last executing test programs: 28m44.086086229s ago: executing program 2 (id=336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000f40)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{r1, 0x0, 0x3}}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x802}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000844}, 0x8000080) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, 0x0, 0x0) 28m43.645811596s ago: executing program 2 (id=337): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x250}}, 0x4c000) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x240) syz_open_dev$evdev(0x0, 0xec, 0x220300) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'sit0\x00'}}, 0x1e) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) 28m42.177909888s ago: executing program 2 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$media(0x0, 0x6, 0x115200) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000540)}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f0000000240), &(0x7f0000000640)}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 28m38.568990635s ago: executing program 2 (id=342): creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 28m38.19332679s ago: executing program 2 (id=344): socket$inet_mptcp(0x2, 0x1, 0x106) truncate(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[], 0x1, 0x1061d, &(0x7f0000010640)="$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") setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000440)="0a02e1dc32c06b56dc5f46bafa3bfaf090a4a75bbd7167235e47b433db3054e20c58dd6f8198b07c6ff2ee06d7013bdf54aae24baaf228d52ffa1480bc50e28ec20693f0c8a85466760b09cb9bb2995a7511ae987f192abd49d189a3a72f8fe6ea5e0cf78642393dc26ac355606a78173a69f2e62c7dcf228f46b130c34d638afe", 0x81) chdir(&(0x7f0000000400)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x4, 0x2, 0x6}, {0x3, 0x2, 0xc}], 0x10, 0x4f}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000100), 0x80) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) 28m33.291079166s ago: executing program 2 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$media(0x0, 0x6, 0x115200) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000540)}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f0000000240), &(0x7f0000000640)}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 28m17.846397613s ago: executing program 32 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$media(0x0, 0x6, 0x115200) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000540)}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f0000000240), &(0x7f0000000640)}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 25m45.966724943s ago: executing program 1 (id=641): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4002, &(0x7f0000000200), 0x1, 0xb917, &(0x7f00000005c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unlink(&(0x7f0000000280)='./file1\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 25m42.184595491s ago: executing program 1 (id=649): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0xfe, [@remote, @empty, @empty, @multicast1, @remote, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = syz_clone(0x2000000, 0x0, 0x60, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = creat(0x0, 0x182) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) fallocate(r6, 0x0, 0x1, 0x2000402) 25m38.98052508s ago: executing program 1 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc804) r5 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x1ab9, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x80080001, 0x1, 0x2, 0x0, 0xfc}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 25m36.476704218s ago: executing program 1 (id=660): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) 25m35.556746413s ago: executing program 1 (id=662): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 25m30.466599831s ago: executing program 1 (id=671): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 25m15.133803277s ago: executing program 33 (id=671): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 12m3.376405618s ago: executing program 6 (id=2196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0xffff, 0x0, @loopback, 0x20000000}, 0x1c) r4 = open(&(0x7f0000000040)='./bus\x00', 0x40, 0x1d6844efefe48d79) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r4], 0x2b) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1413, 0x211}, 0x10}, 0x2}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') read$FUSE(r8, &(0x7f0000006280)={0x2020}, 0x2020) 12m2.171564197s ago: executing program 6 (id=2200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffef}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x5, 0xeb}, {0x6, 0x5}, {0x1, 0x8}]}, @float={0x2, 0x0, 0x0, 0x10, 0x8}, @restrict={0x8}, @volatile={0x8, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000000100)=""/18, 0x65, 0x12, 0x1, 0x9, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x9, '\x00', 0x0, r7, 0x3, 0x4, 0x5}, 0x50) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) r8 = syz_open_procfs(0x0, &(0x7f00000190c0)='gid_map\x00') pread64(r8, 0x0, 0x0, 0x3) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) gettid() 12m0.483118263s ago: executing program 6 (id=2202): r0 = socket$isdn(0x22, 0x3, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_open_dev$dri(0x0, 0xd21, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000280)='./file0\x00', 0x200) 11m59.858356822s ago: executing program 6 (id=2205): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x37, 0x5d, 0xd2}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000100)='vfat\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 11m54.588297844s ago: executing program 6 (id=2214): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000480)='./file2\x00', 0xc0ddc005, &(0x7f00000001c0)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@nodelalloc}, {@dioread_lock}, {@journal_ioprio}, {@i_version}, {@errors_continue}, {@bh}]}, 0xf6, 0x483, &(0x7f0000000dc0)="$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") mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00716a00000000846f85df4ec7544db77cefb6ed76bf6fe0d66712639ac00a2e9280037a29"], 0x1, 0x133, &(0x7f0000000340)="$eJzs2j9KA0EUBvCnCEKOYBXIgrHY/xoLe0Gw8gQuycxmcNYJu4IkVfACisV4BFs70c4jbO0J9AZWK5vsGrPTayDfr5lH3vBltnnVs1OV+Dyzifam92cfm6lK2r3wsM99HtHcCRG1yyIvigeHDOc//byYOsaFzmt1dmN9+sKFZIGZAQAAAAAAAAAAAAAAAAAAAACwJjqfVdEaavXIhWT+r242nlxEUrI0q3+xqNrRIa7VUXk/XMrrfhFZs/0doY9vyr631LfqpN2hVhvN/3OvkpGbjSe2SKKYxewyCMKet+95B4E7y3KbidZd9SbKi+eRuU9kPS32id49c5+IWvNja0fo2+tm+uL7V6moX7cq70GBYt2K5vygwXbYeSvnh9NXcvCH88OYaAD/5DsAAP//bNI19w==") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r2, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140)=0x7, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f0000001280)=""/4083, 0xff3}], 0x2, 0x4000d, 0x5) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES16], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100), &(0x7f00000002c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) 11m53.159218936s ago: executing program 6 (id=2217): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x80080001, 0x1, 0x2, 0x0, 0xfc}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES64=r2, @ANYRESHEX, @ANYRES64, @ANYRES16], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 11m37.490205099s ago: executing program 34 (id=2217): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x80080001, 0x1, 0x2, 0x0, 0xfc}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES64=r2, @ANYRESHEX, @ANYRES64, @ANYRES16], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 36.179940615s ago: executing program 7 (id=3354): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x5) r4 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{}], 0x1}}], 0x1, 0x24008094) 34.824573675s ago: executing program 7 (id=3357): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usbip_server_init(0x0) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) 31.773760663s ago: executing program 7 (id=3363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000100)=0x9) 26.010205851s ago: executing program 5 (id=3371): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2002, 0x3b9}, &(0x7f0000000000)=0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0xcd9) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r5, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000340)={0x80000000, &(0x7f0000000240)=[{}, {0x80000000}], &(0x7f00000003c0)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000440)={0x0, 0x5, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000700)=[{0x0, 0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000c00)=[{}, {}, {}, {}]}) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f00000007c0)={{r8, 0x0, 0x0, [0x6, 0x19e7]}, {r9, 0x0, 0x0, [0x1, 0x7ff]}, 0x10000000, [0x5, 0x7fffffff]}) geteuid() io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/181, 0xb5, 0xa3) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040), 0x4) 23.537784339s ago: executing program 5 (id=3375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(r1, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x800) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r6, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000280)=0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r8 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) futimesat(r8, 0x0, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) 23.502096309s ago: executing program 7 (id=3376): socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0xffff}}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x569, &(0x7f0000000700)="$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") setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x4, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x1, 0x3}}, 0xb8}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21.872251604s ago: executing program 5 (id=3382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.875685185s ago: executing program 7 (id=3385): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@verity_require}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) open_tree(r0, &(0x7f0000000180)='./bus\x00', 0x8100) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000380)={0x2a, 0xffffffff00000002, 0x7ffe}, 0xc) bind$qrtr(r2, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000040)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000280)=0x1, 0x4) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) 19.636591579s ago: executing program 5 (id=3386): mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(0x3) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x80, 0xffffffffffffffff, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = eventfd2(0x0, 0x0) readv(r4, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r4, &(0x7f0000000280)=0x9, 0x8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 17.936562995s ago: executing program 7 (id=3387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}}, 0x20000086) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{0x2, 0x3, {0x1, 0xff, 0x3}, {0x1, 0xff, 0x2}, 0xff, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 17.752577968s ago: executing program 5 (id=3389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendmsg$nl_route(r5, 0x0, 0x40884) sendfile(r5, r5, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffef}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x5, 0xeb}, {0x6, 0x5}, {0x1, 0x8}]}, @float={0x2, 0x0, 0x0, 0x10, 0x8}, @restrict={0x8}, @volatile={0x8, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000000100)=""/18, 0x65, 0x12, 0x1, 0x9, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x9, '\x00', 0x0, r6, 0x3, 0x4, 0x5}, 0x50) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='gid_map\x00') pread64(r7, 0x0, 0x0, 0x3) gettid() 14.512758358s ago: executing program 5 (id=3392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(r1, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x800) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r5, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000280)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r7 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) futimesat(r7, 0x0, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) 13.861240348s ago: executing program 3 (id=3393): r0 = syz_io_uring_setup(0x28f, &(0x7f0000000080)={0x0, 0xb96, 0x13f81, 0x0, 0x40}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x5c, 0x0, 0x2b, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0f, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) r4 = dup(0xffffffffffffffff) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000f08000240000000000800044000000000080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 11.76451359s ago: executing program 0 (id=3396): add_key(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0xffff}}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x569, &(0x7f0000000700)="$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") setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x4, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x1, 0x3}}, 0xb8}}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10.529240799s ago: executing program 3 (id=3398): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="76eb2bbd7000fedbdf2510000000080007004b2feec60f0000006a8ffb3547ddd268286c476976303400018014000200626f6e643000", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d30000000000000080006000400000008000700010000000800090006000000180001801400020074756e6c300000000000000000000000080007000200"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x35dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0xd, 0xa}, {0x3, 0xf}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6}, 0x50) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 9.967510828s ago: executing program 0 (id=3399): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e", 0xd}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 8.650639748s ago: executing program 3 (id=3400): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usbip_server_init(0x0) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) 7.039310393s ago: executing program 4 (id=3401): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x102, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) 6.757318267s ago: executing program 0 (id=3402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getregset(0x4204, r1, 0x3, &(0x7f0000000040)={&(0x7f0000000380)=""/206, 0xce}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000002f40)={0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) 5.21207959s ago: executing program 3 (id=3403): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRES8=r3], 0x0, 0x3}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) dup(0xffffffffffffffff) r6 = openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0046d00, &(0x7f0000001500)) 5.119378742s ago: executing program 4 (id=3404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffef}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x5, 0xeb}, {0x6, 0x5}, {0x1, 0x8}]}, @float={0x2, 0x0, 0x0, 0x10, 0x8}, @restrict={0x8}, @volatile={0x8, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000000100)=""/18, 0x65, 0x12, 0x1, 0x9, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x9, '\x00', 0x0, r7, 0x3, 0x4, 0x5}, 0x50) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) r8 = syz_open_procfs(0x0, &(0x7f00000190c0)='gid_map\x00') pread64(r8, 0x0, 0x0, 0x3) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) gettid() 4.955459155s ago: executing program 0 (id=3405): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x68, r5, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 2.761636958s ago: executing program 3 (id=3406): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x5) r4 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{}], 0x1}}], 0x1, 0x24008094) 2.737534059s ago: executing program 4 (id=3407): syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0) 2.61802846s ago: executing program 0 (id=3408): r0 = syz_io_uring_setup(0x28f, &(0x7f0000000080)={0x0, 0xb96, 0x13f81, 0x0, 0x40}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x5c, 0x0, 0x2b, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0f, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) r4 = dup(0xffffffffffffffff) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000f08000240000000000800044000000000080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 2.249469706s ago: executing program 35 (id=3387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}}, 0x20000086) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{0x2, 0x3, {0x1, 0xff, 0x3}, {0x1, 0xff, 0x2}, 0xff, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2.215586327s ago: executing program 4 (id=3410): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCGETS2(r2, 0x802c542a, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000300)={0x14}) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x100000000000f7) keyctl$revoke(0x3, r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000940)=0x9) 2.214804247s ago: executing program 0 (id=3411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000100)=0x9) 1.059078814s ago: executing program 4 (id=3412): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) gettid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 45.02293ms ago: executing program 4 (id=3413): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usbip_server_init(0x0) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) 0s ago: executing program 3 (id=3414): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x102, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) kernel console output (not intermixed with test programs): ) flags 0x80700 phys_seg 1 prio class 2 [ 1371.517825][T14848] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1371.544872][T14855] loop0: detected capacity change from 0 to 128 [ 1371.664316][T14848] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1371.881522][T14862] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1371.882857][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1372.732987][T14850] lo speed is unknown, defaulting to 1000 [ 1372.943911][T14867] loop5: detected capacity change from 0 to 1024 [ 1373.065595][T14867] EXT4-fs: Ignoring removed bh option [ 1373.402852][T14874] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1373.559323][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 1373.616656][T14871] loop4: detected capacity change from 0 to 1024 [ 1373.674568][T14867] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1373.987074][T14871] EXT4-fs: Ignoring removed bh option [ 1374.218399][T14871] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1374.323728][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1374.378946][T14884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2358'. [ 1374.388624][T14884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2358'. [ 1374.464238][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 1375.607867][T13462] Bluetooth: hci1: command 0x041b tx timeout [ 1375.729497][T14899] overlayfs: missing 'lowerdir' [ 1375.821641][T14900] loop5: detected capacity change from 0 to 8 [ 1376.473219][T14900] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1376.481277][T14900] SQUASHFS error: Failed to read block 0x9b: -5 [ 1376.487624][T14900] SQUASHFS error: Unable to read metadata cache entry [99] [ 1376.494866][T14900] SQUASHFS error: Unable to read inode 0x127 [ 1376.550519][T13952] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1376.566861][T14901] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1376.963470][T14850] chnl_net:caif_netlink_parms(): no params data found [ 1377.053724][T14912] loop4: detected capacity change from 0 to 64 [ 1377.687648][T13462] Bluetooth: hci1: command 0x040f tx timeout [ 1377.987524][T14911] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1378.152790][T14916] loop3: detected capacity change from 0 to 128 [ 1378.167216][T13462] Bluetooth: Wrong link type (-22) [ 1378.257062][T13462] Bluetooth: Wrong link type (-22) [ 1378.262552][T13462] Bluetooth: hci3: link tx timeout [ 1378.268717][T13462] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1379.423318][T14930] loop3: detected capacity change from 0 to 1024 [ 1379.485785][T14930] EXT4-fs: Ignoring removed bh option [ 1379.585620][T14934] loop4: detected capacity change from 0 to 1024 [ 1379.593691][T14930] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1379.605016][T14934] EXT4-fs: Ignoring removed bh option [ 1379.619586][T14850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.626947][T14850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.635938][T14850] device bridge_slave_0 entered promiscuous mode [ 1379.645325][T14850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.653169][T14850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.666641][T14850] device bridge_slave_1 entered promiscuous mode [ 1379.743379][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1379.747012][T14934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1379.771878][T13462] Bluetooth: hci1: command 0x0419 tx timeout [ 1379.900626][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 1379.950761][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 1379.958005][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.037483][ T22] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1380.057633][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.165495][ T22] usb 1-1: config 0 descriptor?? [ 1380.273689][T14850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.540316][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 1380.540424][T14850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.914273][ T22] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1381.294280][T14963] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1381.345324][ T4385] device hsr_slave_0 left promiscuous mode [ 1381.376473][ T4385] device hsr_slave_1 left promiscuous mode [ 1381.913420][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.932115][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1381.950502][ T4385] device bridge_slave_1 left promiscuous mode [ 1381.957212][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.987442][ T4327] usb 1-1: USB disconnect, device number 4 [ 1382.042595][ T4385] device bridge_slave_0 left promiscuous mode [ 1382.071204][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.227310][T14972] loop3: detected capacity change from 0 to 64 [ 1382.407837][ T4271] Bluetooth: hci5: command 0x1003 tx timeout [ 1382.415766][T13462] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1384.256075][T14974] vivid-004: disconnect [ 1384.377422][T14970] vivid-004: reconnect [ 1385.052430][T14986] loop5: detected capacity change from 0 to 128 [ 1386.693136][T14998] loop4: detected capacity change from 0 to 1024 [ 1386.708875][T14998] EXT4-fs: Ignoring removed bh option [ 1386.777565][T14998] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1386.874854][T15004] loop5: detected capacity change from 0 to 1024 [ 1386.969047][T15004] EXT4-fs: Ignoring removed bh option [ 1387.046917][T15004] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1387.058050][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 1387.755427][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1388.190775][ T4385] team0 (unregistering): Port