][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1784.197778][ T8825] pwc: Registered as video103. [ 1784.206660][ T8825] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 1784.228903][ T8825] usb 3-1: USB disconnect, device number 12 [ 1784.732601][T19034] chnl_net:caif_netlink_parms(): no params data found [ 1785.675642][T19064] usb usb7: usbfs: process 19064 (syz.2.3716) did not claim interface 0 before use [ 1787.419153][T18659] Bluetooth: hci0: command 0x040f tx timeout [ 1787.527335][T19034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.589488][T19034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.598062][T19034] device bridge_slave_0 entered promiscuous mode [ 1787.785491][T18698] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1787.798260][T18698] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1787.809987][T18698] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1787.840238][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1787.863389][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1787.871328][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1788.162302][T19034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.189838][T19034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.210095][T19034] device bridge_slave_1 entered promiscuous mode [ 1790.140551][T18659] Bluetooth: hci0: command 0x0419 tx timeout [ 1790.140746][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 1790.175161][T19034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1790.248360][T19034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1790.706656][T19034] team0: Port device team_slave_0 added [ 1792.677511][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 1792.701219][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.710789][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.817249][T19034] team0: Port device team_slave_1 added [ 1793.105167][T19034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1793.139382][T19034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1793.269288][T19034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1794.314451][T19034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1794.361081][T19034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1794.489265][T19034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1795.853475][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 1797.352014][T19034] device hsr_slave_0 entered promiscuous mode [ 1797.476058][T19034] device hsr_slave_1 entered promiscuous mode [ 1797.533160][T19034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1797.549117][T19034] Cannot create hsr debugfs directory [ 1797.673397][T19077] chnl_net:caif_netlink_parms(): no params data found [ 1797.929872][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 1798.173012][ T4412] device hsr_slave_0 left promiscuous mode [ 1798.409324][ T4412] device hsr_slave_1 left promiscuous mode [ 1798.470448][T19137] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1798.589832][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1798.612574][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.652236][ T4412] device bridge_slave_1 left promiscuous mode [ 1798.699849][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.799969][ T4412] device bridge_slave_0 left promiscuous mode [ 1798.806507][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.896473][ T4412] device veth1_macvtap left promiscuous mode [ 1798.929266][ T4412] device veth0_macvtap left promiscuous mode [ 1798.945916][ T4412] device veth1_vlan left promiscuous mode [ 1798.964012][ T4412] device veth0_vlan left promiscuous mode [ 1805.206866][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 1805.404516][T19174] 9pnet_fd: Insufficient options for proto=fd [ 1805.511791][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 1805.620056][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.697180][T19179] loop3: detected capacity change from 0 to 16 [ 1805.735735][T19179] erofs: (device loop3): mounted with root inode @ nid 36. [ 1805.747925][T19179] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1805.758797][T19179] overlayfs: missing 'lowerdir' [ 1806.566746][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1807.100709][ T4412] bond0 (unregistering): Released all slaves [ 1807.313858][T19164] tipc: Started in network mode [ 1807.318778][T19164] tipc: Node identity 4, cluster identity 4711 [ 1807.325179][T19164] tipc: Node number set to 4 [ 1807.475232][T19183] loop3: detected capacity change from 0 to 512 [ 1807.570746][T19183] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1807.671622][T19183] EXT4-fs (loop3): invalid journal inode [ 1807.677632][T19183] EXT4-fs (loop3): can't get journal size [ 1807.706713][T19183] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.3734: blocks 4-4 from inode overlap system zone [ 1807.832588][T19183] EXT4-fs (loop3): Remounting filesystem read-only [ 1807.899169][T19183] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1807.921122][T19077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.928564][T19077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.929925][T19183] EXT4-fs (loop3): mount failed [ 1807.993228][T19077] device bridge_slave_0 entered promiscuous mode [ 1808.033427][T19077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.074915][T19077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.089280][T19077] device bridge_slave_1 entered promiscuous mode [ 1808.196488][T19077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.459695][T19077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1808.744638][T19077] team0: Port device team_slave_0 added [ 1808.762756][T19077] team0: Port device team_slave_1 added [ 