last executing test programs: 17.828097306s ago: executing program 1 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b65, 0x0) 11.630858803s ago: executing program 2 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2, 0xb}, 0x1c) listen(r5, 0x6) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000004e40), 0x4) 11.299366874s ago: executing program 1 (id=265): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 10.328180826s ago: executing program 1 (id=267): umount2(&(0x7f0000000180)='./file0/file0/../file0\x00', 0x8) 10.328003436s ago: executing program 2 (id=268): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4c90, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2a0, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r1, 0x200004) 9.567576091s ago: executing program 1 (id=271): fanotify_init(0x200, 0x0) r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) r2 = dup(r0) write$binfmt_elf64(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e0003000000c9030000000000004000000000000000eb02000000000000000001000400380001000600ad0600040300000081000000ff00000000000000f50f0000000000000500000000000000c6"], 0x178) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 8.68999126s ago: executing program 1 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b65, 0x0) 5.500013067s ago: executing program 3 (id=281): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x5000003a, r0, 0x0) 5.376114221s ago: executing program 4 (id=282): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000500)) 5.123611909s ago: executing program 3 (id=283): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x80108907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x7, 0x7, 0x6, 0x3447504d, [0x8000, 0x8], [0x3, 0x1], 0x13a}}) 5.024116832s ago: executing program 4 (id=284): socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) 4.922374986s ago: executing program 2 (id=285): fanotify_init(0x200, 0x0) r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) r2 = dup(r0) write$binfmt_elf64(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e0003000000c9030000000000004000000000000000eb02000000000000000001000400380001000600ad0600040300000081000000ff00000000000000f50f0000000000000500000000000000c6"], 0x178) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 4.142732922s ago: executing program 2 (id=287): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) 4.001350767s ago: executing program 4 (id=288): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2b, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x27, 0x3, 0xaf) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x4040) 3.999987347s ago: executing program 0 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000001500e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000000004e2100000a00400000000000cff1", @ANYRES32=0x0], 0xb8}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.31606719s ago: executing program 3 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 3.252307401s ago: executing program 2 (id=291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000680)={0xfffffffd, 0x4, 0x40000000, 0x9, 0x1e, "0062ba7d820000001e0000000002f738096304"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000001480)='./file1\x00', 0x0, 0x0, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x2) getdents(r1, 0x0, 0x54) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@sysvgroups}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x0, 0x556, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_open_dev$dvb_demux(&(0x7f00000003c0), 0x0, 0x105e01) 3.199451003s ago: executing program 3 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 2.284006374s ago: executing program 0 (id=293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) shutdown(r0, 0x1) 2.240032965s ago: executing program 4 (id=294): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$eJzs3cFrm2UYAPCnadd20zUFRVARXwYevISu/gMrsoFYUOYi04PwzaYakiUjCZUM0eHFq/+B9+HRmyD+Azvo3Zu3XTzuMPZJ8iVd0mWbtbZh+vtB+Z587/t8fb835OPJITx3r353vbHbrexmvShdSFGKiNK9iPVhVFgYHUvDeDkm3Yo3y1d/f+2Djz5+d2t7++LllC5tXXlrM6W09vrPX3z5w7lfes99+OPaTytxZ/2Tu39u/nHnpTsv331w5fN6N9W7aandS1m61m73smvNWtqpdxuVlN5v1rJuLdVb3Vpnany32b5xo5+y1s7ZMzc6tW43Za1+atT6qddOvbV+yj7L6q1UqVTS2TPB01RvX76cbRXx6hPmXTipBXEMOp2tbPAZXnlkpHp7LgsCAObqqPX/8tHq/9Z0/X8quo3KC28Ulz50/d9R/x/SZP3Pf9Wg/l8efX4jIn/4PUD9DwAAAAAAAAAAAAAAz4J7eV7O87w8Pu7/OGD0es7L45g98v4f+Jv3+jheEz/cW41ofrtX3asWx2J8azfq0YxabEQ57g8eC2NFfOmd7YsbaWg9zl7/eph/7teI6uJ0/vkox/rs/PNFftrPj8HxVJyZzN+Mcrw4O39zZv5ybHw/kV+Jcvz2abSjGTvDx9vD/K/Op/T2e9sH8leG8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4f6iksVej6Hu/V404HXuj/v2VhxPWp/vjF/mj/vql2Ihy3J/dn39jZn/+pXhlab73DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj3f7NRtZs1jonFYx7/g/PLI+Dx2ctFNNvHRg6HdOTV552nb8f5HmeP8jzfGqodKjrnB7d5IyhwZW/WS2GizM7rX9re1cXTvStPEpwKiKeMCcfbeDk0GL8k//1/P4+z5yzEhHHeqdrg6A0/w0/dHDijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MXC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTh4JmsuxmMmPy6Y9z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//xp0CCU=") r0 = fanotify_init(0xf00, 0x0) fanotify_mark(r0, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) 2.131713029s ago: executing program 3 (id=295): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x15) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='-'], 0x7) 1.993574984s ago: executing program 0 (id=296): r0 = socket$inet6(0xa, 0x80002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) 1.832014999s ago: executing program 3 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000300)="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", 0xfc) 1.80633669s ago: executing program 4 (id=298): socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) 1.79429585s ago: executing program 0 (id=299): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00050000000080fbdbeb250a808000000000000000000008001b"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x44080) 1.527199759s ago: executing program 0 (id=300): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x80108907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x7, 0x7, 0x6, 0x3447504d, [0x8000, 0x8], [0x3, 0x1], 0x13a}}) 571.519901ms ago: executing program 1 (id=301): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05032200d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 492.596274ms ago: executing program 4 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 84.561407ms ago: executing program 2 (id=303): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2281) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) fsopen(&(0x7f0000000180)='hfs\x00', 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x2, 0x0, 0x2000, &(0x7f0000f98000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 0s ago: executing program 0 (id=304): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2b, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x27, 0x3, 0xaf) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x4040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 58.672243][ T4255] cgroup: Unknown subsys name 'net' [ 58.801801][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.220943][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.962732][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.962868][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.971770][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.978815][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.986358][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.994217][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.000289][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.006600][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.014237][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.020712][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.028118][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.035005][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.041508][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.055810][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.056170][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.064514][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.071648][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.085480][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.086095][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.092841][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.100619][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.107362][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.114292][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.128704][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.138025][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.146688][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.153907][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.158838][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.173799][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.207165][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.511830][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 62.581305][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 62.665397][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 62.705639][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 62.764426][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.771689][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.780340][ T4269] device bridge_slave_0 entered promiscuous mode [ 62.809981][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 62.823119][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.832874][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.840768][ T4269] device bridge_slave_1 entered promiscuous mode [ 62.849092][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.856247][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.864410][ T4267] device bridge_slave_0 entered promiscuous mode [ 62.895882][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.903283][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.911920][ T4267] device bridge_slave_1 entered promiscuous mode [ 