device team_slave_1 removed [ 1388.243049][ T4385] team0 (unregistering): Port device team_slave_0 removed [ 1388.296868][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.349997][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.897988][ T4385] bond0 (unregistering): Released all slaves [ 1388.988048][T14850] team0: Port device team_slave_0 added [ 1389.012971][T15020] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1389.050220][T14850] team0: Port device team_slave_1 added [ 1389.192501][T14850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.265812][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.344833][T14850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.360153][T14850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.367192][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.431601][T14850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.570141][T15031] loop5: detected capacity change from 0 to 64 [ 1389.740351][T15029] loop0: detected capacity change from 0 to 32768 [ 1389.747618][T15029] XFS: ikeep mount option is deprecated. [ 1390.695733][T15035] loop3: detected capacity change from 0 to 128 [ 1391.778427][T15029] XFS (loop0): Mounting V5 Filesystem [ 1392.532078][T15029] XFS (loop0): Ending clean mount [ 1392.540194][T15029] XFS (loop0): Quotacheck needed: Please wait. [ 1392.552938][T14850] device hsr_slave_0 entered promiscuous mode [ 1392.701901][T14850] device hsr_slave_1 entered promiscuous mode [ 1392.724575][T15057] loop4: detected capacity change from 0 to 1024 [ 1392.731542][T15029] XFS (loop0): Quotacheck: Done. [ 1392.771549][T15057] EXT4-fs: Ignoring removed bh option [ 1392.798210][ T4249] XFS (loop0): Unmounting Filesystem [ 1392.889525][T15053] mkiss: ax0: crc mode is auto. [ 1392.939991][T15057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1393.378165][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 1393.737858][T15078] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1398.528185][ T5255] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1400.078344][T15101] loop3: detected capacity change from 0 to 128 [ 1401.649002][T15105] loop5: detected capacity change from 0 to 64 [ 1402.528627][ T4385] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1402.754681][T15113] loop0: detected capacity change from 0 to 32768 [ 1402.762026][T15113] XFS: ikeep mount option is deprecated. [ 1402.851835][T15120] UBIFS error (pid: 15120): cannot open "(null)", error -22 [ 1403.167149][T15128] autofs4:pid:15128:autofs_fill_super: called with bogus options [ 1403.227100][T15113] XFS (loop0): Mounting V5 Filesystem [ 1403.909707][T14850] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1403.928877][T15113] XFS (loop0): Ending clean mount [ 1403.957015][T15113] XFS (loop0): Quotacheck needed: Please wait. [ 1404.241654][T14850] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1404.331134][T15113] XFS (loop0): Quotacheck: Done. [ 1404.471047][T15146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2404'. [ 1406.260678][T14850] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1406.290430][T14850] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1406.353096][ T4249] XFS (loop0): Unmounting Filesystem [ 1406.434259][T15158] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1406.752348][T14850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.792195][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1406.804615][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1406.823492][T14850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.845325][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1406.875217][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1406.904189][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.911447][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.008692][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1407.034076][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1407.100886][T15167] loop5: detected capacity change from 0 to 128 [ 1407.370796][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1407.661626][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.668866][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.731016][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1407.823149][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1407.879106][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1407.923045][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1407.954907][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1408.007286][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1408.032205][ T4271] Bluetooth: Wrong link type (-22) [ 1408.039013][ T4271] Bluetooth: hci3: link tx timeout [ 1408.044182][ T4271] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1409.836649][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1409.846319][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1409.861352][T14850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1409.873934][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1409.886712][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1409.905387][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1409.927141][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1412.375586][T15187] loop5: detected capacity change from 0 to 64 [ 1413.675411][T15196] autofs4:pid:15196:autofs_fill_super: called with bogus options [ 1415.597610][ T4312] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1415.798729][ T4312] usb 6-1: not running at top speed; connect to a high speed hub [ 1415.834033][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1415.842723][ T4312] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1415.872321][ T4312] usb 6-1: config 1 has no interface number 1 [ 1415.879234][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1415.907065][ T4312] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1415.937225][T14850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.063525][T15222] loop3: detected capacity change from 0 to 128 [ 1416.152407][ T4312] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1416.313447][ T4312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.603553][ T4312] usb 6-1: Product: syz [ 1416.635072][ T4312] usb 6-1: Manufacturer: syz [ 1416.654313][ T4312] usb 6-1: SerialNumber: syz [ 1416.802303][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2422'. [ 1417.016242][ T4312] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1417.084109][T15201] loop0: detected capacity change from 0 to 32768 [ 1417.150424][T15201] XFS: ikeep mount option is deprecated. [ 1417.659252][T15201] XFS (loop0): Mounting V5 Filesystem [ 1417.675531][ T4312] usb 6-1: USB disconnect, device number 5 [ 1418.066788][T15247] loop5: detected capacity change from 0 to 512 [ 1418.173472][T15201] XFS (loop0): log mount failed [ 1418.310657][T14163] udevd[14163]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1419.789776][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1419.824199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1419.885952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1419.904152][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1419.938116][T14850] device veth0_vlan entered promiscuous mode [ 1420.002852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1420.062948][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1420.329806][T14850] device veth1_vlan entered promiscuous mode [ 1420.609149][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1420.629075][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1420.642763][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1420.688349][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1420.727059][T14850] device veth0_macvtap entered promiscuous mode [ 1420.765048][T14850] device veth1_macvtap entered promiscuous mode [ 1420.827499][T15272] autofs4:pid:15272:autofs_fill_super: called with bogus options [ 1420.879005][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1420.925902][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1421.365762][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.385019][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.385037][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.385056][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.385586][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.385805][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.386105][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.386122][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.426627][T14850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.430649][T15102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1421.433719][T15102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1421.538463][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.539085][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.539571][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.539843][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.540171][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.540505][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.540778][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.541142][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.607664][T14850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.609918][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1421.610778][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1421.616542][T14850] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.616569][T14850] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.616590][T14850] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.616610][T14850] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.863860][T15286] loop4: detected capacity change from 0 to 128 [ 1424.058920][T15279] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1424.164607][ T6601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.214456][ T6601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.262318][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1425.746926][T13462] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1425.760721][T13462] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1425.787560][T13462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1425.798163][T14648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1425.806816][T14648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1425.814531][T14648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1425.877719][T15300] lo speed is unknown, defaulting to 1000 [ 1426.367298][T15308] loop4: detected capacity change from 0 to 512 [ 1427.356978][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1427.359206][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1427.867357][T14648] Bluetooth: hci5: command 0x0409 tx timeout [ 1428.452834][ T75] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.490354][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.497282][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.532969][T15331] autofs4:pid:15331:autofs_fill_super: called with bogus options [ 1428.860388][T15300] chnl_net:caif_netlink_parms(): no params data found [ 1429.328591][ T75] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.927402][T14648] Bluetooth: hci5: command 0x041b tx timeout [ 1430.191748][T15343] loop5: detected capacity change from 0 to 128 [ 1431.263712][ T75] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.478370][T15300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.485774][T15300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.502802][T15300] device bridge_slave_0 entered promiscuous mode [ 1431.514732][T15300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.562846][T15300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.007426][T14648] Bluetooth: hci5: command 0x040f tx timeout [ 1432.143528][T15345] loop4: detected capacity change from 0 to 131072 [ 1432.155950][T15345] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1432.164465][T15345] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1432.183928][T15300] device bridge_slave_1 entered promiscuous mode [ 1432.212437][T15355] loop5: detected capacity change from 0 to 16 [ 1432.220238][T15345] F2FS-fs (loop4): invalid crc value [ 1432.361650][T15345] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1432.454197][T15365] overlayfs: missing 'lowerdir' [ 1432.515600][T15366] loop3: detected capacity change from 0 to 8 [ 1432.788625][T15366] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1432.796988][T15366] SQUASHFS error: Failed to read block 0x9b: -5 [ 1432.803450][T15366] SQUASHFS error: Unable to read metadata cache entry [99] [ 1432.810910][T15366] SQUASHFS error: Unable to read inode 0x127 [ 1433.278706][T15355] erofs: (device loop5): mounted with root inode @ nid 36. [ 1433.421049][T15345] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1433.428261][T15345] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1433.441373][T15345] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1433.619046][T15243] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1433.705117][T15368] netlink: 'syz.4.2445': attribute type 4 has an invalid length. [ 1433.806142][T15368] syz.4.2445 (15368): drop_caches: 2 [ 1433.814370][T15368] syz.4.2445 (15368): drop_caches: 2 [ 1434.440004][T14648] Bluetooth: hci5: command 0x0419 tx timeout [ 1434.503890][T15300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.746444][ T75] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.759064][T15372] loop0: detected capacity change from 0 to 512 [ 1434.861869][T15373] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1434.862845][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1435.033297][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1435.222007][T15300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.523121][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1437.549436][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1438.216764][T15300] team0: Port device team_slave_0 added [ 1438.264039][T15300] team0: Port device team_slave_1 added [ 1440.158071][T15300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.185633][T15300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.256400][T15403] loop0: detected capacity change from 0 to 128 [ 1440.946147][T15300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.001114][T15300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.080008][T15300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.182009][T15300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.168718][T15410] loop0: detected capacity change from 0 to 131072 [ 1442.178770][T15413] overlayfs: missing 'workdir' [ 1442.241195][T15414] loop4: detected capacity change from 0 to 8 [ 1442.307974][T15410] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1442.316124][T15410] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1442.326322][T15410] F2FS-fs (loop0): invalid crc value [ 1442.916307][T15414] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1442.925997][T15414] SQUASHFS error: Failed to read block 0x9b: -5 [ 1442.932381][T15414] SQUASHFS error: Unable to read metadata cache entry [99] [ 1442.939625][T15414] SQUASHFS error: Unable to read inode 0x127 [ 1443.119530][T15410] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1443.185010][T15410] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1443.192208][T15410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1443.235696][T15410] F2FS-fs (loop0): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1443.488196][T15424] netlink: 'syz.0.2459': attribute type 4 has an invalid length. [ 1443.622053][T15424] syz.0.2459 (15424): drop_caches: 2 [ 1443.738384][T15424] syz.0.2459 (15424): drop_caches: 2 [ 1445.319261][T15102] Bluetooth: hci1: Frame reassembly failed (-84) [ 1445.699565][T15300] device hsr_slave_0 entered promiscuous mode [ 1445.790047][T15300] device hsr_slave_1 entered promiscuous mode [ 1445.840266][T15300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.866790][T15300] Cannot create hsr debugfs directory [ 1447.451589][ T4271] Bluetooth: hci1: command 0x1003 tx timeout [ 1447.460745][T14648] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1447.863669][T15443] loop3: detected capacity change from 0 to 32768 [ 1447.871134][T15443] XFS: ikeep mount option is deprecated. [ 1448.276639][T15443] XFS (loop3): Mounting V5 Filesystem [ 1448.630785][T15443] XFS (loop3): Ending clean mount [ 1448.638667][T15443] XFS (loop3): Quotacheck needed: Please wait. [ 1449.034193][T15465] loop5: detected capacity change from 0 to 128 [ 1449.357709][T15443] XFS (loop3): Quotacheck: Done. [ 1449.554165][T15476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2467'. [ 1449.853902][ T4266] XFS (loop3): Unmounting Filesystem [ 1450.704300][T15487] ipt_CLUSTERIP: Please specify destination IP [ 1455.829080][ T75] device hsr_slave_0 left promiscuous mode [ 1456.687734][ T75] device hsr_slave_1 left promiscuous mode [ 1456.698215][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1456.705685][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.778087][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.968960][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.024172][T15516] UBIFS error (pid: 15516): cannot open "(null)", error -22 [ 1457.819913][ T75] device bridge_slave_1 left promiscuous mode [ 1457.834328][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.856538][ T75] device bridge_slave_0 left promiscuous mode [ 1457.897708][T15517] overlayfs: unrecognized mount option "workdir" or missing value [ 1457.959157][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.487828][T15519] loop4: detected capacity change from 0 to 128 [ 1458.542117][ T75] device veth1_macvtap left promiscuous mode [ 1458.551677][ T75] device veth0_macvtap left promiscuous mode [ 1458.599792][ T75] device veth1_vlan left promiscuous mode [ 1458.697664][ T75] device veth0_vlan left promiscuous mode [ 1459.847583][ T4271] Bluetooth: hci5: command 0x0405 tx timeout [ 1459.966415][T15525] loop0: detected capacity change from 0 to 32768 [ 1459.973942][T15525] XFS: ikeep mount option is deprecated. [ 1460.161571][T15525] XFS (loop0): Mounting V5 Filesystem [ 1460.295281][T15525] XFS (loop0): Ending clean mount [ 1460.303054][T15525] XFS (loop0): Quotacheck needed: Please wait. [ 1460.353354][T15525] XFS (loop0): Quotacheck: Done. [ 1460.504064][T15538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1460.660413][T15528] Falling back ldisc for ptm0. [ 1460.974178][ T4249] XFS (loop0): Unmounting Filesystem [ 1461.257067][T15540] loop3: detected capacity change from 0 to 4096 [ 1461.407614][T15540] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1462.266334][T15550] autofs4:pid:15550:autofs_fill_super: called with bogus options [ 1463.609904][T15559] UBIFS error (pid: 15559): cannot open "(null)", error -22 [ 1465.037418][T13908] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1465.407497][T13908] usb 1-1: Using ep0 maxpacket: 32 [ 1465.810902][T13908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.829040][T13908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.849162][T13908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1465.862538][T13908] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1465.991987][T13908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.007275][T13908] usb 1-1: config 0 descriptor?? [ 1466.128001][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1466.196711][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1466.272135][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.337202][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.366843][ T4444] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1466.459408][T13908] hid (null): nested delimiters [ 1466.474905][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.490629][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.497843][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.506396][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.513668][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.520770][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.535118][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.561671][ T4444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.575909][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.583175][ T4444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1466.593194][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.600196][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.606932][ T4444] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1466.621610][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.628981][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.635796][ T4444] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1466.645049][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.651995][ T4444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.660297][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.667056][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.676082][ T4444] usb 4-1: config 0 descriptor?? [ 1466.685896][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.693242][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.703052][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.709980][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.716812][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.724146][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.731377][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.738218][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.744980][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.751809][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.758623][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.765390][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.772216][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.779051][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.785811][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.792746][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.799583][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.806336][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.813265][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.820132][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.826911][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.834553][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.841590][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.848517][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.855272][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.862124][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.868906][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.875634][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.882582][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.894897][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.916729][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.925641][T15579] Falling back ldisc for ptm0. [ 