1808.850003][T19197] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1809.001713][T19077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1809.008721][T19077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1809.238245][T19077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1809.726065][T19077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1809.862951][T19077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1809.939289][T19077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.673620][T19077] device hsr_slave_0 entered promiscuous mode [ 1811.765483][T19077] device hsr_slave_1 entered promiscuous mode [ 1811.802869][T19077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1811.823053][T19077] Cannot create hsr debugfs directory [ 1813.466253][ T4412] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.635751][T19034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1813.801506][ T4412] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.846674][ T4272] Bluetooth: hci3: unexpected event 0x01 length: 16 > 1 [ 1813.855353][T19034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1813.891560][T19034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1813.984372][ T4412] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.012430][T19034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1814.314303][ T4412] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.376319][T19235] 9pnet_fd: Insufficient options for proto=fd [ 1817.570790][T19034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.749270][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1817.758294][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1817.849273][ T4324] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1818.005906][T19034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.093839][ T4324] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1818.114291][ T4324] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1818.129800][ T4324] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1818.145200][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1818.159901][ T4324] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1818.172714][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1818.178601][ T4324] usb 10-1: Product: syz [ 1818.188740][ T4324] usb 10-1: Manufacturer: syz [ 1818.207399][ T4324] usb 10-1: SerialNumber: syz [ 1818.213268][T19228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.220492][T19228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.250759][ T4324] usb 10-1: config 0 descriptor?? [ 1818.294284][ T4324] usb 10-1: selecting invalid altsetting 0 [ 1818.551523][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1818.572660][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1818.599707][ T4324] usb 10-1: USB disconnect, device number 2 [ 1818.609941][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1818.661322][T19228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.668600][T19228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.723688][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1818.860798][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1818.882139][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1818.912895][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1821.588961][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1821.625157][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1821.664285][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1823.090213][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1823.282705][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1823.416573][T19034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1823.433678][T19280] 9pnet_fd: Insufficient options for proto=fd [ 1823.460443][T19034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1823.613246][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1823.630216][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1824.360833][T19077] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1824.392174][T19077] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1824.459397][ T4272] Bluetooth: hci7: unexpected event 0x01 length: 16 > 1 [ 1824.547915][T19077] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1824.607241][T19077] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1824.667209][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1824.675898][T19228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1824.724579][T19034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1825.262674][ T4412] device hsr_slave_0 left promiscuous mode [ 1825.309934][ T4412] device hsr_slave_1 left promiscuous mode [ 1825.320437][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1825.327978][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1825.370670][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1825.378650][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.441132][ T4412] device bridge_slave_1 left promiscuous mode [ 1825.447673][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.480281][ T4412] device bridge_slave_0 left promiscuous mode [ 1825.486631][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.665927][T19319] jffs2: notice: (19319) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1825.694510][ T4412] device veth1_macvtap left promiscuous mode [ 1825.717533][ T4412] device veth0_macvtap left promiscuous mode [ 1825.753604][ T4412] device veth1_vlan left promiscuous mode [ 1825.779593][ T4412] device veth0_vlan left promiscuous mode [ 1827.904399][T19330] 9pnet_fd: Insufficient options for proto=fd [ 1829.520270][T19342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3764'. [ 1829.542047][T19335] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1829.559457][T19342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3764'. [ 1829.808776][T19349] loop9: detected capacity change from 0 to 512 [ 1830.750161][T19349] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1830.953539][T18718] EXT4-fs (loop9): unmounting filesystem. [ 1831.136259][T19359] loop9: detected capacity change from 0 to 512 [ 