62.972014][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.009822][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.020936][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.034613][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.042300][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.050490][ T4268] device bridge_slave_0 entered promiscuous mode [ 63.058543][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.065842][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.075222][ T4271] device bridge_slave_0 entered promiscuous mode [ 63.091487][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.109954][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.117316][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.125050][ T4268] device bridge_slave_1 entered promiscuous mode [ 63.132490][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.139836][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.148039][ T4271] device bridge_slave_1 entered promiscuous mode [ 63.185423][ T4267] team0: Port device team_slave_0 added [ 63.191877][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.202019][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.210690][ T4270] device bridge_slave_0 entered promiscuous mode [ 63.231651][ T4269] team0: Port device team_slave_0 added [ 63.240339][ T4267] team0: Port device team_slave_1 added [ 63.246281][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.253774][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.261946][ T4270] device bridge_slave_1 entered promiscuous mode [ 63.293066][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.305459][ T4269] team0: Port device team_slave_1 added [ 63.322473][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.339838][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.346871][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.373334][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.387459][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.418771][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.435517][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.445468][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.472014][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.502349][ T4271] team0: Port device team_slave_0 added [ 63.510601][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.542346][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.549549][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.575729][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.588608][ T4271] team0: Port device team_slave_1 added [ 63.596187][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.607460][ T4268] team0: Port device team_slave_0 added [ 63.616497][ T4268] team0: Port device team_slave_1 added [ 63.623718][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.630783][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.657050][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.732496][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.739886][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.765954][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.778643][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.785632][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.812641][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.830073][ T4270] team0: Port device team_slave_0 added [ 63.847116][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.854103][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.883178][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.895102][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.902509][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.929002][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.941644][ T4270] team0: Port device team_slave_1 added [ 63.953288][ T4269] device hsr_slave_0 entered promiscuous mode [ 63.960339][ T4269] device hsr_slave_1 entered promiscuous mode [ 63.974197][ T4267] device hsr_slave_0 entered promiscuous mode [ 63.981796][ T4267] device hsr_slave_1 entered promiscuous mode [ 63.989541][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.997488][ T4267] Cannot create hsr debugfs directory [ 64.053591][ T4271] device hsr_slave_0 entered promiscuous mode [ 64.061052][ T4271] device hsr_slave_1 entered promiscuous mode [ 64.068374][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.076054][ T4271] Cannot create hsr debugfs directory [ 64.082643][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.089987][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.116460][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.140765][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.147798][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.174043][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.197979][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 64.206918][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 64.209902][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 64.263541][ T4268] device hsr_slave_0 entered promiscuous mode [ 64.270817][ T4268] device hsr_slave_1 entered promiscuous mode [ 64.277395][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 64.283747][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 64.290500][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.298568][ T4268] Cannot create hsr debugfs directory [ 64.339024][ T4270] device hsr_slave_0 entered promiscuous mode [ 64.345815][ T4270] device hsr_slave_1 entered promiscuous mode [ 64.352813][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.360565][ T4270] Cannot create hsr debugfs directory [ 64.656509][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.673822][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.685851][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.704825][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.747388][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.757300][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.773138][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.806459][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.867791][ T4269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.904748][ T4269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.914691][ T4269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.929262][ T4269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.950186][ T4270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.962634][ T4270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.972875][ T4270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.005762][ T4270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.052602][ T4268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.087255][ T4268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.098383][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.117800][ T4268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.134396][ T4268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.200568][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.213088][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.227911][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.242623][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.263017][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.273214][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.285084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.294120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.321523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.329906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.339397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.349017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.358920][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.366201][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.374798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.385206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.394037][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.401253][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.410590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.419635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.428445][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.435565][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.443531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.453073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.461700][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.468949][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.483451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.492711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.503758][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.517887][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.549146][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.562039][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.571705][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.583577][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.593041][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.602138][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.612331][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.621976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.631727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.640878][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.648044][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.681686][ T4269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.692467][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.714031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.730337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.740474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.749275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.758439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.768067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.777584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.786099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.795379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.804264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.813242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.822574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.832689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.840859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.849823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.861140][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.868643][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.877816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.887026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.894766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.906616][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.919722][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.945320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.956115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.967694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.978998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.989970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.999235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.009204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.018246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.027658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.037284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.062863][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.082769][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.109216][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.116680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.130562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.140085][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.147238][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.155633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.164960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.173828][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.180938][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.189003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.201137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.209927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.219130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.228012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.236397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.245223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.253378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.262003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.277490][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 66.283558][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 66.289989][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 66.298624][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.310811][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.327769][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.357259][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 66.358103][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.363409][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 66.380828][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.389611][ T1222] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.396895][ T1222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.404735][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.414211][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.423367][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.430654][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.440090][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.457917][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.477908][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.525328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.552825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.579449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.598799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.608194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.638393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.674278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.683909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.698486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.713962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.739219][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.763722][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.779853][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.789719][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.799144][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.808476][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.820532][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.831539][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.855898][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.877100][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.884803][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.922697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.937356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.968803][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.982139][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.008050][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.082937][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.098219][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.123546][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.142868][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.169084][ T4269] device veth0_vlan entered promiscuous mode [ 67.194704][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.209137][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.223069][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.243233][ T4269] device veth1_vlan entered promiscuous mode [ 67.287144][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.295346][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.306575][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.321904][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.366113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.382841][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.395130][ T4269] device veth0_macvtap entered promiscuous mode [ 67.414781][ T4271] device veth0_vlan entered promiscuous mode [ 67.430442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.444095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.463180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.476464][ T4269] device veth1_macvtap entered promiscuous mode [ 67.499291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.509036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.517676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.527611][ T4271] device veth1_vlan entered promiscuous mode [ 67.555426][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.581393][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.598577][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.623202][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.631110][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.640705][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.649870][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.659398][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.668916][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.685635][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.708969][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.719320][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.729926][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.739016][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.786163][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.812237][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.821541][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.830108][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.859210][ T4271] device veth0_macvtap entered promiscuous mode [ 67.875883][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.914852][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.931283][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.940810][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.959085][ T4271] device veth1_macvtap entered promiscuous mode [ 68.010535][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.020555][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.029704][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.051348][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.062718][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.075021][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.097386][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.106224][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.115392][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.124707][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.155366][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.170523][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.201657][ T4268] device veth0_vlan entered promiscuous mode [ 68.211448][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.220267][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.229404][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.238515][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.253231][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.261762][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.272639][ T4267] device veth0_vlan entered promiscuous mode [ 68.285459][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.296299][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.309560][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.320744][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.330697][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.339970][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.349379][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.359275][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 