1466.957478][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.982270][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.989747][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1466.996560][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.003870][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.012266][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.019510][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.026597][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.035059][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.055314][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.095248][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.128241][ T4444] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 1467.152857][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.210967][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x1 [ 1467.288873][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.434935][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.504717][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.572217][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.629986][ T4444] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1467.647915][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x2 [ 1467.695663][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x1 [ 1467.756174][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.811108][ T4444] usb 4-1: USB disconnect, device number 4 [ 1467.867567][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.908277][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.951538][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1467.980382][T15589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2497'. [ 1468.018072][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1468.024864][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1468.079160][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1468.115964][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1468.193202][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1468.205230][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1468.212293][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1468.219398][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1468.226187][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1468.368626][T15596] autofs4:pid:15596:autofs_fill_super: called with bogus options [ 1469.095305][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.102491][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.120402][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.168950][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.334073][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.341357][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.348700][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.355629][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.364249][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.372245][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.379472][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.386239][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1469.402372][T15587] fido_id[15587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1470.163534][ T4602] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1470.210663][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.272298][T15604] UBIFS error (pid: 15604): cannot open "(null)", error -22 [ 1470.646959][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.661391][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.668626][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.675406][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.682357][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.689212][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.696039][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.702894][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.709739][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x6 [ 1470.716514][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x3 [ 1470.723741][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.730618][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.750695][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.785513][T13908] kye 0003:0458:5011.000A: unknown main item tag 0x0 [ 1470.796826][T13908] kye 0003:0458:5011.000A: nested delimiters [ 1470.813698][T13908] kye 0003:0458:5011.000A: item 0 2 2 10 parsing failed [ 1470.828114][T13908] kye 0003:0458:5011.000A: parse failed [ 1470.844130][T13908] kye: probe of 0003:0458:5011.000A failed with error -22 [ 1470.872162][T13908] usb 1-1: USB disconnect, device number 5 [ 1471.952820][ T4385] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1474.225223][ T75] bond0 (unregistering): Released all slaves [ 1475.870543][T15646] UBIFS error (pid: 15646): cannot open "(null)", error -22 [ 1477.112853][T15659] loop4: detected capacity change from 0 to 8 [ 1477.251319][T15659] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1477.259611][T15659] SQUASHFS error: Failed to read block 0x9b: -5 [ 1477.265968][T15659] SQUASHFS error: Unable to read metadata cache entry [99] [ 1477.273352][T15659] SQUASHFS error: Unable to read inode 0x127 [ 1477.650497][T15300] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1477.722743][T15300] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1478.091400][T15300] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1478.106591][ T4632] Bluetooth: hci1: Frame reassembly failed (-84) [ 1478.146127][T15300] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1479.445142][T15300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.508239][T15300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.543557][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1479.572202][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1479.613402][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1479.695875][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1479.760353][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.760480][ T5528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.761114][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1479.761871][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1479.855232][ T5528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.862512][ T5528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1480.167598][ T4271] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1480.174256][T14648] Bluetooth: hci1: command 0x1003 tx timeout [ 1480.712509][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1480.788874][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1480.864729][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1481.102703][T15702] UBIFS error (pid: 15702): cannot open "(null)", error -22 [ 1481.906801][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1481.967822][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1481.994009][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1482.015173][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1482.262831][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1482.358003][T15716] loop5: detected capacity change from 0 to 8 [ 1482.486721][T15716] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1482.495190][T15716] SQUASHFS error: Failed to read block 0x9b: -5 [ 1482.501789][T15716] SQUASHFS error: Unable to read metadata cache entry [99] [ 1482.509192][T15716] SQUASHFS error: Unable to read inode 0x127 [ 1482.613658][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1482.936467][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1483.013087][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1483.125878][T15300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1483.147206][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1483.186972][T15718] mkiss: ax0: crc mode is auto. [ 1485.985827][ T4465] Bluetooth: hci1: Frame reassembly failed (-84) [ 1486.240506][T13462] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1486.263164][T13462] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1486.272748][T13462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1486.294695][T13462] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1486.302449][T13462] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1486.529571][T13462] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1486.910544][T15760] UBIFS error (pid: 15760): cannot open "(null)", error -22 [ 1486.999682][T15751] lo speed is unknown, defaulting to 1000 [ 1487.330594][T15757] loop0: detected capacity change from 0 to 131072 [ 1487.355974][T15757] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1487.364269][T15757] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1487.407458][T15757] F2FS-fs (loop0): invalid crc value [ 1487.569705][T15757] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1487.667721][T15757] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1487.674869][T15757] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1487.692074][T15757] F2FS-fs (loop0): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1488.351789][T15784] syz.0.2534 (15784): drop_caches: 2 [ 1488.352562][T15785] loop3: detected capacity change from 0 to 8 [ 1488.361027][T15784] syz.0.2534 (15784): drop_caches: 2 [ 1488.364877][T14648] Bluetooth: hci1: command 0x1003 tx timeout [ 1488.390437][ T4271] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1489.604583][ T4271] Bluetooth: hci5: command 0x0409 tx timeout [ 1489.631189][T15785] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1489.639365][T15785] SQUASHFS error: Failed to read block 0x9b: -5 [ 1489.645639][T15785] SQUASHFS error: Unable to read metadata cache entry [99] [ 1489.652939][T15785] SQUASHFS error: Unable to read inode 0x127 [ 1489.930341][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.936712][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.687664][ T4271] Bluetooth: hci5: command 0x041b tx timeout [ 1493.986414][ T4271] Bluetooth: hci5: command 0x040f tx timeout [ 1493.997073][T11485] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1494.240356][T11485] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1494.277129][T11485] usb 6-1: config 0 has no interface number 0 [ 1494.327378][T11485] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1494.369462][T11485] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1494.400642][T11485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.420813][T11485] usb 6-1: Product: syz [ 1494.435261][T11485] usb 6-1: Manufacturer: syz [ 1494.450034][T11485] usb 6-1: SerialNumber: syz [ 1494.463477][T11485] usb 6-1: config 0 descriptor?? [ 1494.674054][T15826] UBIFS error (pid: 15826): cannot open "(null)", error -22 [ 1495.271929][ C1] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1495.339324][T11485] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1495.517592][T11485] usb 6-1: USB disconnect, device number 6 [ 1495.824544][T11485] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1496.546446][T15834] loop4: detected capacity change from 0 to 131072 [ 1496.553425][ T4271] Bluetooth: hci5: command 0x0419 tx timeout [ 1496.575821][T15834] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1496.584049][T15834] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1496.600486][T15751] chnl_net:caif_netlink_parms(): no params data found [ 1496.631630][T15834] F2FS-fs (loop4): invalid crc value [ 1496.902622][T15834] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1497.003616][T15834] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1497.010822][T15834] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1497.028090][T15834] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1497.350658][T15855] syz.4.2551 (15855): drop_caches: 2 [ 1497.388222][T15855] syz.4.2551 (15855): drop_caches: 2 [ 1498.546371][ T4271] Bluetooth: Wrong link type (-22) [ 1498.553611][ T4271] Bluetooth: hci3: link tx timeout [ 1498.558955][ T4271] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1498.567637][ T4271] Bluetooth: hci3: link tx timeout [ 1498.572845][ T4271] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1498.908735][T15751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.999905][T15751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.193759][T15751] device bridge_slave_0 entered promiscuous mode [ 1499.416301][T15751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.520811][T15751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.673942][T15751] device bridge_slave_1 entered promiscuous mode [ 1500.707833][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 1501.112618][T15751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.142550][T15859] mkiss: ax0: crc mode is auto. [ 1501.156705][T15751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.865284][T15751] team0: Port device team_slave_0 added [ 1501.940242][T15751] team0: Port device team_slave_1 added [ 1503.491187][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1504.172488][T15751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.367361][T15751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1504.416160][T15883] loop4: detected capacity change from 0 to 512 [ 1504.417392][T15751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.474690][T15751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.502207][T15751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1504.614449][T15889] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1504.614981][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1505.017521][T15751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.246034][T15894] loop3: detected capacity change from 0 to 16 [ 1505.338767][T15894] erofs: (device loop3): mounted with root inode @ nid 36. [ 1507.467972][T15898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.478399][T15898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.708201][T15906] overlayfs: failed to resolve './file1': -2 [ 1508.917079][T15751] device hsr_slave_0 entered promiscuous mode [ 1509.320733][T15751] device hsr_slave_1 entered promiscuous mode [ 1511.551351][T15928] IPv6: Can't replace route, no match found [ 1513.398644][T15952] overlayfs: failed to resolve './file1': -2 [ 1514.974973][T15957] loop0: detected capacity change from 0 to 512 [ 1515.127931][T13952] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1515.413064][T15495] device hsr_slave_0 left promiscuous mode [ 1516.167926][T15495] device hsr_slave_1 left promiscuous mode [ 1516.279696][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1516.280208][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1516.294836][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1516.518016][T15495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.578770][T15495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.601056][T13462] Bluetooth: hci3: unexpected event for opcode 0x0047 [ 1517.628849][T15495] device bridge_slave_1 left promiscuous mode [ 1517.640611][T15495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.659459][T15975] UBIFS error (pid: 15975): cannot open "(null)", error -22 [ 1517.661100][T15495] device bridge_slave_0 left promiscuous mode [ 1517.677758][T15495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.078604][T15996] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1519.079040][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1519.369060][T15495] team0 (unregistering): Port device team_slave_1 removed [ 1520.937760][T15495] team0 (unregistering): Port device team_slave_0 removed [ 1521.610682][T13462] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1521.629476][T13462] Bluetooth: hci3: Injecting HCI hardware error event [ 1521.643817][T13462] Bluetooth: hci3: hardware error 0x00 [ 1522.503626][T15495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1522.630769][T15495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1524.042441][T15495] bond0 (unregistering): Released all slaves [ 1524.332168][T16034] loop4: detected capacity change from 0 to 1024 [ 1524.420138][T16034] EXT4-fs: Ignoring removed bh option [ 1524.488365][T13462] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1524.580107][T16034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1526.888356][T16045] fuse: Unknown parameter 'use00000000000000000000' [ 1526.918816][T15751] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1527.093357][T15751] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1527.126983][T16066] UBIFS error (pid: 16066): cannot open "(null)", error -22 [ 1527.168998][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 1527.190545][T15751] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1527.425899][T15751] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1529.622867][T16092] loop3: detected capacity change from 0 to 512 [ 1529.816283][T15751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.875574][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1530.488423][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1530.619325][T15751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.680784][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1530.767043][T16104] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1530.785153][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1530.800482][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.807651][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.817590][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1530.840420][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1530.852654][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1530.863368][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.870545][ T7471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1530.880653][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1530.888944][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1531.680448][T16110] loop4: detected capacity change from 0 to 131072 [ 1531.690088][T16110] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1531.698343][T16110] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1531.712305][T16110] F2FS-fs (loop4): invalid crc value [ 1531.722704][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1531.759059][T16110] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1531.809175][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1531.817796][T16110] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1531.824882][T16110] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1531.844960][T16110] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1532.084522][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1532.271264][T16125] syz.4.2609 (16125): drop_caches: 2 [ 1532.278322][T16125] syz.4.2609 (16125): drop_caches: 2 [ 1533.478211][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1533.567696][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1533.587449][T12087] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1533.630921][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1533.644166][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1533.653522][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1533.689635][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1533.708717][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1533.746691][T15751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1533.958393][T16132] UBIFS error (pid: 16132): cannot open "(null)", error -22 [ 1533.964372][T12087] usb 4-1: too many configurations: 24, using maximum allowed: 8 [ 1534.167197][T12087] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1534.251019][T12087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.928459][ T4602] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1535.182458][T12087] usb 4-1: Product: syz [ 1535.186800][T12087] usb 4-1: Manufacturer: syz [ 1535.192520][T12087] usb 4-1: SerialNumber: syz [ 1535.214710][T12087] usb 4-1: config 0 descriptor?? [ 1535.387437][T12087] usb 4-1: can't set config #0, error -71 [ 1535.407679][T12087] usb 4-1: USB disconnect, device number 5 [ 1540.271670][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1540.458639][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1542.277710][T15751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.546619][T16197] loop3: detected capacity change from 0 to 64 [ 1546.170403][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1546.170927][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1546.180614][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1548.121125][T16242] loop5: detected capacity change from 0 to 4096 [ 1548.264650][T16242] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1548.384811][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1548.397612][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1548.408160][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1548.421222][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1548.429057][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1548.436559][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1550.487605][T13462] Bluetooth: hci1: command 0x0409 tx timeout [ 1551.378254][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.385123][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.573115][T16288] loop0: detected capacity change from 0 to 64 [ 1552.464530][T16247] lo speed is unknown, defaulting to 1000 [ 1552.568232][T13462] Bluetooth: hci1: command 0x041b tx timeout [ 1553.004804][T16247] chnl_net:caif_netlink_parms(): no params data found [ 1553.633327][T16308] loop4: detected capacity change from 0 to 32768 [ 1553.641685][T16308] XFS: ikeep mount option is deprecated. [ 1554.110150][T16308] XFS (loop4): Mounting V5 Filesystem [ 1554.316052][T16308] XFS (loop4): Ending clean mount [ 1554.323089][T16308] XFS (loop4): Quotacheck needed: Please wait. [ 1554.436981][T16308] XFS (loop4): Quotacheck: Done. [ 1554.647492][T13462] Bluetooth: hci1: command 0x040f tx timeout [ 1556.141845][T16247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.152728][T16326] loop3: detected capacity change from 0 to 4096 [ 1556.188109][T16247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.196524][T16247] device bridge_slave_0 entered promiscuous mode [ 1556.215972][T16326] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1556.257645][ T4253] XFS (loop4): Unmounting Filesystem [ 1556.340783][T16247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.369187][T16247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.387254][T16247] device bridge_slave_1 entered promiscuous mode [ 1556.655733][T16247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.728317][T13462] Bluetooth: hci1: command 0x0419 tx timeout [ 1556.912764][T16247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.461792][T16247] team0: Port device team_slave_0 added [ 1558.632750][T16247] team0: Port device team_slave_1 added [ 1558.883291][T16247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.908748][T16247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.002529][T16247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.254413][T16247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.265827][T16247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.292316][T16247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.053810][T16369] loop5: detected capacity change from 0 to 1024 [ 1560.062033][T16369] EXT4-fs: Ignoring removed bh option [ 1560.182165][ T5314] device hsr_slave_0 left promiscuous mode [ 1560.334720][ T5314] device hsr_slave_1 left promiscuous mode [ 1560.473737][ T5314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1560.760620][T16382] loop4: detected capacity change from 0 to 