1831.159624][T19359] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1831.211159][T19359] EXT4-fs (loop9): invalid journal inode [ 1831.239637][T19359] EXT4-fs (loop9): can't get journal size [ 1831.284973][T19359] EXT4-fs error (device loop9): ext4_protect_reserved_inode:182: inode #2: comm syz.9.3769: blocks 4-4 from inode overlap system zone [ 1831.359469][T19359] EXT4-fs (loop9): Remounting filesystem read-only [ 1831.366503][T19359] EXT4-fs (loop9): failed to initialize system zone (-117) [ 1831.399428][T19359] EXT4-fs (loop9): mount failed [ 1831.521887][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 1833.051536][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 1833.268906][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1833.483230][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1833.602645][T19366] loop9: detected capacity change from 0 to 32768 [ 1833.758005][T19366] JBD2: Ignoring recovery information on journal [ 1834.228106][T19369] 9pnet_fd: Insufficient options for proto=fd [ 1834.231956][T19366] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1834.596210][T18718] ocfs2: Unmounting device (7,9) on (node local) [ 1834.692107][T12513] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1834.865528][ T4412] bond0 (unregistering): Released all slaves [ 1834.902382][T12513] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1834.925802][T12513] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1834.947195][T12513] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1834.978194][T12513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.032240][T19377] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1835.056813][T12513] usb 3-1: probing VID:PID(0424:012C) [ 1835.107552][T12513] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 1835.146690][T12513] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1835.163417][T12513] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 1835.177909][T12513] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1835.188756][T12513] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1835.441321][T12513] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1835.612933][T19077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1835.652091][T12513] vub300: probe of 3-1:1.0 failed with error -71 [ 1835.732338][T12513] usb 3-1: USB disconnect, device number 13 [ 1835.767065][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1835.787774][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1835.888895][T19077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1835.943199][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1835.962783][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1835.990061][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.997284][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.035637][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1836.057604][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1837.009895][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1837.050882][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.058227][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1837.087103][T19397] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1837.094337][T19397] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1837.119463][T19397] vhci_hcd vhci_hcd.0: Device attached [ 1837.126325][T16377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1837.147453][T16377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1837.194861][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1837.449983][ T7] usb 40-1: SetAddress Request (2) to port 0 [ 1837.467039][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1837.488351][ T7] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1837.736848][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1837.900266][T19398] vhci_hcd: connection reset by peer [ 1837.943739][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1837.996452][ T4337] vhci_hcd: stop threads [ 1838.123467][ T4337] vhci_hcd: release socket [ 1838.324183][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1838.365153][ T4337] vhci_hcd: disconnect device [ 1838.530865][T19077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1838.619071][T19077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1838.664810][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1838.684116][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1838.725923][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1838.760465][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1838.798759][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1839.291975][T19411] 9pnet_fd: Insufficient options for proto=fd [ 1839.344285][T18659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1839.366894][T18659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1839.377718][T18659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1839.401061][T18659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1839.413389][T18659] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1839.420873][T18659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1839.479917][T19418] loop3: detected capacity change from 0 to 512 [ 1839.522041][T19418] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1839.578382][T19418] EXT4-fs (loop3): invalid journal inode [ 1839.584937][T19418] EXT4-fs (loop3): can't get journal size [ 1839.598809][T19418] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.3781: blocks 4-4 from inode overlap system zone [ 1839.614327][T19418] EXT4-fs (loop3): Remounting filesystem read-only [ 1839.621856][T19418] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1839.651679][T19418] EXT4-fs (loop3): mount failed [ 1839.767735][T19416] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1842.281884][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 1843.194619][ T7] usb 40-1: device descriptor read/8, error -110 [ 1843.271660][T19414] chnl_net:caif_netlink_parms(): no params