68.359316][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 68.371578][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 68.393492][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.403957][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.406016][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.413133][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.430325][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.437329][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 68.439917][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 68.448387][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.459759][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.468261][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.476428][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.488547][ T4268] device veth1_vlan entered promiscuous mode [ 68.499850][ T4267] device veth1_vlan entered promiscuous mode [ 68.540823][ T4270] device veth0_vlan entered promiscuous mode [ 68.565792][ T4268] device veth0_macvtap entered promiscuous mode [ 68.603025][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.611986][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.620919][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.629586][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.638045][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.647441][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.656104][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.667861][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.675100][ T4268] device veth1_macvtap entered promiscuous mode [ 68.675868][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.690881][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.713433][ T4267] device veth0_macvtap entered promiscuous mode [ 68.727844][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.759751][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.770497][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.780878][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.809755][ T4267] device veth1_macvtap entered promiscuous mode [ 68.836684][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.860092][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.870219][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.881272][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.893998][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.905164][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.925966][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.936229][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.947254][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.959848][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.978876][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.990450][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.000769][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.013822][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.023218][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.034053][ T4270] device veth1_vlan entered promiscuous mode [ 69.050232][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.066542][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.080637][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.107530][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.126675][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.142287][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.153381][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.165226][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.179460][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.198122][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.211345][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.220460][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.298191][ T26] audit: type=1326 audit(1775155985.467:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d99c819 code=0x7ffc0000 [ 69.420009][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.543645][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.604842][ T26] audit: type=1326 audit(1775155985.467:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d99c819 code=0x7ffc0000 [ 69.659690][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.707076][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.752317][ T26] audit: type=1326 audit(1775155985.467:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc89d99c819 code=0x7ffc0000 [ 69.780959][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.800264][ T26] audit: type=1326 audit(1775155985.467:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d99c819 code=0x7ffc0000 [ 69.804798][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.822566][ T26] audit: type=1326 audit(1775155985.477:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d99c819 code=0x7ffc0000 [ 69.858819][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.873182][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.885066][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.896683][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.913644][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.938893][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.948789][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.972373][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.002347][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.011589][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.020771][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.069179][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.089093][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.102376][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.103573][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.152056][ T4270] device veth0_macvtap entered promiscuous mode [ 70.155560][ T4270] device veth1_macvtap entered promiscuous mode [ 70.156529][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.158040][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.158654][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.184356][ T4357] kernel profiling enabled (shift: 9) [ 70.337538][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.346060][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.367642][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.378426][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.399707][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.425639][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.436015][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.447537][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 70.447556][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 70.453556][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 70.454338][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.477151][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.488182][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.505579][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.517713][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 70.523902][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 71.208004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.669695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.688066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.981315][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.990154][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.089942][ T4368] bridge0: port 3(syz_tun) entered blocking state [ 72.096650][ T4368] bridge0: port 3(syz_tun) entered disabled state [ 72.106490][ T4368] device syz_tun entered promiscuous mode [ 72.114253][ T4368] bridge0: port 3(syz_tun) entered blocking state [ 72.121303][ T4368] bridge0: port 3(syz_tun) entered forwarding state [ 72.134384][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.137599][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.154593][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.158547][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.177279][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.192765][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.205726][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.225642][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.237577][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.250014][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.269201][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.353084][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.368224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.566158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.577581][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.718761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.931651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.042787][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.061918][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.114980][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.149042][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.272055][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.889810][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.252974][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.468073][ T26] audit: type=1326 audit(1775155990.577:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bebb9c819 code=0x7ffc0000 [ 74.992773][ T26] audit: type=1326 audit(1775155990.577:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bebb9c819 code=0x7ffc0000 [ 75.022374][ T26] audit: type=1326 audit(1775155990.577:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9bebb9c819 code=0x7ffc0000 [ 75.022409][ T26] audit: type=1326 audit(1775155990.577:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bebb9c819 code=0x7ffc0000 [ 75.022437][ T26] audit: type=1326 audit(1775155990.577:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bebb9c819 code=0x7ffc0000 [ 75.035680][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.017396][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.028661][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.068731][ T4406] loop1: detected capacity change from 0 to 2048 [ 76.335439][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.343598][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.351713][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.766812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 76.856811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 77.136821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 77.347650][ T7] cfg80211: failed to load regulatory.db [ 77.400017][ T4418] bridge0: port 3(syz_tun) entered blocking state [ 77.406537][ T4418] bridge0: port 3(syz_tun) entered disabled state [ 77.414254][ T4418] device syz_tun entered promiscuous mode [ 77.421308][ T4418] bridge0: port 3(syz_tun) entered blocking state [ 77.427843][ T4418] bridge0: port 3(syz_tun) entered forwarding state [ 77.563314][ T4406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 77.612539][ T22] kernel read not supported for file /mdstat (pid: 22 comm: kworker/1:0) [ 78.357262][ T4435] loop2: detected capacity change from 0 to 64 [ 78.371281][ T4435] ======================================================= [ 78.371281][ T4435] WARNING: The mand mount option has been deprecated and [ 78.371281][ T4435] and is ignored by this kernel. Remove the mand [ 78.371281][ T4435] option from the mount to silence this warning. [ 78.371281][ T4435] ======================================================= [ 78.965774][ T4429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.142940][ T4435] hfs: unable to locate alternate MDB [ 79.148678][ T4435] hfs: continuing without an alternate MDB [ 81.391011][ T26] audit: type=1326 audit(1775155996.787:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083479c819 code=0x7ffc0000 [ 81.486810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 81.506807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 81.516808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 81.526806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 81.536807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 81.556827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1a!!! [ 81.586838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 81.658918][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 81.767717][ T26] audit: type=1326 audit(1775155996.787:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083479c819 code=0x7ffc0000 [ 81.927655][ T4465] bridge0: port 3(syz_tun) entered blocking state [ 81.934589][ T4465] bridge0: port 3(syz_tun) entered disabled state [ 81.955031][ T4465] device syz_tun entered promiscuous mode [ 81.964982][ T4465] bridge0: port 3(syz_tun) entered blocking state [ 81.971651][ T4465] bridge0: port 3(syz_tun) entered forwarding state [ 82.834613][ T26] audit: type=1326 audit(1775155996.787:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f083479c819 code=0x7ffc0000 [ 83.106797][ C0] sched: RT throttling activated [ 83.542261][ T26] audit: type=1326 audit(1775155996.787:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083479c819 code=0x7ffc0000 [ 85.826943][ T26] audit: type=1326 audit(1775155996.797:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083479c819 code=0x7ffc0000 [ 86.159486][ T4496] loop2: detected capacity change from 0 to 64 [ 87.356929][ T4496] hfs: unable to locate alternate MDB [ 87.362609][ T4496] hfs: continuing without an alternate MDB [ 88.087664][ T26] audit: type=1326 audit(1775156004.257:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 89.147150][ T4507] loop0: detected capacity change from 0 to 2048 [ 89.159509][ T26] audit: type=1326 audit(1775156004.257:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 89.305941][ T4516] loop4: detected capacity change from 0 to 64 [ 89.340473][ T26] audit: type=1326 audit(1775156004.257:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 89.364072][ T4507] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.402185][ T4521] loop1: detected capacity change from 0 to 1024 [ 89.443279][ T26] audit: type=1326 audit(1775156004.257:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 89.476952][ T26] audit: type=1326 audit(1775156004.257:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 91.503647][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 91.844827][ T4538] loop0: detected capacity change from 0 to 512 [ 91.909579][ T4312] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.747634][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 92.966652][ T4312] usb 2-1: device descriptor read/all, error -71 [ 96.061396][ T4562] netlink: 180 bytes leftover after parsing attributes in process `syz.0.50'. [ 96.541366][ T26] audit: type=1326 audit(1775156012.477:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b52d9c819 code=0x7ffc0000 [ 97.518051][ T26] audit: type=1326 audit(1775156012.477:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b52d9c819 code=0x7ffc0000 [ 97.561488][ T26] audit: type=1326 audit(1775156012.477:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1b52d9c819 code=0x7ffc0000 [ 97.624674][ T4573] loop0: detected capacity change from 0 to 2048 [ 97.643733][ T4576] loop3: detected capacity change from 0 to 1024 [ 98.227666][ T4579] bridge0: port 3(syz_tun) entered blocking state [ 98.234285][ T4579] bridge0: port 3(syz_tun) entered disabled state [ 98.241977][ T4579] device syz_tun entered promiscuous mode [ 98.248212][ T4579] bridge0: port 3(syz_tun) entered blocking state [ 98.254709][ T4579] bridge0: port 3(syz_tun) entered forwarding state [ 98.581936][ T26] audit: type=1326 audit(1775156012.477:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b52d9c819 code=0x7ffc0000 [ 98.624711][ T4581] loop2: detected capacity change from 0 to 2048 [ 98.661497][ T4573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.745477][ T26] audit: type=1326 audit(1775156012.477:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b52d9c819 code=0x7ffc0000 [ 98.808741][ T4581] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.907115][ T3598] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.157721][ T3598] usb 4-1: Using ep0 maxpacket: 16 [ 99.422410][ T3598] usb 4-1: config 9 has an invalid interface number: 226 but max is 0 [ 99.777235][ T4573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.192120][ T3598] usb 4-1: config 9 has no interface number 0 [ 100.240916][ T3598] usb 4-1: config 9 interface 226 has no altsetting 0 [ 100.470397][ T3598] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=dc.fd [ 100.485918][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.495959][ T3598] usb 4-1: Product: syz [ 100.501244][ T3598] usb 4-1: Manufacturer: syz [ 100.506016][ T3598] usb 4-1: SerialNumber: syz [ 100.647799][ T3598] mdc800 4-1:9.226: probe fails -> wrong Interface [ 100.685660][ T3598] usb 4-1: USB disconnect, device number 2 [ 100.963308][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 101.932376][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 103.558723][ T4621] netlink: 'syz.0.66': attribute type 27 has an invalid length. [ 103.599830][ T4314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.087129][ T4314] usb 3-1: Using ep0 maxpacket: 16 [ 104.102646][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.287916][ T4636] loop4: detected capacity change from 0 to 64 [ 104.356960][ T4314] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.575271][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.624506][ T4314] usb 3-1: Product: syz [ 104.634665][ T4314] usb 3-1: Manufacturer: syz [ 104.650028][ T4314] usb 3-1: SerialNumber: syz [ 104.702841][ T4639] loop1: detected capacity change from 0 to 1024 [ 104.802503][ T4314] usb 3-1: config 0 descriptor?? [ 104.834243][ T4314] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.843836][ T4314] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 105.101017][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.149828][ T4314] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 105.168874][ T4644] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.277509][ T4314] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 105.278321][ T4646] loop2: detected capacity change from 0 to 2048 [ 105.303212][ T4314] em28xx 3-1:0.0: board has no eeprom [ 105.307288][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 105.328149][ T14] usb 2-1: config 9 has an invalid interface number: 226 but max is 0 [ 105.373796][ T14] usb 2-1: config 9 has no interface number 0 [ 105.385052][ T26] audit: type=1326 audit(1775156021.557:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 105.386603][ T14] usb 2-1: config 9 interface 226 has no altsetting 0 [ 105.416951][ T4314] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 105.428555][ T4646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.439801][ T14] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=dc.fd [ 105.445630][ T4314] em28xx 3-1:0.0: dvb set to bulk mode. [ 105.457093][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.471673][ T14] usb 2-1: Product: syz [ 105.476417][ T14] usb 2-1: Manufacturer: syz [ 105.486450][ T14] usb 2-1: SerialNumber: syz [ 105.498151][ T26] audit: type=1326 audit(1775156021.557:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 105.505243][ T128] em28xx 3-1:0.0: Binding DVB extension [ 105.521342][ T26] audit: type=1326 audit(1775156021.557:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 105.562465][ T4314] usb 3-1: USB disconnect, device number 2 [ 105.580992][ T4314] em28xx 3-1:0.0: Disconnecting em28xx [ 105.629338][ T26] audit: type=1326 audit(1775156021.557:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 105.713785][ T26] audit: type=1326 audit(1775156021.557:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 107.056883][ T26] audit: type=1326 audit(1775156021.557:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 107.131262][ T14] mdc800 2-1:9.226: probe fails -> wrong Interface [ 107.143057][ T128] em28xx 3-1:0.0: Registering input extension [ 107.158787][ T4314] em28xx 3-1:0.0: Closing input extension [ 107.173142][ T14] usb 2-1: USB disconnect, device number 4 [ 107.191077][ T4663] loop3: detected capacity change from 0 to 2048 [ 107.220443][ T26] audit: type=1326 audit(1775156021.557:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 107.307952][ T26] audit: type=1326 audit(1775156021.557:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 107.344447][ T4663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.354158][ T4314] em28xx 3-1:0.0: Freeing device [ 107.399238][ T26] audit: type=1326 audit(1775156021.557:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 107.423435][ T26] audit: type=1326 audit(1775156021.597:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f435059c819 code=0x7ffc0000 [ 108.023579][ T4674] loop4: detected capacity change from 0 to 32768 [ 108.034696][ T4674] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.80 (4674) [ 108.102169][ T4674] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.112907][ T4674] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 108.121673][ T4674] BTRFS info (device loop4): using free space tree [ 108.332570][ T4678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.738015][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 109.932086][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 110.264767][ T4674] BTRFS info (device loop4): enabling ssd optimizations [ 110.402493][ T4705] loop2: detected capacity change from 0 to 64 [ 112.236080][ T4719] loop0: detected capacity change from 0 to 131072 [ 112.264908][ T4710] syz.4.80 (4710) used greatest stack depth: 20720 bytes left [ 112.289023][ T4719] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 112.296168][ T4719] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 112.307524][ T4719] F2FS-fs (loop0): invalid crc value [ 112.364100][ T4719] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.418074][ T4719] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 112.425371][ T4719] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 112.526172][ T4728] loop2: detected capacity change from 0 to 512 [ 112.581922][ T4267] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.656981][ T4728] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.858900][ T4735] loop3: detected capacity change from 0 to 4096 [ 114.833730][ T4748] netlink: 104 bytes leftover after parsing attributes in process `syz.4.95'. [ 115.293203][ T4751] loop2: detected capacity change from 0 to 2048 [ 115.516503][ T4751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.707029][ T4313] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.879173][ T4763] process 'syz.0.97' launched '/dev/fd/6' with NULL argv: empty string added [ 115.962630][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 116.104856][ T4313] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 116.342838][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.424678][ T4313] pvrusb2: Hardware description: Terratec Grabster AV400 [ 116.473190][ T4313] pvrusb2: ********** [ 116.487377][ T4313] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 116.536923][ T4313] pvrusb2: Important functionality might not be entirely working. [ 116.596044][ T4313] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 116.613541][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 116.755907][ T4773] loop3: detected capacity change from 0 to 32768 [ 116.987948][ T4778] Zero length message leads to an empty skb [ 117.734864][ T4313] pvrusb2: ********** [ 118.114761][ T2305] pvrusb2: Invalid write control endpoint [ 118.302484][ T4739] usb 5-1: USB disconnect, device number 2 [ 119.421115][ T2305] pvrusb2: Invalid write control endpoint [ 119.466862][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 120.713291][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 121.262983][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 121.863088][ T2305] pvrusb2: Device being rendered inoperable [ 121.966925][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 121.976402][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 122.910537][ T2305] pvrusb2: Attached sub-driver cx25840 [ 123.007375][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 123.286835][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 124.732218][ T4829] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 125.864761][ T4834] loop2: detected capacity change from 0 to 512 [ 125.913922][ T4834] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 130.278269][ T4869] loop4: detected capacity change from 0 to 16 [ 130.305771][ T4869] erofs: (device loop4): mounted with root inode @ nid 36. [ 132.853849][ T4738] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.920424][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929074][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.061407][ T4738] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 133.075574][ T4738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.212926][ T4738] usb 1-1: Product: syz [ 133.220939][ T4738] usb 1-1: Manufacturer: syz [ 133.226449][ T4738] usb 1-1: SerialNumber: syz [ 133.617719][ T4909] netlink: 180 bytes leftover after parsing attributes in process `syz.2.133'. [ 134.280188][ T4738] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 134.733301][ T4927] loop2: detected capacity change from 0 to 16 [ 134.757217][ T4927] erofs: (device loop2): mounted with root inode @ nid 36. [ 135.597409][ T4928] loop4: detected capacity change from 0 to 16 [ 136.585024][ T4928] erofs: (device loop4): mounted with root inode @ nid 36. [ 136.991202][ T4738] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 137.965492][ T4738] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 138.036636][ T4738] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 139.299225][ T4738] lan78xx: probe of 1-1:1.0 failed with error -71 [ 139.319394][ T4738] usb 1-1: USB disconnect, device number 2 [ 139.341299][ T4944] loop1: detected capacity change from 0 to 4096 [ 139.403674][ T4944] ntfs3: loop1: Failed to load $Volume. [ 139.639988][ T4956] netlink: 180 bytes leftover after parsing attributes in process `syz.4.146'. [ 139.958683][ T4260] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.983470][ T4960] bridge0: port 3(syz_tun) entered disabled state [ 141.023740][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.038620][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.696387][ T4966] loop4: detected capacity change from 0 to 1024 [ 141.756293][ T4966] EXT4-fs: Ignoring removed bh option [ 141.792678][ T4966] EXT4-fs: Ignoring removed bh option [ 141.812902][ T4966] EXT4-fs: Ignoring removed bh option [ 141.925391][ T4966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.998834][ T4966] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 142.361004][ T4973] loop2: detected capacity change from 0 to 512 [ 142.393022][ T4973] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.413391][ T4965] loop0: detected capacity change from 0 to 131072 [ 142.437532][ T4965] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 142.444788][ T4965] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 142.456144][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 142.462574][ T4965] F2FS-fs (loop0): invalid crc value [ 142.520722][ T4973] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 142.535715][ T4965] F2FS-fs (loop0): Found nat_bits in checkpoint [ 142.746015][ T4965] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 142.753413][ T4965] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 143.538317][ T4973] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.155: inode #15: comm syz.2.155: iget: illegal inode # [ 143.937788][ T4973] EXT4-fs (loop2): Remounting filesystem read-only [ 143.946182][ T4973] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.155: couldn't read orphan inode 15 (err -117) [ 144.560897][ T4973] EXT4-fs (loop2): Remounting filesystem read-only [ 144.673507][ T4973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 144.814514][ T4972] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.155: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 145.706889][ T4972] EXT4-fs (loop2): Remounting filesystem read-only [ 145.907839][ T5005] netlink: 180 bytes leftover after parsing attributes in process `syz.1.161'. [ 146.723064][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 146.763797][ T5008] loop4: detected capacity change from 0 to 4096 [ 146.916304][ T5008] ntfs3: loop4: Failed to load $Volume. [ 147.679089][ T5008] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 147.818029][ T5008] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 149.990128][ T5031] loop1: detected capacity change from 0 to 131072 [ 150.001584][ T5031] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 150.008359][ T5031] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 150.030820][ T5031] F2FS-fs (loop1): invalid crc value [ 150.658827][ T5031] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.910163][ T5031] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 150.917591][ T5031] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 151.377663][ T5054] netlink: 180 bytes leftover after parsing attributes in process `syz.2.176'. [ 151.949624][ T22] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 152.158635][ T22] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 152.178053][ T22] usb 1-1: config 0 has no interface number 0 [ 152.244402][ T22] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 152.292209][ T22] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 152.529382][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.790343][ T22] usb 1-1: Product: syz [ 152.921427][ T22] usb 1-1: Manufacturer: syz [ 152.982089][ T22] usb 1-1: SerialNumber: syz [ 153.289537][ T22] usb 1-1: config 0 descriptor?? [ 153.994507][ T22] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 154.020136][ T22] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 154.543732][ T4738] usb 1-1: USB disconnect, device number 3 [ 154.617278][ T4738] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 154.629769][ T22] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 154.695009][ T4738] kobil_sct 1-1:0.148: device disconnected [ 154.951570][ T22] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 