32768 [ 1560.767825][T16382] XFS: ikeep mount option is deprecated. [ 1560.789009][T16369] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1560.873395][ T5314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1560.951554][T16382] XFS (loop4): Mounting V5 Filesystem [ 1561.030824][ T5314] device bridge_slave_1 left promiscuous mode [ 1561.074161][ T5314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.137362][ T5314] device bridge_slave_0 left promiscuous mode [ 1561.148557][ T5314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.171083][T16382] XFS (loop4): Ending clean mount [ 1561.186129][T16382] XFS (loop4): Quotacheck needed: Please wait. [ 1561.974453][T16382] XFS (loop4): Quotacheck: Done. [ 1562.435735][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1562.456572][ T4253] XFS (loop4): Unmounting Filesystem [ 1563.565882][T16409] loop5: detected capacity change from 0 to 4096 [ 1563.657483][T16409] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1564.681202][T16426] loop4: detected capacity change from 0 to 64 [ 1566.005888][ T5314] team0 (unregistering): Port device team_slave_1 removed [ 1566.219418][ T5314] team0 (unregistering): Port device team_slave_0 removed [ 1566.318987][ T5314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1566.417230][ T5314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.511366][ T5314] bond0 (unregistering): Released all slaves [ 1568.061016][T16247] device hsr_slave_0 entered promiscuous mode [ 1568.324359][T16247] device hsr_slave_1 entered promiscuous mode [ 1569.399590][T16456] loop4: detected capacity change from 0 to 1024 [ 1569.466743][T16456] EXT4-fs: Ignoring removed bh option [ 1569.769006][T16456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1570.701778][ T4602] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1572.264797][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 1572.784335][ T4602] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1574.378082][T16475] loop5: detected capacity change from 0 to 4096 [ 1574.422033][T16475] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1575.188214][T16497] overlayfs: failed to resolve './file1': -2 [ 1575.478574][T16247] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1575.509507][T16247] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1575.695898][T16247] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1575.721056][T16247] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1577.939944][T16247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.998894][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1578.014724][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1578.049706][T16247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.108169][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1578.123356][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1578.147981][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.155153][ T5255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.242146][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1578.287886][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1578.297102][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1578.328076][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.335383][ T5255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.364093][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1578.378654][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1578.703693][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1578.730976][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1578.746069][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1578.767420][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1578.816597][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1578.865579][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1578.923777][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1578.972404][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1579.036223][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1579.080911][T16247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1579.804762][T16535] ax25_connect(): syz.5.2685 uses autobind, please contact jreuter@yaina.de [ 1582.025914][T16247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.125080][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1582.134450][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1582.280596][T16554] kvm: pic: level sensitive irq not supported [ 1582.281551][T16554] kvm: pic: single mode not supported [ 1582.288118][T16554] kvm: pic: level sensitive irq not supported [ 1582.293644][T16554] kvm: pic: single mode not supported [ 1582.299786][T16554] kvm: pic: level sensitive irq not supported [ 1582.305346][T16554] kvm: pic: single mode not supported [ 1582.311494][T16554] kvm: pic: level sensitive irq not supported [ 1582.316943][T16554] kvm: pic: single mode not supported [ 1582.323039][T16554] kvm: pic: level sensitive irq not supported [ 1582.328513][T16554] kvm: pic: single mode not supported [ 1582.334585][T16554] kvm: pic: level sensitive irq not supported [ 1582.340415][T16554] kvm: pic: single mode not supported [ 1582.346496][T16554] kvm: pic: level sensitive irq not supported [ 1582.354235][T16554] kvm: pic: single mode not supported [ 1582.360417][T16554] kvm: pic: level sensitive irq not supported [ 1582.365865][T16554] kvm: pic: single mode not supported [ 1582.371979][T16554] kvm: pic: level sensitive irq not supported [ 1582.377588][T16554] kvm: pic: single mode not supported [ 1582.383664][T16554] kvm: pic: level sensitive irq not supported [ 1582.389198][T16554] kvm: pic: single mode not supported [ 1583.153967][T16568] loop3: detected capacity change from 0 to 16 [ 1583.244284][T16568] erofs: (device loop3): mounted with root inode @ nid 36. [ 1584.023258][T16578] overlayfs: unrecognized mount option "smackfshat=overlay" or missing value [ 1584.281762][T16583] Driver unsupported XDP return value 0 on prog (id 231) dev N/A, expect packet loss! [ 1586.260250][ T1076] Bluetooth: hci5: Frame reassembly failed (-84) [ 1588.249306][T14648] Bluetooth: hci5: command 0x1003 tx timeout [ 1588.255938][T13462] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1589.073982][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1589.088437][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1589.207855][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1589.216415][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1589.333061][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1589.361853][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1589.483638][T16247] device veth0_vlan entered promiscuous mode [ 1589.595337][T16632] ax25_connect(): syz.5.2706 uses autobind, please contact jreuter@yaina.de [ 1590.087722][T16636] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1590.340296][T16247] device veth1_vlan entered promiscuous mode [ 1590.395968][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1590.681153][T16643] overlayfs: unrecognized mount option "smackfshat=overlay" or missing value [ 1590.690208][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1590.717108][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1590.739222][T16247] device veth0_macvtap entered promiscuous mode [ 1591.265275][T16649] loop0: detected capacity change from 0 to 32768 [ 1591.272450][T16649] XFS: ikeep mount option is deprecated. [ 1591.319224][T16247] device veth1_macvtap entered promiscuous mode [ 1591.433778][T16649] XFS (loop0): Mounting V5 Filesystem [ 1591.471108][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1591.782875][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1591.786161][T16649] XFS (loop0): Ending clean mount [ 1591.798250][T16649] XFS (loop0): Quotacheck needed: Please wait. [ 1591.885073][T16649] XFS (loop0): Quotacheck: Done. [ 1591.905620][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.083725][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.240478][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.412396][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.568388][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.748944][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.910367][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.087224][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.280252][T16247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1593.801868][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1593.812049][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1593.839005][ T4249] XFS (loop0): Unmounting Filesystem [ 1594.084470][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.123351][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.133990][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.149385][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.172223][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.201325][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.234432][T16247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.272069][T16247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.311602][T16247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1594.358484][T16247] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.372764][T16247] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.392408][T16247] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.401609][T16247] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.434134][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1594.457731][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1594.714473][ T5528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.742812][T16688] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1594.743305][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1594.766627][ T5528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.823282][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1595.262445][T14767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.332401][T14767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.661931][T14767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1597.916767][T16707] loop7: detected capacity change from 0 to 1024 [ 1597.948491][T16707] EXT4-fs: Ignoring removed bh option [ 1598.009696][T16709] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1598.856669][T16707] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1599.341036][T16247] EXT4-fs (loop7): unmounting filesystem. [ 1599.553816][T16725] loop3: detected capacity change from 0 to 32768 [ 1599.561149][T16725] XFS: ikeep mount option is deprecated. [ 1599.603813][ T4324] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1599.623627][ T4324] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1599.686598][T16725] XFS (loop3): Mounting V5 Filesystem [ 1600.440013][T16725] XFS (loop3): Ending clean mount [ 1600.446999][T16725] XFS (loop3): Quotacheck needed: Please wait. [ 1600.572521][T16725] XFS (loop3): Quotacheck: Done. [ 1602.112453][ T4266] XFS (loop3): Unmounting Filesystem [ 1602.350089][T13462] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1602.363502][T13462] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1602.387217][T13462] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1602.395398][T13462] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1602.404911][T13462] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1602.477863][T13462] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1602.776660][T16765] ALSA: mixer_oss: invalid index 40000 [ 1603.549800][T16750] lo speed is unknown, defaulting to 1000 [ 1604.659000][T13462] Bluetooth: hci0: command 0x0409 tx timeout [ 1605.527642][ T4385] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1606.160641][T16780] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1606.161142][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1606.392742][T16784] loop5: detected capacity change from 0 to 1024 [ 1606.421958][T16784] EXT4-fs: Ignoring removed bh option [ 1606.440644][T16750] chnl_net:caif_netlink_parms(): no params data found [ 1606.455005][T16791] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1606.528306][T16784] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1606.810642][T13462] Bluetooth: hci0: command 0x041b tx timeout [ 1607.728267][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1607.748401][T16750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.755613][T16750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.823893][T16750] device bridge_slave_0 entered promiscuous mode [ 1607.870602][T16750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.905243][T16750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.924716][T16750] device bridge_slave_1 entered promiscuous mode [ 1608.103073][T16750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.143912][T16814] loop4: detected capacity change from 0 to 32768 [ 1608.151397][T16814] XFS: ikeep mount option is deprecated. [ 1608.161101][T16750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.226408][T16750] team0: Port device team_slave_0 added [ 1608.235461][T16750] team0: Port device team_slave_1 added [ 1608.242891][T16814] XFS (loop4): Mounting V5 Filesystem [ 1608.363408][T16814] XFS (loop4): Ending clean mount [ 1608.370547][T16814] XFS (loop4): Quotacheck needed: Please wait. [ 1608.478037][T16814] XFS (loop4): Quotacheck: Done. [ 1608.485126][T16750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.584781][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.887601][T13462] Bluetooth: hci0: command 0x040f tx timeout [ 1608.986461][T16750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.876382][T16750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.894526][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.967349][T13462] Bluetooth: hci0: command 0x0419 tx timeout [ 1611.060691][ T4253] XFS (loop4): Unmounting Filesystem [ 1611.085420][T16841] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1611.087494][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1611.153373][T16750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.373618][T16750] device hsr_slave_0 entered promiscuous mode [ 1611.459629][T16750] device hsr_slave_1 entered promiscuous mode [ 1611.492443][T16750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1611.677474][T16849] loop7: detected capacity change from 0 to 32768 [ 1611.684569][T16849] XFS: ikeep mount option is deprecated. [ 1611.711756][T16847] loop3: detected capacity change from 0 to 1024 [ 1611.719121][T16750] Cannot create hsr debugfs directory [ 1611.753732][T16847] EXT4-fs: Ignoring removed bh option [ 1611.808810][T16849] XFS (loop7): Mounting V5 Filesystem [ 1611.888313][T16847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1611.979265][T16849] XFS (loop7): Ending clean mount [ 1611.988973][T16849] XFS (loop7): Quotacheck needed: Please wait. [ 1612.151804][T16849] XFS (loop7): Quotacheck: Done. [ 1612.810960][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.817441][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.631032][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 1616.752878][T16247] XFS (loop7): Unmounting Filesystem [ 1618.216914][T16750] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.582498][T16750] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.033326][T16750] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.873383][T16899] netlink: 'syz.7.2748': attribute type 1 has an invalid length. [ 1620.764730][T16903] ALSA: mixer_oss: invalid index 40000 [ 1621.537416][ T4541] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1623.063434][T16750] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.277419][ T4541] usb 5-1: Using ep0 maxpacket: 16 [ 1623.296435][ T4541] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1623.369427][ T4541] usb 5-1: can't read configurations, error -61 [ 1623.537482][ T4541] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1623.604127][T16750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1623.976727][T16750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1624.458380][T16930] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1624.470512][T16750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1624.487694][ T4541] usb 5-1: Using ep0 maxpacket: 16 [ 1624.500001][T16750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1624.510277][ T4541] usb 5-1: device descriptor read/all, error -71 [ 1624.542536][ T4541] usb usb5-port1: attempt power cycle [ 1624.597376][T16936] loop5: detected capacity change from 0 to 1024 [ 1624.621477][T16936] EXT4-fs: Ignoring removed bh option [ 1624.635243][T16937] pic_ioport_write: 18 callbacks suppressed [ 1624.635265][T16937] kvm: pic: level sensitive irq not supported [ 1625.811582][T16936] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1625.907746][T16750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.048174][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1626.058803][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1626.822527][T16750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.389202][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1627.418739][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1627.504436][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.511698][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.578038][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1627.611001][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1627.646650][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1627.674985][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1627.704724][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.711899][ T7471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.901834][T16968] vivid-002: disconnect [ 1628.715498][T16965] vivid-002: reconnect [ 1628.803433][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1628.819420][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1628.922491][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1629.002659][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1629.035631][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1629.063909][T16750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1629.079460][T16750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1629.097539][ T4324] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1629.139462][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1629.156114][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1629.185737][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1629.211405][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1629.244464][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1629.268513][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1629.287358][ T4324] usb 6-1: Using ep0 maxpacket: 16 [ 1629.316771][T16970] netlink: 'syz.5.2765': attribute type 12 has an invalid length. [ 1629.337484][T16970] netlink: 'syz.5.2765': attribute type 29 has an invalid length. [ 1629.356620][T16970] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2765'. [ 1629.388027][T16970] netlink: 'syz.5.2765': attribute type 1 has an invalid length. [ 1629.416442][T16970] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2765'. [ 1629.444211][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1629.462430][ T4324] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1629.492489][ T4324] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1629.507360][ T4324] usb 6-1: can't read configurations, error -71 [ 1630.658981][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1630.673118][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1630.703834][T16750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.775770][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1630.832939][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1630.894217][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1630.954775][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1630.971924][T16750] device veth0_vlan entered promiscuous mode [ 1630.997417][T11485] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1631.854651][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1631.911518][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1632.023994][T16750] device veth1_vlan entered promiscuous mode [ 1632.170116][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1632.329452][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1632.374277][T16750] device veth0_macvtap entered promiscuous mode [ 1632.403415][T16750] device veth1_macvtap entered promiscuous mode [ 1632.410185][T11485] usb 5-1: Using ep0 maxpacket: 16 [ 1632.419471][T11485] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1632.434359][T11485] usb 5-1: can't read configurations, error -61 [ 1632.451871][T17002] loop3: detected capacity change from 0 to 1024 [ 1632.472141][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1632.491630][T17002] EXT4-fs: Ignoring removed bh option [ 1632.497121][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.517355][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1632.521389][T17004] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1632.537667][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.558510][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1632.606704][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.616962][T11485] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1632.625143][T17002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1632.653508][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1632.664693][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.674862][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1632.685706][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.698006][T16750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1632.705385][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1632.751541][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1632.847548][T11485] usb 5-1: Using ep0 maxpacket: 16 [ 1632.860661][T11485] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1632.895197][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1632.930351][T11485] usb 5-1: can't read configurations, error -61 [ 1632.979666][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1632.990529][T11485] usb usb5-port1: attempt power cycle [ 1633.289189][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.300399][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.310458][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.320975][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.330988][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.342252][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.361855][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.372631][T17014] loop5: detected capacity change from 0 to 1024 [ 1633.381472][T17014] EXT4-fs: Ignoring removed bh option [ 1633.426389][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.432952][T17014] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1633.437859][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.446293][T11485] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1633.455875][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.475375][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 1633.482507][T16750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.522937][T11485] usb 5-1: Using ep0 maxpacket: 16 [ 