data found [ 1843.295184][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1843.324365][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1843.365541][T19077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1843.630160][ T7] usb usb40-port1: attempt power cycle [ 1843.704672][T19414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1843.728042][T19414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.760661][T19414] device bridge_slave_0 entered promiscuous mode [ 1843.820210][T19414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1843.831706][T19414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.870420][T19414] device bridge_slave_1 entered promiscuous mode [ 1844.001524][T19414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1844.064131][T19414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1844.177435][T19414] team0: Port device team_slave_0 added [ 1844.290917][ T7] usb usb40-port1: unable to enumerate USB device [ 1844.329811][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 1844.657385][T19456] loop2: detected capacity change from 0 to 32768 [ 1844.662424][T19414] team0: Port device team_slave_1 added [ 1844.709355][T19456] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1844.764071][T19479] loop9: detected capacity change from 0 to 128 [ 1844.967750][T19481] 9pnet_fd: Insufficient options for proto=fd [ 1845.168774][T19414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1845.188320][T19414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1845.264052][T19463] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1845.293408][T19414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1845.472868][T19414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1845.499258][T19414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1845.629074][T19414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.100928][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 1847.357919][T19498] overlayfs: failed to resolve './bus': -2 [ 1848.520689][T18659] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1848.671312][T18659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1848.683723][T18659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1848.693777][T18659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1848.702159][T18659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1848.711153][T18659] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1848.719240][T18659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1849.129396][T18659] Bluetooth: hci4: command 0x0419 tx timeout [ 1849.384928][T19414] device hsr_slave_0 entered promiscuous mode [ 1849.409696][T19414] device hsr_slave_1 entered promiscuous mode [ 1849.429420][T19414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1849.437070][T19414] Cannot create hsr debugfs directory [ 1850.163835][T19521] 9pnet_fd: Insufficient options for proto=fd [ 1850.315832][ T4412] device hsr_slave_0 left promiscuous mode [ 1850.405449][T19528] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1850.439548][ T4412] device hsr_slave_1 left promiscuous mode [ 1850.449940][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1850.499437][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1850.570911][ T4412] device bridge_slave_1 left promiscuous mode [ 1850.577423][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.654853][ T4412] device bridge_slave_0 left promiscuous mode [ 1850.692327][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.809218][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 1851.260290][T19518] loop2: detected capacity change from 0 to 32768 [ 1851.277084][ T27] audit: type=1326 audit(1791423029.491:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19535 comm="syz.9.3804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f766db9e199 code=0x0 [ 1851.288835][T19518] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1853.649326][T18659] Bluetooth: hci0: command 0x041b tx timeout [ 1853.657476][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.666358][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.887219][T19463] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1854.496665][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 1855.273226][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 1855.557444][T19550] 9pnet_fd: Insufficient options for proto=fd [ 1855.689502][ T4272] Bluetooth: hci7: command 0x0406 tx timeout [ 1855.695606][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 1855.698406][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1855.901029][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1857.325361][ T4412] bond0 (unregistering): Released all slaves [ 1857.755033][T19566] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1857.771386][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 1859.933794][T19491] chnl_net:caif_netlink_parms(): no params data found [ 1860.128785][T19575] FAULT_INJECTION: forcing a failure. [ 1860.128785][T19575] name failslab, interval 1, probability 5, space 0, times 9991 [ 1860.280000][T19491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.287661][T19491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.309587][T19491] device bridge_slave_0 entered promiscuous mode [ 1860.330776][T19491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.340598][T19491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.360472][T19491] device bridge_slave_1 entered promiscuous mode [ 1860.383581][T19575] CPU: 0 PID: 19575 Comm: syz.9.3814 Not tainted syzkaller #0 [ 1860.391321][T19575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1860.401518][T19575] Call Trace: [ 1860.404840][T19575] [ 1860.407813][T19575] dump_stack_lvl+0x188/0x24e [ 1860.412664][T19575] ? show_regs_print_info+0x12/0x12 [ 1860.418191][T19575] ? load_image+0x410/0x410 [ 1860.422772][T19575] ? __lock_acquire+0x7ea0/0x7ea0 [ 1860.427937][T19575] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1860.434329][T19575] should_fail_ex+0x390/0x4c0 [ 1860.439078][T19575] should_failslab+0x5/0x20 [ 1860.443683][T19575] slab_pre_alloc_hook+0x59/0x300 [ 1860.448864][T19575] ? blk_iolatency_init+0x74/0x4c0 [ 1860.454093][T19575] __kmem_cache_alloc_node+0x4f/0x270 [ 1860.459526][T19575] ? blk_iolatency_init+0x74/0x4c0 [ 1860.464951][T19575] kmalloc_trace+0x26/0xe0 [ 1860.469509][T19575] blk_iolatency_init+0x74/0x4c0 [ 1860.474582][T19575] ? blk_throtl_init+0x429/0x480 [ 1860.479828][T19575] blkcg_init_disk+0x35a/0x3f0 [ 1860.484650][T19575] ? blkcg_unpin_online+0x250/0x250 [ 1860.490012][T19575] ? __xa_insert+0x242/0x290 [ 1860.494843][T19575] ? do_raw_spin_unlock+0x11d/0x230 [ 1860.500110][T19575] __alloc_disk_node+0x2b3/0x570 [ 1860.505625][T19575] __blk_alloc_disk+0x2c/0x80 [ 1860.510355][T19575] dm_create+0x46b/0xf90 [ 1860.514679][T19575] dev_create+0x12e/0x2c0 [ 1860.519127][T19575] ? list_devices+0x820/0x820 [ 1860.523851][T19575] ? __might_fault+0xc2/0x120 [ 1860.528566][T19575] ? __might_fault+0xa6/0x120 [ 1860.533305][T19575] dm_ctl_ioctl+0xa9c/0xec0 [ 1860.537911][T19575] ? list_devices+0x820/0x820 [ 1860.542670][T19575] ? dm_poll+0x120/0x120 [ 1860.547014][T19575] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1860.552092][T19575] ? security_file_ioctl+0x7c/0xa0 [ 1860.557257][T19575] ? dm_poll+0x120/0x120 [ 1860.561561][T19575] __se_sys_ioctl+0xfa/0x170 [ 1860.566215][T19575] do_syscall_64+0x4c/0xa0 [ 1860.570782][T19575] ? clear_bhb_loop+0x60/0xb0 [ 1860.575688][T19575] ? clear_bhb_loop+0x60/0xb0 [ 1860.580444][T19575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1860.586387][T19575] RIP: 0033:0x7f766db9e199 [ 1860.590900][T19575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1860.610772][T19575] RSP: 002b:00007f766eb1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1860.619239][T19575] RAX: ffffffffffffffda RBX: 00007f766de25fa0 RCX: 00007f766db9e199 [ 1860.627265][T19575] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 1860.635296][T19575] RBP: 00007f766dc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1860.643322][T19575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1860.651440][T19575] R13: 00007f766de26038 R14: 00007f766de25fa0 R15: 00007fffa1ec1f68 [ 1860.659508][T19575] [ 1860.753109][T19575] [ 1860.755533][T19575] ====================================================== [ 1860.762626][T19575] WARNING: possible circular locking dependency detected [ 1860.769659][T19575] syzkaller #0 Not tainted [ 1860.774076][T19575] ------------------------------------------------------ [ 1860.781133][T19575] syz.9.3814/19575 is trying to acquire lock: [ 1860.787214][T19575] ffff888074aec0a8 ((&sq->pending_timer)){+.-.}-{0:0}, at: __timer_delete_sync+0xc8/0x2e0 [ 1860.797209][T19575] [ 1860.797209][T19575] but task is already holding lock: [ 1860.804591][T19575] ffffffff96e42db0 (&blkcg->lock){....}-{2:2}, at: blkcg_deactivate_policy+0x191/0x5c0 [ 1860.814402][T19575] [ 1860.814402][T19575] which lock already depends on the new lock. [ 1860.814402][T19575] [ 1860.824909][T19575] [ 1860.824909][T19575] the existing dependency chain (in reverse order) is: [ 1860.833935][T19575] [ 1860.833935][T19575] -> #2 (&blkcg->lock){....}-{2:2}: [ 1860.841476][T19575] _raw_spin_lock+0x2a/0x40 [ 1860.846522][T19575] blkg_create+0xbe9/0x1390 [ 1860.851649][T19575] blkcg_init_disk+0x28c/0x3f0 [ 1860.856971][T19575] __alloc_disk_node+0x2b3/0x570 [ 1860.862467][T19575] __blk_alloc_disk+0x2c/0x80 [ 1860.867855][T19575] brd_alloc+0x377/0x760 [ 1860.872690][T19575] brd_init+0x125/0x1a5 [ 1860.877454][T19575] do_one_initcall+0x257/0x800 [ 1860.882848][T19575] do_initcall_level+0x13d/0x1ed [ 1860.888684][T19575] do_initcalls+0x4b/0x8a [ 1860.893547][T19575] kernel_init_freeable+0x401/0x5ab [ 1860.899272][T19575] kernel_init+0x19/0x1b0 [ 1860.904136][T19575] ret_from_fork+0x1f/0x30 [ 1860.909090][T19575] [ 1860.909090][T19575] -> #1 (&q->queue_lock){..-.}-{2:2}: [ 1860.916733][T19575] _raw_spin_lock_irq+0xab/0xf0 [ 1860.922577][T19575] throtl_pending_timer_fn+0x10e/0x1dd0 [ 1860.928672][T19575] call_timer_fn+0x1ac/0x670 [ 1860.934101][T19575] __run_timers+0x56c/0x810 [ 1860.939339][T19575] run_timer_softirq+0x63/0xf0 [ 1860.944806][T19575] handle_softirqs+0x291/0x910 [ 1860.950150][T19575] __irq_exit_rcu+0x13b/0x230 [ 1860.955533][T19575] irq_exit_rcu+0x5/0x20 [ 1860.960308][T19575] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1860.966763][T19575] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1860.973375][T19575] __sanitizer_cov_trace_switch+0xe/0xe0 [ 1860.979540][T19575] copy_page_range+0x30ca/0x3a60 [ 1860.985013][T19575] copy_mm+0xeb0/0x1680 [ 1860.989791][T19575] copy_process+0x1952/0x4070 [ 1860.995012][T19575] kernel_clone+0x24b/0x900 [ 1861.000253][T19575] __x64_sys_clone+0x1a7/0x220 [ 1861.005667][T19575] do_syscall_64+0x4c/0xa0 [ 1861.010635][T19575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1861.017349][T19575] [ 1861.017349][T19575] -> #0 ((&sq->pending_timer)){+.-.}-{0:0}: [ 1861.025479][T19575] __lock_acquire+0x3a03/0x7ea0 [ 1861.030875][T19575] lock_acquire+0x1bc/0x4a0 [ 1861.035911][T19575] __timer_delete_sync+0xe1/0x2e0 [ 1861.041558][T19575] throtl_pd_free+0x15/0x40 [ 1861.046771][T19575] blkcg_deactivate_policy+0x35c/0x5c0 [ 1861.053065][T19575] blk_throtl_exit+0xa6/0x140 [ 1861.058416][T19575] blkcg_init_disk+0x37b/0x3f0 [ 1861.063922][T19575] __alloc_disk_node+0x2b3/0x570 [ 1861.069510][T19575] __blk_alloc_disk+0x2c/0x80 [ 1861.075101][T19575] dm_create+0x46b/0xf90 [ 1861.079928][T19575] dev_create+0x12e/0x2c0 [ 1861.084888][T19575] dm_ctl_ioctl+0xa9c/0xec0 [ 1861.089930][T19575] __se_sys_ioctl+0xfa/0x170 [ 1861.095143][T19575] do_syscall_64+0x4c/0xa0 [ 1861.100091][T19575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1861.106515][T19575] [ 1861.106515][T19575] other info that might help us debug this: [ 1861.106515][T19575] [ 1861.117098][T19575] Chain exists of: [ 1861.117098][T19575] (&sq->pending_timer) --> &q->queue_lock --> &blkcg->lock [ 1861.117098][T19575] [ 1861.130408][T19575] Possible unsafe locking scenario: [ 1861.130408][T19575] [ 1861.137857][T19575] CPU0 CPU1 [ 1861.143235][T19575] ---- ---- [ 1861.148602][T19575] lock(&blkcg->lock); [ 1861.152854][T19575] lock(&q->queue_lock); [ 1861.159888][T19575] lock(&blkcg->lock); [ 1861.166745][T19575] lock((&sq->pending_timer)); [ 1861.171692][T19575] [ 1861.171692][T19575] *** DEADLOCK *** [ 1861.171692][T19575] [ 1861.180105][T19575] 2 locks held by syz.9.3814/19575: [ 1861.185534][T19575] #0: ffff88802744ed50 (&q->queue_lock){..