155.206432][ T5090] loop2: detected capacity change from 0 to 131072 [ 155.247899][ T5090] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 155.254733][ T5090] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 155.264069][ T5090] F2FS-fs (loop2): invalid crc value [ 155.319705][ T5090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.370491][ T5090] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 155.378006][ T5090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 155.515314][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.529854][ T22] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 155.539213][ T22] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 155.567031][ T22] usb 4-1: Product: syz [ 155.586933][ T22] usb 4-1: Manufacturer: syz [ 155.591682][ T22] usb 4-1: SerialNumber: syz [ 155.598414][ T22] usb 4-1: config 0 descriptor?? [ 155.610961][ T22] usb 4-1: selecting invalid altsetting 0 [ 155.743496][ T5110] netlink: 14 bytes leftover after parsing attributes in process `syz.0.189'. [ 155.909979][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.924242][ T5091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.934510][ T5091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.651544][ T22] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.701346][ T22] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 156.737417][ T22] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.924113][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.939004][ T5102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 157.429113][ T4738] usb 2-1: USB disconnect, device number 5 [ 158.327532][ T7] usb 4-1: USB disconnect, device number 3 [ 160.018736][ T5149] loop4: detected capacity change from 0 to 256 [ 160.139401][ T5149] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 163.266996][ T5174] loop4: detected capacity change from 0 to 16 [ 165.089222][ T5174] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.399291][ T4281] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 165.407908][ T4281] Bluetooth: hci1: Injecting HCI hardware error event [ 165.416207][ T48] Bluetooth: hci1: hardware error 0x00 [ 166.019918][ T5192] loop0: detected capacity change from 0 to 64 [ 167.643325][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 167.643339][ T26] audit: type=1326 audit(1775156083.817:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bebb9c819 code=0x7ffc0000 [ 167.717019][ T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 168.366027][ T26] audit: type=1326 audit(1775156083.847:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bebb9c819 code=0x7ffc0000 [ 169.513563][ T5220] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 169.526953][ T26] audit: type=1326 audit(1775156083.847:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9bebb9c819 code=0x7ffc0000 [ 169.550562][ T26] audit: type=1326 audit(1775156083.847:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bebb9c819 code=0x7ffc0000 [ 169.575049][ T26] audit: type=1326 audit(1775156083.857:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bebb9c819 code=0x7ffc0000 [ 172.272528][ T5239] loop4: detected capacity change from 0 to 16 [ 172.280862][ T5239] erofs: (device loop4): mounted with root inode @ nid 36. [ 172.504742][ T5248] netlink: 180 bytes leftover after parsing attributes in process `syz.2.220'. [ 172.788120][ T14] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 172.951934][ T26] audit: type=1326 audit(1775156089.117:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d99c819 code=0x7ffc0000 [ 172.998759][ T14] usb 2-1: config 0 has no interfaces? [ 173.006508][ T14] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 173.026965][ T4310] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 173.046585][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.061913][ T26] audit: type=1326 audit(1775156089.157:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d99c819 code=0x7ffc0000 [ 173.113379][ T14] usb 2-1: Product: syz [ 173.128283][ T14] usb 2-1: Manufacturer: syz [ 173.147652][ T26] audit: type=1326 audit(1775156089.157:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc89d99c819 code=0x7ffc0000 [ 173.148553][ T14] usb 2-1: SerialNumber: syz [ 173.177654][ T26] audit: type=1326 audit(1775156089.157:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d99c819 code=0x7ffc0000 [ 173.203428][ T26] audit: type=1326 audit(1775156089.157:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d99c819 code=0x7ffc0000 [ 173.228526][ T4310] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 173.318541][ T5257] loop2: detected capacity change from 0 to 16 [ 174.252691][ T5257] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.512359][ T4310] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.520357][ T14] usb 2-1: config 0 descriptor?? [ 174.537665][ T4310] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.547921][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 174.556863][ T4310] usb 4-1: Product: syz [ 174.563792][ T4310] usb 4-1: Manufacturer: syz [ 174.568555][ T4310] usb 4-1: SerialNumber: syz [ 174.577449][ T4310] usb 4-1: config 0 descriptor?? [ 174.591161][ T4310] usb 4-1: selecting invalid altsetting 0 [ 174.839070][ T5252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.927628][ T5252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.975224][ T4313] usb 2-1: USB disconnect, device number 6 [ 176.909442][ T4314] usb 4-1: USB disconnect, device number 4 [ 178.700204][ T5282] loop3: detected capacity change from 0 to 512 [ 178.752660][ T5282] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.918687][ T5302] loop4: detected capacity change from 0 to 16 [ 180.933031][ T5302] erofs: (device loop4): mounted with root inode @ nid 36. [ 181.967101][ T4740] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 181.991198][ T5312] bridge0: port 3(syz_tun) entered disabled state [ 182.182097][ T4740] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 182.241296][ T4740] usb 4-1: config 0 interface 0 has no altsetting 0 [ 182.355336][ T4740] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 182.460056][ T4740] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 182.548278][ T4740] usb 4-1: Product: syz [ 182.571506][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.603447][ T4740] usb 4-1: Manufacturer: syz [ 182.655896][ T4740] usb 4-1: SerialNumber: syz [ 182.666191][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.715406][ T4740] usb 4-1: config 0 descriptor?? [ 182.761205][ T4740] usb 4-1: selecting invalid altsetting 0 [ 182.839565][ T5321] loop4: detected capacity change from 0 to 64 [ 182.910227][ T5316] device syzkaller0 entered promiscuous mode [ 182.951092][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.024842][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.363635][ T125] usb 4-1: USB disconnect, device number 5 [ 186.452745][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 186.459445][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 186.465970][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 188.175643][ T5370] hub 9-0:1.0: USB hub found [ 188.186872][ T5370] hub 9-0:1.0: 1 port detected [ 189.724166][ T5382] loop0: detected capacity change from 0 to 512 [ 189.795132][ T5382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 189.807944][ T5382] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.816916][ T125] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 189.961568][ T5389] loop2: detected capacity change from 0 to 256 [ 190.041012][ T4313] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 190.245418][ T5391] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 190.264551][ T5391] Quota error (device loop0): write_blk: dquota write failed [ 190.274495][ T5391] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 190.284681][ T5391] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.259: Failed to acquire dquot type 0 [ 190.602404][ T125] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.703523][ T125] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.714228][ T125] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.723960][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.737180][ T4313] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 190.738638][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 190.748943][ T4313] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.760367][ T5374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.782250][ T4313] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.814696][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 190.859023][ T4313] usb 5-1: Product: syz [ 190.874785][ T4313] usb 5-1: Manufacturer: syz [ 190.888600][ T4313] usb 5-1: SerialNumber: syz [ 190.914546][ T4313] usb 5-1: config 0 descriptor?? [ 190.957869][ T4313] usb 5-1: selecting invalid altsetting 0 [ 191.148866][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.244176][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.623406][ T5403] netlink: 'syz.4.258': attribute type 1 has an invalid length. [ 192.218970][ T5410] loop2: detected capacity change from 0 to 64 [ 192.348198][ T4313] usb 4-1: USB disconnect, device number 6 [ 193.119468][ T5418] loop3: detected capacity change from 0 to 32768 [ 193.322929][ T22] usb 5-1: USB disconnect, device number 3 [ 195.217493][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.223843][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.140455][ T5450] loop3: detected capacity change from 0 to 512 [ 197.168126][ T5450] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.289079][ T5482] loop2: detected capacity change from 0 to 16 [ 200.302521][ T5482] erofs: (device loop2): mounted with root inode @ nid 36. [ 200.479172][ T5486] loop4: detected capacity change from 0 to 512 [ 200.503720][ T5486] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.155431][ T5500] netlink: 180 bytes leftover after parsing attributes in process `syz.3.297'. [ 202.620695][ T5512] ================================================================== [ 202.628896][ T5512] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 