1633.530617][T11485] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1633.538800][T11485] usb 5-1: can't read configurations, error -61 [ 1633.562981][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1633.591553][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1633.697317][T11485] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1634.531351][T17019] loop3: detected capacity change from 0 to 131072 [ 1634.543707][T16750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.561822][T11485] usb 5-1: device descriptor read/8, error -71 [ 1634.574616][T17019] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1634.582793][T17019] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1634.612047][T17019] F2FS-fs (loop3): invalid crc value [ 1634.710089][ T75] Bluetooth: hci5: Frame reassembly failed (-84) [ 1634.721401][ T75] Bluetooth: hci5: Frame reassembly failed (-84) [ 1634.731168][T11485] usb usb5-port1: unable to enumerate USB device [ 1634.831795][T16750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.937155][T17025] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2777'. [ 1634.971330][T17019] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1635.013600][T16750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.066149][T17019] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1635.073297][T17019] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1635.096315][T17019] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1635.429344][T17032] syz.3.2776 (17032): drop_caches: 2 [ 1635.439825][T17032] syz.3.2776 (17032): drop_caches: 2 [ 1636.267483][T16750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.281822][T17031] netlink: 'syz.3.2776': attribute type 4 has an invalid length. [ 1636.418075][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1636.575597][T17035] loop7: detected capacity change from 0 to 512 [ 1636.727416][T14648] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1636.727595][T13462] Bluetooth: hci5: command 0x1003 tx timeout [ 1637.229451][ T4632] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1637.266561][T17042] ax25_connect(): syz.5.2779 uses autobind, please contact jreuter@yaina.de [ 1637.692674][ T7471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1637.712289][ T7471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.759778][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1639.042176][ T5255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.075922][ T5255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.155735][T17056] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1639.619313][ T5255] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1639.649825][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1640.599725][T17062] loop5: detected capacity change from 0 to 1024 [ 1640.636652][T17062] EXT4-fs: Ignoring removed bh option [ 1640.829158][T17068] loop3: detected capacity change from 0 to 1024 [ 1640.864058][T17068] EXT4-fs: Ignoring removed bh option [ 1640.886048][T17070] overlayfs: unrecognized mount option "smackfshat=overlay" or missing value [ 1640.886086][T17062] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1640.937399][T11485] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1641.022717][T17068] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1641.137619][T11485] usb 8-1: Using ep0 maxpacket: 16 [ 1641.159290][T11485] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1641.266510][T11485] usb 8-1: can't read configurations, error -61 [ 1641.834817][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1641.877392][T11485] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1642.067340][T11485] usb 8-1: Using ep0 maxpacket: 16 [ 1642.684684][T11485] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1642.693681][T11485] usb 8-1: can't read configurations, error -61 [ 1642.700532][T11485] usb usb8-port1: attempt power cycle [ 1642.713006][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 1643.050414][ T75] Bluetooth: hci5: Frame reassembly failed (-84) [ 1643.117529][T11485] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1643.481819][T11485] usb 8-1: Using ep0 maxpacket: 16 [ 1643.634011][T17098] ax25_connect(): syz.4.2792 uses autobind, please contact jreuter@yaina.de [ 1643.949567][T14648] Bluetooth: Wrong link type (-22) [ 1644.752636][T11485] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1644.795575][T11485] usb 8-1: can't read configurations, error -71 [ 1645.058595][T14648] Bluetooth: hci5: command 0x1003 tx timeout [ 1645.085653][T13462] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1647.463907][T17121] overlayfs: unrecognized mount option "smackfshat=overlay" or missing value [ 1648.130152][T17131] loop0: detected capacity change from 0 to 1024 [ 1648.145636][T17131] EXT4-fs: Ignoring removed bh option [ 1649.013734][T17131] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1649.126093][ T4602] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.641585][T15317] block nbd5: Attempted send on invalid socket [ 1649.648242][T15317] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1649.667415][T17145] EXT4-fs (nbd5): unable to read superblock [ 1649.699365][ T4602] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.756674][T13462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1649.772224][T13462] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1649.773151][T16750] EXT4-fs (loop0): unmounting filesystem. [ 1649.815163][T17149] loop5: detected capacity change from 0 to 512 [ 1649.827779][T13462] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1649.838078][T13462] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1649.845569][T13462] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1649.860630][T13462] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1649.911198][ T4602] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.142382][ T4602] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.160308][T17146] lo speed is unknown, defaulting to 1000 [ 1650.217336][ T4324] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1650.447344][ T4324] usb 8-1: Using ep0 maxpacket: 16 [ 1651.197206][ T4324] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1651.249690][ T4324] usb 8-1: can't read configurations, error -61 [ 1651.417608][ T4324] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1651.677865][ T4324] usb 8-1: Using ep0 maxpacket: 16 [ 1651.801162][ T4324] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1651.927397][T13462] Bluetooth: hci4: command 0x0409 tx timeout [ 1652.007587][ T4324] usb 8-1: can't read configurations, error -61 [ 1652.042027][ T4324] usb usb8-port1: attempt power cycle [ 1652.171318][T17146] chnl_net:caif_netlink_parms(): no params data found [ 1652.477393][ T4324] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1652.577735][ T4324] usb 8-1: Using ep0 maxpacket: 16 [ 1653.658208][T17146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.679150][T17146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.714891][ T4324] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1653.723148][T17146] device bridge_slave_0 entered promiscuous mode [ 1653.729893][ T4324] usb 8-1: can't read configurations, error -71 [ 1653.919107][T17180] overlayfs: unrecognized mount option "smackfshat=overlay" or missing value [ 1654.007320][T14648] Bluetooth: hci4: command 0x041b tx timeout [ 1654.061151][T17146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.081272][T17146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.102618][T17146] device bridge_slave_1 entered promiscuous mode [ 1654.478126][T17198] loop5: detected capacity change from 0 to 1024 [ 1654.485500][T17198] EXT4-fs: Ignoring removed bh option [ 1655.098649][T17198] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1655.496275][T17146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.510473][T17146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1655.614524][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1655.954853][T17219] loop7: detected capacity change from 0 to 512 [ 1656.097370][T14648] Bluetooth: hci4: command 0x040f tx timeout [ 1656.537271][T17216] loop5: detected capacity change from 0 to 131072 [ 1656.560229][T17146] team0: Port device team_slave_0 added [ 1656.613090][T17216] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1656.621381][T17216] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1656.651569][T17216] F2FS-fs (loop5): invalid crc value [ 1656.705411][T17216] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1656.744504][T17216] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1656.751952][T17216] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1656.759069][T17146] team0: Port device team_slave_1 added [ 1656.773369][T14058] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1656.793329][T17216] F2FS-fs (loop5): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1657.090343][T17228] netlink: 'syz.5.2817': attribute type 4 has an invalid length. [ 1657.136428][T17228] syz.5.2817 (17228): drop_caches: 2 [ 1657.209401][T17228] syz.5.2817 (17228): drop_caches: 2 [ 1658.167400][T14648] Bluetooth: hci4: command 0x0419 tx timeout [ 1658.443338][T17146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.463099][T17146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.559708][T10861] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1658.828718][T17244] ALSA: mixer_oss: invalid index 40000 [ 1659.574624][T17146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1659.587297][T10861] usb 1-1: Using ep0 maxpacket: 16 [ 1659.689803][T10861] usb 1-1: config 0 has no interfaces? [ 1659.695381][T10861] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1659.995827][T10861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.149611][T17146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1660.156638][T17146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1660.169590][T10861] usb 1-1: config 0 descriptor?? [ 1660.182582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.195360][T17146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1660.464631][T17146] device hsr_slave_0 entered promiscuous mode [ 1660.539517][T17146] device hsr_slave_1 entered promiscuous mode [ 1660.556778][T17146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1660.587803][T17146] Cannot create hsr debugfs directory [ 1661.441135][ T4602] device hsr_slave_0 left promiscuous mode [ 1662.270250][T14648] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1662.276826][T13462] Bluetooth: hci5: command 0x1003 tx timeout [ 1662.358714][ T4602] device hsr_slave_1 left promiscuous mode [ 1662.428480][ T4602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1662.446272][ T4602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.460871][T13908] usb 1-1: USB disconnect, device number 6 [ 1662.511173][ T4602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1662.557353][ T4602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.578188][T17262] loop4: detected capacity change from 0 to 1024 [ 1662.596532][ T4602] device bridge_slave_1 left promiscuous mode [ 1662.610328][T17262] EXT4-fs: Ignoring removed bh option [ 1662.759151][ T4602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.792446][ T4602] device bridge_slave_0 left promiscuous mode [ 1662.805527][ T4602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.871468][ T4602] device veth1_macvtap left promiscuous mode [ 1662.882309][ T4602] device veth0_macvtap left promiscuous mode [ 1662.897488][ T4602] device veth1_vlan left promiscuous mode [ 1662.998711][ T4602] device veth0_vlan left promiscuous mode [ 1663.020746][T17262] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1664.309176][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 1664.521389][ T4602] bond3 (unregistering): Released all slaves [ 1665.140487][T17290] loop0: detected capacity change from 0 to 512 [ 1665.402020][T17294] loop5: detected capacity change from 0 to 1024 [ 1665.481031][T17294] EXT4-fs: Ignoring removed bh option [ 1665.639068][T17294] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1667.180122][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1667.289987][ T4602] bond2 (unregistering): Released all slaves [ 1667.467387][ T4541] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1667.657407][ T4541] usb 1-1: Using ep0 maxpacket: 16 [ 1667.708411][ T4541] usb 1-1: config 0 has no interfaces? [ 1667.770839][ T4541] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1667.863774][ T4541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.027194][ T4541] usb 1-1: config 0 descriptor?? [ 1668.747046][T14648] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1669.387141][ T4271] Bluetooth: hci5: command 0x1003 tx timeout [ 1669.499853][ T4602] bond1 (unregistering): Released all slaves [ 1669.843755][T17330] ax25_connect(): syz.7.2841 uses autobind, please contact jreuter@yaina.de [ 1670.198329][ T4632] Bluetooth: hci5: Frame reassembly failed (-84) [ 1670.202563][T10861] usb 1-1: USB disconnect, device number 7 [ 1671.352667][T17344] loop0: detected capacity change from 0 to 512 [ 1671.457506][T13462] Bluetooth: hci1: command 0x0406 tx timeout [ 1671.743914][ T4385] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1671.833522][ T4602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1671.965507][ T4602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.247367][ T4271] Bluetooth: hci5: command 0x1003 tx timeout [ 1672.247407][T14648] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1672.600383][T17352] ax25_connect(): syz.0.2847 uses autobind, please contact jreuter@yaina.de [ 1672.887154][T17356] loop4: detected capacity change from 0 to 1024 [ 1672.966386][T17356] EXT4-fs: Ignoring removed bh option [ 1673.131403][T17356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1673.344920][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 1673.609202][ T4602] bond0 (unregistering): Released all slaves [ 1674.640159][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.646547][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.440236][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2851'. [ 1675.767354][ T4324] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1675.957535][ T4324] usb 5-1: Using ep0 maxpacket: 16 [ 1675.966023][ T4324] usb 5-1: config 0 has no interfaces? [ 1675.985609][ T4324] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1676.028416][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.032010][T17392] loop5: detected capacity change from 0 to 512 [ 1676.101439][T17146] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1676.163093][ T4324] usb 5-1: config 0 descriptor?? [ 1676.209338][T17146] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1676.343862][T17146] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1676.512993][T17146] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1677.529290][T17408] loop7: detected capacity change from 0 to 1024 [ 1677.569857][T17408] EXT4-fs: Ignoring removed bh option [ 1677.610313][T17146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.667968][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1677.693447][T17408] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1677.716587][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1677.801826][T17146] 8021q: adding VLAN 0 to HW filter on device team0 [ 1678.800639][T17146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1678.812783][T17146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1678.828996][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1679.277919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1679.304936][T16247] EXT4-fs (loop7): unmounting filesystem. [ 1679.316892][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.324153][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.332083][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1679.341085][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1679.349797][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.356919][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.364935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1679.375453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1679.384746][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1679.393867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1679.421657][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1679.429160][T12633] usb 5-1: USB disconnect, device number 12 [ 1679.455814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1679.499449][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1679.520317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1679.536884][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1679.546256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1679.562038][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1679.573331][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1680.433494][T17427] ALSA: mixer_oss: invalid index 40000 [ 1680.622682][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1681.233834][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2864'. [ 1682.161880][T17475] overlayfs: unrecognized mount option "smackfshat=overlay" or missing value [ 1682.186600][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2871'. [ 1682.217719][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2871'. [ 1682.427668][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1682.441354][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1682.473638][T17146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1682.536252][T17482] loop4: detected capacity change from 0 to 16 [ 1682.568961][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1682.583506][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1682.592998][T17482] erofs: (device loop4): mounted with root inode @ nid 36. [ 1682.706569][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1682.725484][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1682.783447][T17146] device veth0_vlan entered promiscuous mode [ 1682.805827][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1682.826183][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1682.854770][T17146] device veth1_vlan entered promiscuous mode [ 1682.971668][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1683.004607][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1683.046455][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1683.047117][T17487] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1683.086265][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1683.128266][T17146] device veth0_macvtap entered promiscuous mode [ 1683.165920][T17146] device veth1_macvtap entered promiscuous mode [ 1683.234664][T17487] kvm: pic: non byte read [ 1683.263664][T17146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1683.289088][T17487] kvm: pic: level sensitive irq not supported [ 1683.289878][T17487] kvm: pic: non byte read [ 1683.331689][T17146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.354924][T17487] kvm: pic: level sensitive irq not supported [ 1683.355497][T17487] kvm: pic: non byte read [ 1683.381041][T17146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1683.411335][T17487] kvm: pic: level sensitive irq not supported [ 1683.412337][T17487] kvm: pic: non byte read [ 1683.438336][T17146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.511632][T17146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1683.567752][T17146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.650663][T17146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1683.700633][T17146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.741811][T17146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1683.767021][T17146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.814474][T17146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.887684][T17146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.953136][T17146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.017281][T17146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1684.130455][T17146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.183979][T17146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1684.254112][T17146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.287322][T17146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1684.493955][T17492] ALSA: mixer_oss: invalid index 40000 [ 1685.267360][T17146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.314171][T17146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.365858][T17146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.411556][T17146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1685.454595][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1685.474810][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1685.498775][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1685.530877][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1685.571722][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1685.584449][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1685.628322][T17146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.787990][T17146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.166735][T17146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.296366][T17146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.214833][T17515] loop7: detected capacity change from 0 to 32768 [ 1687.222233][T17515] XFS: ikeep mount option is deprecated. [ 1687.286899][ T4602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.344548][ T4602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.409051][T17515] XFS (loop7): Mounting V5 Filesystem [ 1687.415178][T17527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2881'. [ 1687.438799][T17527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2881'. [ 1687.451921][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1687.592761][ T6601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.614158][T17515] XFS (loop7): Ending clean mount [ 1687.622051][T17515] XFS (loop7): Quotacheck needed: Please wait. [ 1687.726229][ T6601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.884284][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1687.989854][T17515] XFS (loop7): Quotacheck: Done. [ 1688.599620][T17515] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2880'. [ 1688.904946][T16247] XFS (loop7): Unmounting Filesystem [ 1689.091819][T17554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1689.466276][T17555] overlayfs: unrecognized mount option "smackfshat=overlay" or missing value [ 1692.079525][T13462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1692.091245][T13462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1692.100358][T13462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1692.109158][T13462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1692.117793][T13462] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1692.125147][T13462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1693.855800][ T4602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.140317][T17583] lo speed is unknown, defaulting to 1000 [ 1694.171396][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 1694.240557][T17605] ALSA: mixer_oss: invalid index 40000 [ 1694.414743][ T4602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.067187][ T4602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.470283][ T4602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.794640][T17620] loop5: detected capacity change from 0 to 16 [ 1696.026470][T17620] erofs: (device loop5): mounted with root inode @ nid 36. [ 1696.210146][T17583] chnl_net:caif_netlink_parms(): no params data found [ 1696.247621][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 1696.638773][T17583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.645940][T17583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.693066][T17583] device bridge_slave_0 entered promiscuous mode [ 1696.727964][T17583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.737812][T17583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.746037][T17583] device bridge_slave_1 entered promiscuous mode [ 1696.921582][T17583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1696.968747][T17583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.599512][ T4259] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1697.764142][T17583] team0: Port device team_slave_0 added [ 1697.827329][ T4259] usb 1-1: Using ep0 maxpacket: 16 [ 1697.847922][ T4259] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1697.877496][ T4259] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 1697.885742][ T4259] usb 1-1: config 8 has no interface number 0 [ 1697.929672][ T4259] usb 1-1: too many endpoints for config 8 interface 101 altsetting 114: 112, using maximum allowed: 30 [ 1697.976753][ T4259] usb 1-1: config 8 interface 101 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 1698.129100][ T4259] usb 1-1: config 8 interface 101 has no altsetting 0 [ 1698.289537][ T4259] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 1698.307259][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.325600][ T4259] usb 1-1: Product: syz [ 1698.327704][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 1698.347058][ T4259] usb 1-1: Manufacturer: syz [ 1698.363124][ T4259] usb 1-1: SerialNumber: syz [ 1698.412827][T17583] team0: Port device team_slave_1 added [ 1698.856710][ T4259] usb 1-1: USB disconnect, device number 8 [ 1699.035279][T17583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.042713][T17583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.927767][T17583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1700.184959][T17583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1700.200712][T17583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1700.407512][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 1700.452272][T17681] ax25_connect(): syz.0.2905 uses autobind, please contact jreuter@yaina.de [ 1701.621346][T17583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.761522][ T4385] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1702.782585][T17583] device hsr_slave_0 entered promiscuous mode [ 1702.818652][T17583] device hsr_slave_1 entered promiscuous mode [ 1702.837447][T17583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1702.848498][T17583] Cannot create hsr debugfs directory [ 1708.157467][T17731] ax25_connect(): syz.3.2918 uses autobind, please contact jreuter@yaina.de [ 1708.986150][ T4602] device hsr_slave_0 left promiscuous mode [ 1709.008962][ T4602] device hsr_slave_1 left promiscuous mode [ 1709.124460][ T4602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1709.167410][ T4602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1710.058481][ T4602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1710.076491][ T4602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.120483][ T4602] device bridge_slave_1 left promiscuous mode [ 1710.161360][ T4602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.234443][ T4602] device bridge_slave_0 left promiscuous mode [ 1710.275427][ T4602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.437684][ T4602] device veth1_macvtap left promiscuous mode [ 1710.463714][ T4602] device veth0_macvtap left promiscuous mode [ 1710.502554][ T4602] device veth1_vlan left promiscuous mode [ 1710.511855][ T4602] device veth0_vlan left promiscuous mode [ 1711.605615][ T4602] bond1 (unregistering): Released all slaves [ 1711.711245][T17769] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1711.753962][T17769] kvm: pic: non byte read [ 1711.766777][T17769] kvm: pic: level sensitive irq not supported [ 1711.767639][T17769] kvm: pic: non byte read [ 1711.803441][T17769] kvm: pic: level sensitive irq not supported [ 1711.803520][T17769] kvm: pic: non byte read [ 1711.837487][T17769] kvm: pic: level sensitive irq not supported [ 1711.837570][T17769] kvm: pic: non byte read [ 1713.232907][ T4602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.307170][ T4602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.054217][ T4602] bond0 (unregistering): Released all slaves [ 1714.191981][T17780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2926'. [ 1714.205373][T17780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2926'. [ 1714.632156][T17795] loop0: detected capacity change from 0 to 512 [ 1715.498998][T14058] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1716.069467][T17583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1716.093196][T17808] loop7: detected capacity change from 0 to 4096 [ 1716.111964][T17808] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 1716.124876][T17583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1716.172638][T17583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1716.205465][T17583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1716.891025][T17583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.999468][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1717.011090][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1717.046268][T17583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1717.077593][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1717.235232][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1717.297242][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.304475][ T6601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.078594][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1718.134793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1718.152480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1718.199541][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.206771][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1718.446304][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1718.588792][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1718.765330][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1718.978110][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1719.092986][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1719.130188][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1719.175332][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1719.218854][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1719.252934][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1719.412330][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1719.447098][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1721.560710][T17872] loop5: detected capacity change from 0 to 4096 [ 1721.613604][T17872] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1721.672399][T17878] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1721.846076][T17871] xt_hashlimit: size too large, truncated to 1048576 [ 1727.647370][T14648] Bluetooth: hci0: command 0x0406 tx timeout [ 1727.683586][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1727.735946][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1728.680988][T17583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1730.830394][T17931] loop3: detected capacity change from 0 to 16 [ 1730.858031][T17931] erofs: (device loop3): mounted with root inode @ nid 36. [ 1731.827014][T17942] loop7: detected capacity change from 0 to 131072 [ 1731.845930][T17942] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1731.855041][T17942] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1731.873225][T17942] F2FS-fs (loop7): invalid crc value [ 1732.001268][T17942] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1732.145127][T17942] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1732.152928][T17942] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1732.236718][T17942] F2FS-fs (loop7): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1732.940873][T17958] netlink: 'syz.7.2957': attribute type 4 has an invalid length. [ 1733.823333][ T7471] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1734.556023][T17970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1734.563392][T17970] IPv6: NLM_F_CREATE should be set when creating new route [ 1735.694495][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.734481][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.971596][T17970] lo speed is unknown, defaulting to 1000 [ 1736.524326][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1736.638208][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1737.567344][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1737.576214][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1737.586545][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1737.594748][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1737.622127][T17583] device veth0_vlan entered promiscuous mode [ 1737.880773][T17583] device veth1_vlan entered promiscuous mode [ 1739.578916][T17997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2967'. [ 1739.884375][T17583] device veth0_macvtap entered promiscuous mode [ 1739.930741][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1739.933912][T18005] loop5: detected capacity change from 0 to 4096 [ 1739.953636][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1739.981017][T17583] device veth1_macvtap entered promiscuous mode [ 1740.009210][T18005] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1740.065488][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1740.084258][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1741.228171][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1741.238778][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.249657][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1741.278318][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.312992][ T4271] Bluetooth: Wrong link type (-22) [ 1741.602969][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1741.792581][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.958856][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1742.134660][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.268583][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1742.400406][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.596489][T17583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1742.650893][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1742.688176][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1742.710346][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.238486][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.248622][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.289779][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.317362][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.390933][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.440788][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.490238][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.506178][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.520534][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.539700][T17583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1743.658813][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1743.668558][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1743.691847][T17583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.701128][T17583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.710561][T17583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.720712][T17583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.151574][ T7471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.178075][ T7471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.271118][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1746.145442][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2981'. [ 1746.341251][T18048] ALSA: mixer_oss: invalid index 40000 [ 1746.771964][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1746.925528][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.971739][T18076] loop0: detected capacity change from 0 to 16 [ 1746.974485][T18069] loop5: detected capacity change from 0 to 4096 [ 1746.992289][T18076] erofs: (device loop0): mounted with root inode @ nid 36. [ 1746.999728][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1747.037314][T18069] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1747.616057][T18082] loop4: detected capacity change from 0 to 4096 [ 1747.647841][T18082] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1748.745492][T18093] loop3: detected capacity change from 0 to 512 [ 1749.198466][T13952] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1749.680377][T18103] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1750.257411][T18113] loop3: detected capacity change from 0 to 32768 [ 1750.264663][T18113] XFS: ikeep mount option is deprecated. [ 1750.347043][T18113] XFS (loop3): Mounting V5 Filesystem [ 1750.502447][T18113] XFS (loop3): Ending clean mount [ 1750.509654][T18113] XFS (loop3): Quotacheck needed: Please wait. [ 1750.570340][T18105] overlayfs: unrecognized mount option "smackfshat=overlay" or missing value [ 1751.463278][T18113] XFS (loop3): Quotacheck: Done. [ 1751.789305][T18113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2995'. [ 1752.028039][T17146] XFS (loop3): Unmounting Filesystem [ 1753.235628][T18152] loop0: detected capacity change from 0 to 1024 [ 1753.388375][T18152] EXT4-fs: Ignoring removed bh option [ 1753.484641][T18157] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1754.088182][T18152] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1754.112210][T18148] loop3: detected capacity change from 0 to 4096 [ 1754.236484][T18148] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1755.674181][T16750] EXT4-fs (loop0): unmounting filesystem. [ 1756.309326][T18176] loop0: detected capacity change from 0 to 32768 [ 1756.316698][T18176] XFS: ikeep mount option is deprecated. [ 1756.781036][T18176] XFS (loop0): Mounting V5 Filesystem [ 1756.793912][T18170] loop7: detected capacity change from 0 to 131072 [ 1756.802183][T18170] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1756.810353][T18170] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1756.859080][T18170] F2FS-fs (loop7): invalid crc value [ 1756.936441][T18176] XFS (loop0): Ending clean mount [ 1756.944542][T18170] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1756.993847][T18176] XFS (loop0): Quotacheck needed: Please wait. [ 1757.012887][T18170] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1757.020152][T18170] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1757.038457][T18170] F2FS-fs (loop7): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1757.360873][T18201] netlink: 'syz.7.3009': attribute type 4 has an invalid length. [ 1757.729750][T18176] XFS (loop0): Quotacheck: Done. [ 1757.885569][T18202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3010'. [ 1760.711478][T16750] XFS (loop0): Unmounting Filesystem [ 1761.829393][T18216] loop7: detected capacity change from 0 to 4096 [ 1761.897756][T18216] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 1763.520935][T18229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 1766.460149][T18240] loop4: detected capacity change from 0 to 131072 [ 1766.901774][ T1076] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1766.915132][T18240] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1766.923642][T18240] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1766.958308][T18240] F2FS-fs (loop4): invalid crc value [ 1767.109840][T18249] vivid-000: disconnect [ 1767.451347][T18240] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1767.840641][T18243] vivid-000: reconnect [ 1767.867730][T18240] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1767.874963][T18240] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1767.905089][T18240] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1768.163671][T18254] netlink: 'syz.4.3026': attribute type 4 has an invalid length. [ 1771.474647][ T4426] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1772.744660][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3035'. [ 1773.607595][ T4271] Bluetooth: hci4: command 0x0406 tx timeout [ 1774.837130][ T14] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1775.247330][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 1775.258179][ T14] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1775.277306][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.287896][ T14] usb 6-1: config 0 has no interface number 0 [ 1775.409080][ T14] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1775.455610][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.497423][ T14] usb 6-1: Product: syz [ 1775.501695][ T14] usb 6-1: Manufacturer: syz [ 1775.546913][ T14] usb 6-1: SerialNumber: syz [ 1775.775083][ T14] usb 6-1: config 0 descriptor?? [ 1775.822942][ T14] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1775.855669][ T14] usb 6-1: No valid video chain found. [ 1776.491637][T18304] loop0: detected capacity change from 0 to 131072 [ 1776.506717][ T4271] Bluetooth: Wrong link type (-22) [ 1776.512691][T18304] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1776.520859][T18304] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1776.540099][T18304] F2FS-fs (loop0): invalid crc value [ 1776.585324][T18304] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1776.634804][T18304] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1776.642001][T18304] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1776.667863][T18304] F2FS-fs (loop0): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1776.809496][ T14] usb 6-1: USB disconnect, device number 9 [ 1776.913002][T18319] netlink: 'syz.0.3042': attribute type 4 has an invalid length. [ 1777.613852][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 1777.613870][ T26] audit: type=1326 audit(1751351114.225:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163338e929 code=0x7ffc0000 [ 1778.699155][T18329] loop5: detected capacity change from 0 to 16 [ 1778.720183][ T26] audit: type=1326 audit(1751351114.225:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163338e929 code=0x7ffc0000 [ 1778.783806][T18329] erofs: (device loop5): mounted with root inode @ nid 36. [ 1778.990464][ T26] audit: type=1326 audit(1751351114.225:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f163338e929 code=0x7ffc0000 [ 1779.485658][T18331] ALSA: mixer_oss: invalid index 40000 [ 1779.501210][ C0] vkms_vblank_simulate: vblank timer overrun [ 1779.617352][ T26] audit: type=1326 audit(1751351114.225:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163338e929 code=0x7ffc0000 [ 1779.812728][ T26] audit: type=1326 audit(1751351114.225:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163338e929 code=0x7ffc0000 [ 1779.836532][ T26] audit: type=1326 audit(1751351114.225:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f163338e929 code=0x7ffc0000 [ 1780.337610][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3049'. [ 1781.722046][ T26] audit: type=1326 audit(1751351114.455:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163338e929 code=0x7ffc0000 [ 1783.554317][ T26] audit: type=1326 audit(1751351114.455:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163338e929 code=0x7ffc0000 [ 1783.638091][T18374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3056'. [ 1783.647649][T18374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3056'. [ 1785.805681][T18390] ALSA: mixer_oss: invalid index 40000 [ 1786.602445][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3065'. [ 1787.599010][T18415] netlink: 'syz.4.3068': attribute type 1 has an invalid length. [ 1789.816517][T18431] vivid-001: disconnect [ 1789.987757][T18423] vivid-001: reconnect [ 1790.295345][T18432] ALSA: mixer_oss: invalid index 40000 [ 1791.551782][T18448] loop5: detected capacity change from 0 to 4096 [ 1791.769184][T18448] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1797.193243][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.200373][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.695762][T18483] ALSA: mixer_oss: invalid index 40000 [ 1800.601422][ T26] audit: type=1326 audit(1751351137.215:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885758e929 code=0x7fc00000 [ 1800.690057][T18506] loop5: detected capacity change from 0 to 4096 [ 1800.705663][ T26] audit: type=1326 audit(1751351137.235:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f885758e929 code=0x7fc00000 [ 1800.818091][T18506] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1800.907304][ T26] audit: type=1326 audit(1751351137.235:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885758e929 code=0x7fc00000 [ 1800.976323][ T26] audit: type=1326 audit(1751351137.235:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885758e929 code=0x7fc00000 [ 1802.313229][ T26] audit: type=1326 audit(1751351137.235:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885758e929 code=0x7fc00000 [ 1802.621371][ T26] audit: type=1326 audit(1751351137.235:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885758e929 code=0x7fc00000 [ 1802.643888][ T26] audit: type=1326 audit(1751351137.235:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885758e929 code=0x7fc00000 [ 1802.748958][ T26] audit: type=1326 audit(1751351137.235:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885758e929 code=0x7fc00000 [ 1802.852301][T18519] ax25_connect(): syz.7.3098 uses autobind, please contact jreuter@yaina.de [ 1804.287146][ T26] audit: type=1326 audit(1751351137.235:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885758e929 code=0x7fc00000 [ 1804.314986][ T26] audit: type=1326 audit(1751351137.235:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885758e929 code=0x7fc00000 [ 1804.337396][ C1] vkms_vblank_simulate: vblank timer overrun [ 1804.375213][T18527] ALSA: mixer_oss: invalid index 40000 [ 1805.728955][ T4420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1805.845930][T18549] vivid-002: disconnect [ 1806.003877][T18537] vivid-002: reconnect [ 1808.386845][T18560] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3109'. [ 1809.540005][T18575] ax25_connect(): syz.3.3113 uses autobind, please contact jreuter@yaina.de [ 1809.898965][T18574] ALSA: mixer_oss: invalid index 40000 [ 1809.905160][T18582] loop3: detected capacity change from 0 to 4096 [ 1809.945045][T18582] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1810.310801][ T4271] Bluetooth: Wrong link type (-22) [ 1813.749453][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3122'. [ 1814.567262][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 1815.986706][T18628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1815.994028][T18628] IPv6: NLM_F_CREATE should be set when creating new route [ 1816.313921][T18632] loop7: detected capacity change from 0 to 1024 [ 1816.386696][T18634] ALSA: mixer_oss: invalid index 40000 [ 1816.588395][T18638] ax25_connect(): syz.5.3126 uses autobind, please contact jreuter@yaina.de [ 