-.}-{2:2}, at: blkcg_deactivate_policy+0xde/0x5c0 [ 1861.195940][T19575] #1: ffffffff96e42db0 (&blkcg->lock){....}-{2:2}, at: blkcg_deactivate_policy+0x191/0x5c0 [ 1861.206421][T19575] [ 1861.206421][T19575] stack backtrace: [ 1861.212445][T19575] CPU: 1 PID: 19575 Comm: syz.9.3814 Not tainted syzkaller #0 [ 1861.220038][T19575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1861.230343][T19575] Call Trace: [ 1861.233668][T19575] [ 1861.236727][T19575] dump_stack_lvl+0x188/0x24e [ 1861.241450][T19575] ? load_image+0x410/0x410 [ 1861.246492][T19575] ? show_regs_print_info+0x12/0x12 [ 1861.252357][T19575] ? print_circular_bug+0x12b/0x1a0 [ 1861.257897][T19575] check_noncircular+0x2f8/0x400 [ 1861.262987][T19575] ? look_up_lock_class+0x75/0x140 [ 1861.268160][T19575] ? print_deadlock_bug+0x5d0/0x5d0 [ 1861.273590][T19575] ? lockdep_lock+0xf1/0x1f0 [ 1861.278264][T19575] ? _find_first_zero_bit+0xd2/0x100 [ 1861.283571][T19575] __lock_acquire+0x3a03/0x7ea0 [ 1861.288463][T19575] ? verify_lock_unused+0x140/0x140 [ 1861.293774][T19575] ? __flush_work+0x109/0xac0 [ 1861.298492][T19575] ? verify_lock_unused+0x140/0x140 [ 1861.303841][T19575] ? __flush_work+0x9aa/0xac0 [ 1861.308551][T19575] lock_acquire+0x1bc/0x4a0 [ 1861.313074][T19575] ? __timer_delete_sync+0xc8/0x2e0 [ 1861.318470][T19575] ? read_lock_is_recursive+0x10/0x10 [ 1861.323872][T19575] ? __timer_delete_sync+0xc8/0x2e0 [ 1861.329249][T19575] __timer_delete_sync+0xe1/0x2e0 [ 1861.334541][T19575] ? __timer_delete_sync+0xc8/0x2e0 [ 1861.339766][T19575] ? timer_delete_sync+0x20/0x20 [ 1861.344791][T19575] ? do_raw_spin_lock+0x128/0x2f0 [ 1861.349832][T19575] ? __rwlock_init+0x140/0x140 [ 1861.354611][T19575] ? __timer_delete_sync+0x239/0x2e0 [ 1861.360342][T19575] ? throtl_pd_offline+0x160/0x160 [ 1861.366011][T19575] throtl_pd_free+0x15/0x40 [ 1861.371099][T19575] blkcg_deactivate_policy+0x35c/0x5c0 [ 1861.376778][T19575] blk_throtl_exit+0xa6/0x140 [ 1861.381586][T19575] blkcg_init_disk+0x37b/0x3f0 [ 1861.386370][T19575] ? blkcg_unpin_online+0x250/0x250 [ 1861.391587][T19575] ? __xa_insert+0x242/0x290 [ 1861.396364][T19575] ? do_raw_spin_unlock+0x11d/0x230 [ 1861.401669][T19575] __alloc_disk_node+0x2b3/0x570 [ 1861.406721][T19575] __blk_alloc_disk+0x2c/0x80 [ 1861.411436][T19575] dm_create+0x46b/0xf90 [ 1861.415691][T19575] dev_create+0x12e/0x2c0 [ 1861.420117][T19575] ? list_devices+0x820/0x820 [ 1861.424844][T19575] ? __might_fault+0xc2/0x120 [ 1861.429701][T19575] ? __might_fault+0xa6/0x120 [ 1861.434397][T19575] dm_ctl_ioctl+0xa9c/0xec0 [ 1861.439178][T19575] ? list_devices+0x820/0x820 [ 1861.443965][T19575] ? dm_poll+0x120/0x120 [ 1861.448320][T19575] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1861.453271][T19575] ? security_file_ioctl+0x7c/0xa0 [ 1861.458414][T19575] ? dm_poll+0x120/0x120 [ 1861.462756][T19575] __se_sys_ioctl+0xfa/0x170 [ 1861.467364][T19575] do_syscall_64+0x4c/0xa0 [ 1861.471789][T19575] ? clear_bhb_loop+0x60/0xb0 [ 1861.476735][T19575] ? clear_bhb_loop+0x60/0xb0 [ 1861.481509][T19575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1861.487422][T19575] RIP: 0033:0x7f766db9e199 [ 1861.491850][T19575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.512015][T19575] RSP: 002b:00007f766eb1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.520719][T19575] RAX: ffffffffffffffda RBX: 00007f766de25fa0 RCX: 00007f766db9e199 [ 1861.528705][T19575] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 1861.536945][T19575] RBP: 00007f766dc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.544942][T19575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1861.553029][T19575] R13: 00007f766de26038 R14: 00007f766de25fa0 R15: 00007fffa1ec1f68 [ 1861.561289][T19575] [ 1861.602422][T19491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1861.692211][T19491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1861.715876][T19572] loop3: detected capacity change from 0 to 32768 [ 1861.752211][T19572] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1861.846151][T19491] team0: Port device team_slave_0 added [ 1861.859575][T19491] team0: Port device team_slave_1 added [ 1861.928181][T19491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1861.953206][T19491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1861.972772][T19463] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1862.570710][T19491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.632230][T19491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.652790][T19491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.810600][T19491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1863.019758][T19414] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1863.064950][T19491] device hsr_slave_0 entered promiscuous mode [ 1863.092120][T19491] device hsr_slave_1 entered promiscuous mode [ 1863.109300][T19491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1863.116937][T19491] Cannot create hsr debugfs directory [ 