202.636151][ T5512] Read of size 8 at addr ffff88802911ac18 by task syz.2.303/5512 [ 202.643997][ T5512] [ 202.646352][ T5512] CPU: 1 PID: 5512 Comm: syz.2.303 Not tainted syzkaller #0 [ 202.653671][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.663783][ T5512] Call Trace: [ 202.667086][ T5512] [ 202.670054][ T5512] dump_stack_lvl+0x188/0x24e [ 202.674872][ T5512] ? read_lock_is_recursive+0x10/0x10 [ 202.680454][ T5512] ? show_regs_print_info+0x12/0x12 [ 202.685757][ T5512] ? load_image+0x400/0x400 [ 202.690278][ T5512] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 202.695742][ T5512] ? __virt_addr_valid+0x188/0x540 [ 202.700894][ T5512] ? __virt_addr_valid+0x465/0x540 [ 202.706091][ T5512] ? dvb_device_open+0xc6/0x370 [ 202.710956][ T5512] print_report+0xa8/0x210 [ 202.715824][ T5512] kasan_report+0x10b/0x140 [ 202.720539][ T5512] ? dvb_device_open+0xc6/0x370 [ 202.725403][ T5512] dvb_device_open+0xc6/0x370 [ 202.730115][ T5512] ? do_raw_spin_unlock+0x11d/0x230 [ 202.735376][ T5512] chrdev_open+0x5c5/0x6a0 [ 202.739885][ T5512] ? cd_forget+0x160/0x160 [ 202.744338][ T5512] ? fsnotify_perm+0x39b/0x550 [ 202.749241][ T5512] ? cd_forget+0x160/0x160 [ 202.753681][ T5512] do_dentry_open+0x7e9/0x10d0 [ 202.758474][ T5512] path_openat+0x2635/0x2ee0 [ 202.763076][ T5512] ? verify_lock_unused+0x140/0x140 [ 202.768485][ T5512] ? do_syscall_64+0x4c/0xa0 [ 202.773188][ T5512] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.779360][ T5512] ? do_filp_open+0x430/0x430 [ 202.784110][ T5512] do_filp_open+0x1f1/0x430 [ 202.788633][ T5512] ? vfs_tmpfile+0x480/0x480 [ 202.793226][ T5512] ? _raw_spin_unlock+0x24/0x40 [ 202.798072][ T5512] ? alloc_fd+0x58f/0x630 [ 202.802408][ T5512] do_sys_openat2+0x150/0x4b0 [ 202.807113][ T5512] ? do_sys_open+0xe0/0xe0 [ 202.811631][ T5512] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 202.817801][ T5512] ? lock_chain_count+0x20/0x20 [ 202.822745][ T5512] __x64_sys_openat+0x135/0x160 [ 202.827602][ T5512] do_syscall_64+0x4c/0xa0 [ 202.832025][ T5512] ? clear_bhb_loop+0x60/0xb0 [ 202.836704][ T5512] ? clear_bhb_loop+0x60/0xb0 [ 202.841394][ T5512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.847639][ T5512] RIP: 0033:0x7fc89d95d04e [ 202.852593][ T5512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.872415][ T5512] RSP: 002b:00007fc89e8cbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 202.880833][ T5512] RAX: ffffffffffffffda RBX: 00007fc89e8cc6c0 RCX: 00007fc89d95d04e [ 202.888828][ T5512] RDX: 0000000000040002 RSI: 00007fc89e8cbc00 RDI: ffffffffffffff9c [ 202.896803][ T5512] RBP: 00007fc89e8cbc00 R08: 0000000000000000 R09: 0000000000000000 [ 202.904776][ T5512] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 202.912923][ T5512] R13: 00007fc89dc16038 R14: 00007fc89dc15fa0 R15: 00007ffe61b76e98 [ 202.920907][ T5512] [ 202.923921][ T5512] [ 202.926240][ T5512] Allocated by task 1: [ 202.930340][ T5512] kasan_set_track+0x4b/0x70 [ 202.934957][ T5512] __kasan_kmalloc+0x8e/0xa0 [ 202.939554][ T5512] dvb_register_device+0x311/0x2150 [ 202.944768][ T5512] dvb_register_frontend+0x645/0x920 [ 202.950184][ T5512] vidtv_bridge_probe+0x9a1/0xf70 [ 202.955235][ T5512] platform_probe+0x137/0x1c0 [ 202.960558][ T5512] really_probe+0x2aa/0xc70 [ 202.965059][ T5512] __driver_probe_device+0x18c/0x330 [ 202.970339][ T5512] driver_probe_device+0x4f/0x420 [ 202.975472][ T5512] __driver_attach+0x44a/0x6e0 [ 202.980296][ T5512] bus_for_each_dev+0x182/0x1f0 [ 202.985164][ T5512] bus_add_driver+0x30a/0x5a0 [ 202.990020][ T5512] driver_register+0x32d/0x430 [ 202.994784][ T5512] vidtv_bridge_init+0x39/0x67 [ 202.999555][ T5512] do_one_initcall+0x26a/0x840 [ 203.004326][ T5512] do_initcall_level+0x137/0x1e4 [ 203.009265][ T5512] do_initcalls+0x4b/0x8a [ 203.013611][ T5512] kernel_init_freeable+0x415/0x5be [ 203.018846][ T5512] kernel_init+0x19/0x1b0 [ 203.023277][ T5512] ret_from_fork+0x1f/0x30 [ 203.027699][ T5512] [ 203.030016][ T5512] Freed by task 5408: [ 203.033995][ T5512] kasan_set_track+0x4b/0x70 [ 203.038596][ T5512] kasan_save_free_info+0x2d/0x50 [ 203.043617][ T5512] ____kasan_slab_free+0x126/0x1e0 [ 203.048732][ T5512] slab_free_freelist_hook+0x131/0x1a0 [ 203.054273][ T5512] __kmem_cache_free+0xb6/0x1f0 [ 203.059559][ T5512] dvb_device_open+0x2e7/0x370 [ 203.064409][ T5512] chrdev_open+0x5c5/0x6a0 [ 203.069091][ T5512] do_dentry_open+0x7e9/0x10d0 [ 203.073940][ T5512] path_openat+0x2635/0x2ee0 [ 203.078535][ T5512] do_filp_open+0x1f1/0x430 [ 203.083030][ T5512] do_sys_openat2+0x150/0x4b0 [ 203.087704][ T5512] __x64_sys_openat+0x135/0x160 [ 203.092552][ T5512] do_syscall_64+0x4c/0xa0 [ 203.096971][ T5512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.102860][ T5512] [ 203.105261][ T5512] The buggy address belongs to the object at ffff88802911ac00 [ 203.105261][ T5512] which belongs to the cache kmalloc-256 of size 256 [ 203.119397][ T5512] The buggy address is located 24 bytes inside of [ 203.119397][ T5512] 256-byte region [ffff88802911ac00, ffff88802911ad00) [ 203.132673][ T5512] [ 203.134998][ T5512] The buggy address belongs to the physical page: [ 203.141432][ T5512] page:ffffea0000a44680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2911a [ 203.151580][ T5512] head:ffffea0000a44680 order:1 compound_mapcount:0 compound_pincount:0 [ 203.159909][ T5512] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 203.167934][ T5512] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 203.176599][ T5512] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 203.185255][ T5512] page dumped because: kasan: bad access detected [ 203.191678][ T5512] page_owner tracks the page as allocated [ 203.197410][ T5512] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10292703534, free_ts 0 [ 203.217230][ T5512] post_alloc_hook+0x173/0x1a0 [ 203.222023][ T5512] get_page_from_freelist+0x1a1e/0x1ab0 [ 203.227592][ T5512] __alloc_pages+0x1ec/0x4f0 [ 203.232200][ T5512] alloc_page_interleave+0x24/0x1e0 [ 203.237414][ T5512] alloc_slab_page+0x5d/0x160 [ 203.242089][ T5512] new_slab+0x87/0x2c0 [ 203.246176][ T5512] ___slab_alloc+0xbc6/0x1240 [ 203.250850][ T5512] __kmem_cache_alloc_node+0x1a0/0x260 [ 203.256301][ T5512] kmalloc_trace+0x26/0xe0 [ 203.260808][ T5512] bus_add_driver+0xda/0x5a0 [ 203.265397][ T5512] driver_register+0x32d/0x430 [ 203.270156][ T5512] usb_register_driver+0x202/0x3d0 [ 203.275259][ T5512] do_one_initcall+0x26a/0x840 [ 203.280108][ T5512] do_initcall_level+0x137/0x1e4 [ 203.285071][ T5512] do_initcalls+0x4b/0x8a [ 203.289440][ T5512] kernel_init_freeable+0x415/0x5be [ 203.294630][ T5512] page_owner free stack trace missing [ 203.299986][ T5512] [ 203.302326][ T5512] Memory state around the buggy address: [ 203.307995][ T5512] ffff88802911ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.316089][ T5512] ffff88802911ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.324406][ T5512] >ffff88802911ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.332458][ T5512] ^ [ 203.337298][ T5512] ffff88802911ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.345437][ T5512] ffff88802911ad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.353752][ T5512] ================================================================== [ 203.417466][ T5512] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.424746][ T5512] CPU: 0 PID: 5512 Comm: syz.2.303 Not tainted syzkaller #0 [ 203.432236][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.442498][ T5512] Call Trace: [ 203.445812][ T5512] [ 203.448806][ T5512] dump_stack_lvl+0x188/0x24e [ 203.453525][ T5512] ? memcpy+0x3c/0x60 [ 203.457541][ T5512] ? show_regs_print_info+0x12/0x12 [ 203.462961][ T5512] ? load_image+0x400/0x400 [ 203.467496][ T5512] panic+0x2e5/0x730 [ 203.471515][ T5512] ? bpf_jit_dump+0xd0/0xd0 [ 203.476139][ T5512] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 203.482413][ T5512] ? _raw_spin_unlock+0x40/0x40 [ 203.487301][ T5512] check_panic_on_warn+0x80/0xa0 [ 203.492276][ T5512] ? dvb_device_open+0xc6/0x370 [ 203.497162][ T5512] end_report+0x66/0x110 [ 203.501453][ T5512] kasan_report+0x118/0x140 [ 203.505999][ T5512] ? dvb_device_open+0xc6/0x370 [ 203.510896][ T5512] dvb_device_open+0xc6/0x370 [ 203.515619][ T5512] ? do_raw_spin_unlock+0x11d/0x230 [ 203.520853][ T5512] chrdev_open+0x5c5/0x6a0 [ 203.525322][ T5512] ? cd_forget+0x160/0x160 [ 203.530134][ T5512] ? fsnotify_perm+0x39b/0x550 [ 203.534978][ T5512] ? cd_forget+0x160/0x160 [ 203.539505][ T5512] do_dentry_open+0x7e9/0x10d0 [ 203.544403][ T5512] path_openat+0x2635/0x2ee0 [ 203.549035][ T5512] ? verify_lock_unused+0x140/0x140 [ 203.554349][ T5512] ? do_syscall_64+0x4c/0xa0 [ 203.559141][ T5512] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.565245][ T5512] ? do_filp_open+0x430/0x430 [ 203.569963][ T5512] do_filp_open+0x1f1/0x430 [ 203.574492][ T5512] ? vfs_tmpfile+0x480/0x480 [ 203.579202][ T5512] ? _raw_spin_unlock+0x24/0x40 [ 203.584160][ T5512] ? alloc_fd+0x58f/0x630 [ 203.588693][ T5512] do_sys_openat2+0x150/0x4b0 [ 203.593398][ T5512] ? do_sys_open+0xe0/0xe0 [ 203.597834][ T5512] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 203.604196][ T5512] ? lock_chain_count+0x20/0x20 [ 203.609253][ T5512] __x64_sys_openat+0x135/0x160 [ 203.614257][ T5512] do_syscall_64+0x4c/0xa0 [ 203.618887][ T5512] ? clear_bhb_loop+0x60/0xb0 [ 203.623679][ T5512] ? clear_bhb_loop+0x60/0xb0 [ 203.628467][ T5512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.634386][ T5512] RIP: 0033:0x7fc89d95d04e [ 203.638903][ T5512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.658593][ T5512] RSP: 002b:00007fc89e8cbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.667091][ T5512] RAX: ffffffffffffffda RBX: 00007fc89e8cc6c0 RCX: 00007fc89d95d04e [ 203.675058][ T5512] RDX: 0000000000040002 RSI: 00007fc89e8cbc00 RDI: ffffffffffffff9c [ 203.683305][ T5512] RBP: 00007fc89e8cbc00 R08: 0000000000000000 R09: 0000000000000000 [ 203.691266][ T5512] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 203.699415][ T5512] R13: 00007fc89dc16038 R14: 00007fc89dc15fa0 R15: 00007ffe61b76e98 [ 203.707382][ T5512] [ 203.710783][ T5512] Kernel Offset: disabled [ 203.715105][ T5512] Rebooting in 86400 seconds..