1817.115501][T18632] EXT4-fs: Ignoring removed bh option [ 1817.268744][T18632] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1819.177555][T15317] block nbd3: Attempted send on invalid socket [ 1819.193344][T15317] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1819.208873][T18657] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 1819.810290][T16247] EXT4-fs (loop7): unmounting filesystem. [ 1819.871158][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 1821.801917][T18676] kvm: pic: level sensitive irq not supported [ 1821.802067][T18676] kvm: pic: level sensitive irq not supported [ 1821.827396][T18676] kvm: pic: level sensitive irq not supported [ 1821.834111][T18676] kvm: pic: level sensitive irq not supported [ 1821.876981][T18676] pic_ioport_write: 17 callbacks suppressed [ 1821.877003][T18676] kvm: pic: single mode not supported [ 1821.889385][T18676] kvm: pic: level sensitive irq not supported [ 1822.746481][T18678] ALSA: mixer_oss: invalid index 40000 [ 1823.530216][T18691] ax25_connect(): syz.7.3141 uses autobind, please contact jreuter@yaina.de [ 1826.005132][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3142'. [ 1826.014611][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3142'. [ 1826.880364][T18701] loop0: detected capacity change from 0 to 16 [ 1826.884317][T18700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1826.933313][T18701] erofs: (device loop0): mounted with root inode @ nid 36. [ 1827.551409][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'. [ 1830.938372][T18731] ax25_connect(): syz.4.3152 uses autobind, please contact jreuter@yaina.de [ 1832.205502][T18741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1832.324937][T18744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3156'. [ 1832.336188][T18744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3156'. [ 1834.674731][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 1835.505091][T18770] loop3: detected capacity change from 0 to 16 [ 1836.303612][T18770] erofs: (device loop3): mounted with root inode @ nid 36. [ 1836.973832][T18780] loop3: detected capacity change from 0 to 1024 [ 1837.014816][T18780] EXT4-fs: Ignoring removed bh option [ 1837.145772][T18780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1837.164048][T18785] loop7: detected capacity change from 0 to 512 [ 1838.390280][T18791] loop5: detected capacity change from 0 to 32768 [ 1838.397502][T18791] XFS: ikeep mount option is deprecated. [ 1838.471468][T17146] EXT4-fs (loop3): unmounting filesystem. [ 1838.563503][T18791] XFS (loop5): Mounting V5 Filesystem [ 1839.551564][T18791] XFS (loop5): Ending clean mount [ 1839.560720][T18791] XFS (loop5): Quotacheck needed: Please wait. [ 1840.587886][T18791] XFS (loop5): Quotacheck: Done. [ 1840.742075][T18814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3166'. [ 1842.179727][ T5051] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1842.532568][ T6614] XFS (loop5): Unmounting Filesystem [ 1842.750206][T18825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3172'. [ 1845.013806][T14648] Bluetooth: Wrong link type (-22) [ 1845.019214][T14648] Bluetooth: hci2: link tx timeout [ 1845.025156][T14648] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1848.138066][T18843] loop7: detected capacity change from 0 to 1024 [ 1848.145399][T18843] EXT4-fs: Ignoring removed bh option [ 1848.254490][T18843] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1849.278996][T16247] EXT4-fs (loop7): unmounting filesystem. [ 1850.318469][T15495] Bluetooth: hci5: Frame reassembly failed (-84) [ 1851.636140][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3184'. [ 1852.337438][ T4271] Bluetooth: hci5: command 0x1003 tx timeout [ 1852.387529][T14648] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1854.214689][T14648] Bluetooth: Wrong link type (-22) [ 1856.522185][T18905] loop5: detected capacity change from 0 to 1024 [ 1856.534373][T18905] EXT4-fs: Ignoring removed bh option [ 1858.077546][T18905] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1858.236471][T18923] ALSA: mixer_oss: invalid index 40000 [ 1858.573914][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.580365][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.982719][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3197'. [ 1859.739393][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1862.122300][T13462] Bluetooth: Wrong link type (-22) [ 1864.162649][T18961] loop4: detected capacity change from 0 to 4096 [ 1864.177251][T18961] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1864.348157][T18959] ax25_connect(): syz.5.3204 uses autobind, please contact jreuter@yaina.de [ 1867.035664][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 1869.955505][T18994] ALSA: mixer_oss: invalid index 40000 [ 1870.624422][T19011] loop3: detected capacity change from 0 to 32768 [ 1870.631894][T19011] XFS: ikeep mount option is deprecated. [ 1870.703856][T19011] XFS (loop3): Mounting V5 Filesystem [ 1870.771179][T19011] XFS (loop3): Ending clean mount [ 1870.778196][T19011] XFS (loop3): Quotacheck needed: Please wait. [ 1870.905003][T19011] XFS (loop3): Quotacheck: Done. [ 1871.065986][T19020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3215'. [ 1871.487001][T19022] loop4: detected capacity change from 0 to 512 [ 1871.499661][T17146] XFS (loop3): Unmounting Filesystem [ 1872.643914][T19028] ax25_connect(): syz.0.3217 uses autobind, please contact jreuter@yaina.de [ 1873.473732][ T7471] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1874.859661][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'. [ 1875.332626][ T4465] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1880.881786][T19094] loop5: detected capacity change from 0 to 16 [ 1880.938650][T19094] erofs: (device loop5): mounted with root inode @ nid 36. [ 1881.092915][T19083] ALSA: mixer_oss: invalid index 40000 [ 1881.313918][T19098] loop0: detected capacity change from 0 to 1024 [ 1881.476583][T19098] EXT4-fs: Ignoring removed bh option [ 1881.897388][T19098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1882.401753][T19110] ax25_connect(): syz.4.3231 uses autobind, please contact jreuter@yaina.de [ 1882.927807][T16750] EXT4-fs (loop0): unmounting filesystem. [ 1883.275416][T19118] ALSA: mixer_oss: invalid index 40000 [ 1885.045627][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 1889.240287][T19156] loop3: detected capacity change from 0 to 16 [ 1889.300918][T19156] erofs: (device loop3): mounted with root inode @ nid 36. [ 1889.490133][T19159] loop0: detected capacity change from 0 to 1024 [ 1889.529472][T19159] EXT4-fs: Ignoring removed bh option [ 1889.609553][T19159] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1891.579399][T19182] ALSA: mixer_oss: invalid index 40000 [ 1893.354346][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3246'. [ 1893.595316][T16750] EXT4-fs (loop0): unmounting filesystem. [ 1894.328165][T19193] loop5: detected capacity change from 0 to 512 [ 1896.243211][T13462] Bluetooth: Wrong link type (-22) [ 1896.249904][T13462] Bluetooth: hci2: link tx timeout [ 1896.255050][T13462] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1896.263841][T13462] Bluetooth: hci2: link tx timeout [ 1896.269027][T13462] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1898.549760][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3262'. [ 1898.923233][T13462] Bluetooth: hci2: command 0x0406 tx timeout [ 1900.516824][T19263] loop4: detected capacity change from 0 to 512 [ 1900.618908][T13952] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1903.415099][T19276] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1904.131762][T19276] kvm: pic: non byte read [ 1905.773735][T19294] loop5: detected capacity change from 0 to 1024 [ 1905.798323][T19294] EXT4-fs: Ignoring removed bh option [ 1905.860752][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3275'. [ 1906.643642][T19304] loop3: detected capacity change from 0 to 1024 [ 1906.688307][T19294] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1906.709115][T19304] EXT4-fs: Ignoring removed bh option [ 1906.881365][T19304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1908.913312][T17146] EXT4-fs (loop3): unmounting filesystem. [ 1909.047522][ T6614] EXT4-fs (loop5): unmounting filesystem. [ 1909.992407][ T6601] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1910.114150][T13462] Bluetooth: Wrong link type (-22) [ 1912.453499][T19337] loop7: detected capacity change from 0 to 16 [ 1912.626376][T19337] erofs: (device loop7): mounted with root inode @ nid 36. [ 1914.685835][T19352] loop7: detected capacity change from 0 to 32768 [ 1914.693465][T19352] XFS: ikeep mount option is deprecated. [ 1915.059106][T19352] XFS (loop7): Mounting V5 Filesystem [ 1915.166587][T19361] loop0: detected capacity change from 0 to 1024 [ 1915.225201][T19361] EXT4-fs: Ignoring removed bh option [ 1915.243238][T19352] XFS (loop7): Ending clean mount [ 1915.290827][T19352] XFS (loop7): Quotacheck needed: Please wait. [ 1915.364297][T14648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1915.376436][T14648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1915.384627][T14648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1915.393964][T14648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1915.401796][T14648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1915.413018][T14648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1915.446579][T19352] XFS (loop7): Quotacheck: Done. [ 1915.464094][T19361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1915.668480][T19374] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3287'. [ 1915.864354][T19373] loop3: detected capacity change from 0 to 1024 [ 1915.947934][T19367] lo speed is unknown, defaulting to 1000 [ 1915.975596][T19373] EXT4-fs: Ignoring removed bh option [ 1916.058254][T19373] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1916.104807][T16247] XFS (loop7): Unmounting Filesystem [ 1916.123289][T16750] EXT4-fs (loop0): unmounting filesystem. [ 1916.927052][T17146] EXT4-fs (loop3): unmounting filesystem. [ 1917.468938][T13462] Bluetooth: hci5: command 0x0409 tx timeout [ 1917.676775][T19367] chnl_net:caif_netlink_parms(): no params data found [ 1919.527228][T14648] Bluetooth: hci5: command 0x041b tx timeout [ 1919.557333][T19367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.564527][T19367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.627646][T19367] device bridge_slave_0 entered promiscuous mode [ 1919.636438][T19367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.644247][T19367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.653271][T19367] device bridge_slave_1 entered promiscuous mode [ 1919.683119][T19367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1919.768632][T19405] loop0: detected capacity change from 0 to 16 [ 1920.255518][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.291012][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.360837][T19405] erofs: (device loop0): mounted with root inode @ nid 36. [ 1920.386410][T19367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1920.709416][T19367] team0: Port device team_slave_0 added [ 1920.721646][T19367] team0: Port device team_slave_1 added [ 1920.760753][T19367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.768470][T19367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1921.607261][T14648] Bluetooth: hci5: command 0x040f tx timeout [ 1921.638057][T19367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1921.659067][T19367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1921.674207][T19367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1921.702167][T19367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1921.822757][T19367] device hsr_slave_0 entered promiscuous mode [ 1921.861659][T19367] device hsr_slave_1 entered promiscuous mode [ 1921.878509][T19367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1921.928986][T19367] Cannot create hsr debugfs directory [ 1923.278915][T19433] loop7: detected capacity change from 0 to 32768 [ 1923.286021][T19433] XFS: ikeep mount option is deprecated. [ 1923.416666][T19436] loop4: detected capacity change from 0 to 1024 [ 1923.463529][T19433] XFS (loop7): Mounting V5 Filesystem [ 1923.488610][T19436] EXT4-fs: Ignoring removed bh option [ 1923.583867][T19433] XFS (loop7): Ending clean mount [ 1923.590943][T19433] XFS (loop7): Quotacheck needed: Please wait. [ 1923.601405][T19436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1923.676242][T19433] XFS (loop7): Quotacheck: Done. [ 1923.687242][T14648] Bluetooth: hci5: command 0x0419 tx timeout [ 1923.819079][T19450] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3302'. [ 1927.252013][T19367] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1927.704746][T17583] EXT4-fs (loop4): unmounting filesystem. [ 1928.828578][T16247] XFS (loop7): Unmounting Filesystem [ 1928.989725][T19367] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.916654][T19367] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.094415][T19475] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1930.731205][T19478] loop4: detected capacity change from 0 to 16 [ 1930.777600][T19478] erofs: (device loop4): mounted with root inode @ nid 36. [ 1931.593798][T19482] loop0: detected capacity change from 0 to 1024 [ 1931.628439][T19482] EXT4-fs: Ignoring removed bh option [ 1931.643541][T19367] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.821056][T19482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1932.275803][T19367] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1932.311160][T19367] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1932.357979][T19367] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1932.416354][T19367] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1932.468548][T16750] EXT4-fs (loop0): unmounting filesystem. [ 1934.219494][T19367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1934.275458][ T9511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1934.284900][ T9511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1934.516081][T19516] ax25_connect(): syz.7.3315 uses autobind, please contact jreuter@yaina.de [ 1934.899328][T19367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1935.006734][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1935.044387][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1935.115418][ T4465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.122691][ T4465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1935.155409][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1935.185442][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1935.212279][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1935.237696][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.244924][ T4465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.279309][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1935.454925][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1935.617694][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1935.847373][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1936.065682][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1936.272387][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1936.465727][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1936.707875][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1936.793591][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1936.812399][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1936.831617][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1936.866503][T19367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1939.635649][T19564] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1939.686910][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1940.483223][T19562] loop4: detected capacity change from 0 to 1024 [ 1940.530021][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1940.538337][T19562] EXT4-fs: Ignoring removed bh option [ 1940.580051][T19538] ax25_connect(): syz.3.3320 uses autobind, please contact jreuter@yaina.de [ 1940.663715][T19562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1940.727664][T19367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1941.046291][ T4465] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1941.365088][T19574] loop0: detected capacity change from 0 to 1024 [ 1941.374582][T17583] EXT4-fs (loop4): unmounting filesystem. [ 1941.393003][T19574] EXT4-fs: Ignoring removed bh option [ 1942.200511][T19574] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1942.698047][T16750] EXT4-fs (loop0): unmounting filesystem. [ 1942.739863][T19587] vivid-004: disconnect [ 1943.319004][T19582] vivid-004: reconnect [ 1948.002736][T19617] loop3: detected capacity change from 0 to 1024 [ 1948.037965][T19617] EXT4-fs: Ignoring removed bh option [ 1948.218238][T19621] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1950.126629][T19617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1950.145475][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1950.179696][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1950.374765][T19367] device veth0_vlan entered promiscuous mode [ 1950.378225][T19629] loop7: detected capacity change from 0 to 1024 [ 1950.389587][T19629] EXT4-fs: Ignoring removed bh option [ 1951.221529][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1951.248926][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1951.259886][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1951.271839][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1951.280406][T19629] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1951.291156][T19367] device veth1_vlan entered promiscuous mode [ 1951.325754][T17146] EXT4-fs (loop3): unmounting filesystem. [ 1951.662663][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1951.715431][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1951.726960][T19367] device veth0_macvtap entered promiscuous mode [ 1951.740967][T19367] device veth1_macvtap entered promiscuous mode [ 1951.759204][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.769729][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.785876][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.803116][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.971622][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.982329][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.992553][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1952.007945][T16247] EXT4-fs (loop7): unmounting filesystem. [ 1952.014643][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1952.381740][T19648] vivid-002: disconnect [ 1952.501184][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1952.754219][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1952.791595][T19640] vivid-002: reconnect [ 1952.847307][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1952.857959][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1952.869707][T19367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1952.880796][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1952.923669][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1953.148010][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1954.138480][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1954.282625][T19649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1954.290139][T19649] IPv6: NLM_F_CREATE should be set when creating new route [ 1954.321019][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.360297][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.370787][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.382914][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.393532][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.412671][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.433268][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.481752][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.513477][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.552629][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.600637][T19367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.611475][T19367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.623622][T19367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1954.635669][T19367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.644819][T19367] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.653810][T19367] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.664196][T19367] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1956.441172][T19674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1956.701574][T19681] ax25_connect(): syz.0.3344 uses autobind, please contact jreuter@yaina.de [ 1957.681002][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1957.698315][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1957.908865][T19632] block nbd3: Attempted send on invalid socket [ 1957.918355][T19632] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1957.936135][T19691] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 1957.951344][T15495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.372060][T15495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1958.407669][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1958.611639][T15495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1960.027159][T15495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1961.489245][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1961.772803][T19715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1965.173090][T19742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1966.002972][T19751] loop5: detected capacity change from 0 to 1024 [ 1966.096392][T19751] EXT4-fs: Ignoring removed bh option [ 1966.263713][T19745] ax25_connect(): syz.0.3359 uses autobind, please contact jreuter@yaina.de [ 1966.298125][T19751] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1968.145983][T19367] EXT4-fs (loop5): unmounting filesystem. [ 1968.819811][T19778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1972.591400][ T4385] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1975.841947][T19828] loop7: detected capacity change from 0 to 1024 [ 1976.028402][T19828] EXT4-fs: Ignoring removed bh option [ 1976.093497][T19823] ax25_connect(): syz.5.3375 uses autobind, please contact jreuter@yaina.de [ 1976.188609][ T46] device hsr_slave_0 left promiscuous mode [ 1976.195180][ T46] device hsr_slave_1 left promiscuous mode [ 1976.330019][T19828] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1977.434123][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1977.499586][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1978.327323][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1978.355245][T16247] EXT4-fs (loop7): unmounting filesystem. [ 1978.365945][T19859] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1978.376864][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1978.421026][T19861] xt_HMARK: proto mask must be zero with L3 mode [ 1978.624285][T19864] overlayfs: unrecognized mount option "verity=require" or missing value [ 1978.664287][ T46] device bridge_slave_1 left promiscuous mode [ 1978.680748][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.892522][T19867] netlink: 'syz.4.3384': attribute type 2 has an invalid length. [ 1978.900890][T19867] netlink: 'syz.4.3384': attribute type 1 has an invalid length. [ 