1863.140514][T19414] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1863.155880][T19414] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1863.199845][T19414] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1863.412275][T19414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.454381][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1863.466361][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1863.491188][T19414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1863.513852][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1863.531457][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1863.552129][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.560708][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1863.585083][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1863.601004][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1863.614482][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1863.624410][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.631837][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.649657][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1863.664678][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1863.691369][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1863.700925][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1863.712087][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1863.721789][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1863.739967][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1863.769933][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1863.781476][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1863.799487][T19414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1863.811531][T19414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1863.829634][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1863.844729][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1864.063113][ T4412] device hsr_slave_0 left promiscuous mode [ 1864.076742][ T4412] device hsr_slave_1 left promiscuous mode [ 1864.126800][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1864.146037][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1864.169732][ T4412] device bridge_slave_1 left promiscuous mode [ 1864.176193][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.193942][ T4412] device bridge_slave_0 left promiscuous mode [ 1864.203581][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.400028][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 1864.442689][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 1864.483179][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1864.528246][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1864.581026][ T4412] bond0 (unregistering): Released all slaves [ 1864.676819][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1864.684526][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1864.696623][T19414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1865.008203][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1865.018359][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1865.069099][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1865.080753][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1865.091429][T19414] device veth0_vlan entered promiscuous mode [ 1865.104091][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1865.113414][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1865.130674][T19414] device veth1_vlan entered promiscuous mode [ 1865.169902][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1865.179955][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1865.188292][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1865.197588][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1865.211505][T19491] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1865.222548][T19414] device veth0_macvtap entered promiscuous mode [ 1865.232127][T19491] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1865.244358][T19414] device veth1_macvtap entered promiscuous mode [ 1865.253029][T19491] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1865.271612][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1865.282757][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.294082][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1865.305182][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.315690][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1865.327003][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.337673][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1865.348701][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.363507][T19414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1865.372320][T19491] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1865.384183][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1865.393452][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1865.409695][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1865.418609][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1865.429921][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.449516][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.462628][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.473248][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.486629][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.497305][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.507964][T19414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.518669][T19414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.530309][T19414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1865.540469][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1865.550059][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1865.564355][T19414] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.576356][T19414] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.586073][T19414] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.598670][T19414] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.679447][T19414] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 1865.715333][T19491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1865.735606][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.741436][T19414] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 