1978.911423][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3384'. [ 1981.695353][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.705385][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.917491][ T46] device bridge_slave_0 left promiscuous mode [ 1981.923797][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.897371][ T46] device veth1_macvtap left promiscuous mode [ 1983.903483][ T46] device veth0_macvtap left promiscuous mode [ 1983.917294][ T46] device veth1_vlan left promiscuous mode [ 1983.923250][ T46] device veth0_vlan left promiscuous mode [ 1985.106398][T19895] ax25_connect(): syz.5.3392 uses autobind, please contact jreuter@yaina.de [ 1987.365785][T19915] loop0: detected capacity change from 0 to 1024 [ 1987.375429][T19915] EXT4-fs: Ignoring removed bh option [ 1987.620980][T19921] loop4: detected capacity change from 0 to 32768 [ 1987.628296][T19921] XFS: ikeep mount option is deprecated. [ 1987.667123][T19915] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1988.121953][T19921] XFS (loop4): Mounting V5 Filesystem [ 1988.236130][T19921] XFS (loop4): Ending clean mount [ 1988.236573][T16750] EXT4-fs (loop0): unmounting filesystem. [ 1988.244046][T19921] XFS (loop4): Quotacheck needed: Please wait. [ 1988.432509][T19921] XFS (loop4): Quotacheck: Done. [ 1989.412512][T19937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3397'. [ 1991.156321][T17583] XFS (loop4): Unmounting Filesystem [ 1991.498907][T19950] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1992.928075][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1995.528967][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1995.768334][T14667] block nbd4: Attempted send on invalid socket [ 1995.774663][T14667] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1995.790025][T19975] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 1997.668904][T13462] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1997.684014][T13462] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1997.692885][T13462] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1997.702539][T13462] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1997.710246][T13462] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1997.721235][T13462] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1998.112405][ T46] bond0 (unregistering): Released all slaves [ 1998.540843][T19998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1998.599651][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3387'. [ 1999.005178][ T8815] lo speed is unknown, defaulting to 1000 [ 1999.914780][T13462] Bluetooth: hci3: command 0x0409 tx timeout [ 2001.749475][T19992] chnl_net:caif_netlink_parms(): no params data found [ 2002.599996][T13462] Bluetooth: hci3: command 0x041b tx timeout [ 2002.996237][T20037] ax25_connect(): syz.0.3419 uses autobind, please contact jreuter@yaina.de [ 2003.255131][T14648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2003.268031][T14648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2003.276737][T14648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2003.286050][T14648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2003.294039][T14648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2003.302985][T14648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2003.356452][T20044] loop4: detected capacity change from 0 to 512 [ 2003.376461][T19992] bridge0: port 1(bridge_slave_0) entered blocking state [ 2003.383907][T19992] bridge0: port 1(bridge_slave_0) entered disabled state [ 2003.392721][T19992] device bridge_slave_0 entered promiscuous mode [ 2003.402569][T19992] bridge0: port 2(bridge_slave_1) entered blocking state [ 2003.409726][T19992] bridge0: port 2(bridge_slave_1) entered disabled state [ 2003.418402][T19992] device bridge_slave_1 entered promiscuous mode [ 2003.436442][T13952] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2004.518953][T19992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2004.551558][T19992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2004.601026][T19992] team0: Port device team_slave_0 added [ 2004.628622][T19992] team0: Port device team_slave_1 added [ 2004.664616][T19992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2004.671600][T19992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2004.698627][T19992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2004.711916][T19992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2004.719369][T19992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2004.745815][T19992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2004.789690][T14648] Bluetooth: hci3: command 0x040f tx timeout [ 2004.857366][T19992] device hsr_slave_0 entered promiscuous mode [ 2004.864344][T19992] device hsr_slave_1 entered promiscuous mode [ 2004.871027][T19992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2004.878931][T19992] Cannot create hsr debugfs directory [ 2005.013157][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.042848][T20040] chnl_net:caif_netlink_parms(): no params data found [ 2005.128778][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.222038][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.240828][T20040] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.247973][T20040] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.256535][T20040] device bridge_slave_0 entered promiscuous mode [ 2005.264800][T19992] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2005.274813][T20040] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.282220][T20040] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.290375][T20040] device bridge_slave_1 entered promiscuous mode [ 2005.299326][T19992] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2005.330093][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.363886][T19992] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2005.376467][T20040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2005.386290][T19992] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2005.411655][T20040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2005.460373][T20040] team0: Port device team_slave_0 added [ 2005.478735][T20040] team0: Port device team_slave_1 added [ 2005.559718][T14648] Bluetooth: hci1: command 0x0409 tx timeout [ 2005.570503][T20040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2005.571122][ T4385] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2005.577479][T20040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2005.613868][T20040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2005.626955][T20040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2005.634016][T20040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2005.660153][T20040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2005.721408][ T46] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.845133][ T46] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.872859][T20040] device hsr_slave_0 entered promiscuous mode [ 2005.891370][T20040] device hsr_slave_1 entered promiscuous mode [ 2005.898153][T20040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2005.917133][T20040] Cannot create hsr debugfs directory [ 2005.958682][ T46] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.995851][T19992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2006.049044][ T46] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.090506][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2006.104860][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2006.118492][T19992] 8021q: adding VLAN 0 to HW filter on device team0 [ 2006.161041][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2006.178859][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2006.187704][T19698] bridge0: port 1(bridge_slave_0) entered blocking state [ 2006.194882][T19698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2006.214582][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2006.267041][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2006.277229][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2006.285800][T15495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2006.292990][T15495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2006.302636][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2006.357336][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2006.373224][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2006.386652][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2006.455387][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2006.466963][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2006.488512][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2006.524060][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2006.541489][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2006.551802][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2006.561332][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2006.572558][T19992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2006.738765][T20040] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2006.792527][T20040] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2006.817306][T20040] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2006.850290][T20040] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2007.013471][T14648] Bluetooth: hci3: command 0x0419 tx timeout [ 2007.121552][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2007.129111][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2007.157119][T19992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2007.358517][T20040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2007.377968][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2007.385896][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2007.416776][T20040] 8021q: adding VLAN 0 to HW filter on device team0 [ 2007.505362][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2007.514203][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2007.531648][T15495] bridge0: port 1(bridge_slave_0) entered blocking state [ 2007.538871][T15495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2007.557782][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2007.566822][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2007.584995][T15495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2007.592218][T15495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2007.600378][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2007.749747][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2007.773590][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2007.783261][T14648] Bluetooth: hci1: command 0x041b tx timeout [ 2007.806157][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2007.848493][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2007.865675][T15495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2007.945067][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2007.955114][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2008.046929][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2008.061667][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2008.148718][T20040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2008.160798][T20040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2008.170868][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2008.183210][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2008.280450][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2008.291069][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2008.409720][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2008.418529][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2008.434012][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2008.452952][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2008.466631][T19992] device veth0_vlan entered promiscuous mode [ 2008.667048][T19992] device veth1_vlan entered promiscuous mode [ 2008.684048][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2008.693373][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2008.700962][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2008.751524][T20040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2008.915265][T19992] device veth0_macvtap entered promiscuous mode [ 2008.938191][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2008.959579][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2008.971431][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2008.990782][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2009.000444][T19992] device veth1_macvtap entered promiscuous mode [ 2009.040634][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2009.223491][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.248086][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.258403][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.280164][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.311683][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.323555][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.344096][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.364006][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.376431][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.397098][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.406978][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.440046][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.464750][T19992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2009.504084][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2009.516738][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2009.532634][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.543685][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.553852][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.564767][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.576899][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.587722][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.597875][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.608633][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.619329][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.630081][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.640290][T19992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.651053][T19992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.662593][T19992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2009.738359][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2009.747976][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2009.762347][T19992] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.771110][T19992] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.780609][T19992] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.789889][T19992] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.871643][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2009.881078][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2009.903980][ T46] device hsr_slave_0 left promiscuous mode [ 2009.910693][ T46] device hsr_slave_1 left promiscuous mode [ 2009.917129][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2009.925114][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2009.937022][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2009.946667][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2009.954859][ T46] device bridge_slave_1 left promiscuous mode [ 2009.961098][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 2009.969958][ T46] device bridge_slave_0 left promiscuous mode [ 2009.976697][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 2009.992107][ T46] device hsr_slave_0 left promiscuous mode [ 2009.998563][ T46] device hsr_slave_1 left promiscuous mode [ 2010.004912][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2010.013069][T14648] Bluetooth: hci1: command 0x040f tx timeout [ 2010.019354][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2010.027031][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2010.034737][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2010.042863][ T46] device bridge_slave_1 left promiscuous mode [ 2010.049071][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.060632][ T46] device bridge_slave_0 left promiscuous mode [ 2010.066840][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.122606][ T46] device veth1_macvtap left promiscuous mode [ 2010.128963][ T46] device veth0_macvtap left promiscuous mode [ 2010.137107][ T46] device veth1_vlan left promiscuous mode [ 2010.142949][ T46] device veth0_vlan left promiscuous mode [ 2010.150544][ T46] device veth1_macvtap left promiscuous mode [ 2010.156892][ T46] device veth0_macvtap left promiscuous mode [ 2010.165097][ T46] device veth1_vlan left promiscuous mode [ 2010.171195][ T46] device veth0_vlan left promiscuous mode [ 2010.906890][ T46] team0 (unregistering): Port device team_slave_1 removed [ 2010.975167][ T46] team0 (unregistering): Port device team_slave_0 removed [ 2011.032207][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2011.089725][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2011.701731][ T46] bond0 (unregistering): Released all slaves [ 2012.230443][T14648] Bluetooth: hci1: command 0x0419 tx timeout [ 2012.291460][ T46] team0 (unregistering): Port device team_slave_1 removed [ 2012.352716][ T46] team0 (unregistering): Port device team_slave_0 removed [ 2012.404470][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2012.461287][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2013.061393][ T46] bond0 (unregistering): Released all slaves [ 2013.206174][T20040] device veth0_vlan entered promiscuous mode [ 2013.244214][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2013.253512][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2013.264192][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2013.273075][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2013.292662][T20040] device veth1_vlan entered promiscuous mode [ 2013.431606][ T5255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.437666][T20040] device veth0_macvtap entered promiscuous mode [ 2013.448987][ T5255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.469190][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2013.486281][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2013.500602][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2013.515788][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2013.555683][T20040] device veth1_macvtap entered promiscuous mode [ 2013.593441][ T5255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.618764][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.639059][ T5255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.661337][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.680040][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.700690][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.712969][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.732875][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.745736][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.769359][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.781203][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.792636][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.805267][T20040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2013.816860][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2013.830700][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2013.843513][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2013.864087][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2013.878207][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.889505][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.900789][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.911743][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.921891][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.932747][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.944043][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.954978][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.965217][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.975986][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.987604][T20040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2014.002459][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2014.020731][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2014.051744][T20040] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.060995][T20040] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.070862][T20040] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.079929][T20040] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.240436][ T4634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2014.304681][ T4634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2014.337890][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2014.365218][ T5255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2014.380992][ T5255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2014.427436][T18901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2014.497954][T10861] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2014.839026][T10861] usb 9-1: Using ep0 maxpacket: 8 [ 2014.847933][T10861] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2014.862406][T10861] usb 9-1: config 179 has no interface number 0 [ 2014.874568][T10861] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2014.886324][T10861] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2014.904418][T10861] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2014.916308][T10861] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2014.928606][T10861] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2014.942299][T10861] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2014.951718][T10861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.976596][T20146] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2015.242967][T19135] usb 9-1: USB disconnect, device number 2 [ 2015.243009][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2015.258747][ C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 2038.731459][T18901] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2046.785184][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2046.791573][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2071.792053][ T5255] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2104.961921][T19698] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2112.470424][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2112.476911][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2131.109890][T13462] Bluetooth: hci3: command 0x0406 tx timeout [ 2136.583931][T13462] Bluetooth: hci1: command 0x0406 tx timeout [ 2138.022511][T19698] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2171.192373][T15495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2178.151915][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2178.158277][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2204.252900][T18205] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2237.313338][T15495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2243.834830][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2243.841195][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2270.483404][T15495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2303.543818][ T5255] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)