1865.752013][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1865.783598][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1865.792496][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1865.801150][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1865.818002][T19491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1865.837279][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1865.847617][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1865.857264][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.864651][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1865.874585][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1865.891639][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1865.900455][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.908667][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1865.922180][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1865.934065][T16551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.941631][T16551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1865.952904][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1865.962692][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1865.982367][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1866.001601][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1866.014913][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1866.024286][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1866.045363][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1866.054506][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1866.063948][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1866.073187][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1866.082054][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1866.091792][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1866.102989][T19491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1866.231256][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1866.239619][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1866.252045][T19491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1866.441220][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1866.451215][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1866.467214][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1866.476330][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1866.487108][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1866.495987][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1866.505516][T19491] device veth0_vlan entered promiscuous mode [ 1866.516649][T19491] device veth1_vlan entered promiscuous mode [ 1866.533763][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1866.543070][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1866.551635][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1866.561064][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1866.573490][T19491] device veth0_macvtap entered promiscuous mode [ 1866.583695][T19491] device veth1_macvtap entered promiscuous mode [ 1866.597754][T19491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1866.608769][T19491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.619022][T19491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1866.629736][T19491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.640224][T19491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1866.650988][T19491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.660927][T19491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1866.671394][T19491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.681271][T19491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1866.692339][T19491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.704192][T19491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1866.714878][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1866.724664][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1866.733908][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1866.742865][T16551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1866.756801][T19491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1866.767743][T19491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.778006][T19491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1866.789812][T19491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.799741][T19491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1866.810921][T19491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.821076][T19491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1866.831751][T19491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.841686][T19491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1866.852298][T19491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.863500][T19491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1866.872024][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1866.881863][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1866.893487][T19491] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.903057][T19491] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.911957][T19491] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.921979][T19491] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.948202][T19491] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 1866.968209][ T4550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1866.969136][T19491] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 1866.992177][ T4550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1867.002887][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1867.017585][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1867.025925][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1867.035222][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready Stopping sshd: stopped /usr/sbin/sshd (pid 4027) OK Stopping crond: stopped /usr/sbin/crond (pid 4011) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3932)