last executing test programs: 6.812680965s ago: executing program 2 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(0xffffffffffffffff) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 6.44442937s ago: executing program 2 (id=107): socket$kcm(0x1e, 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x2}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d"], 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) 3.529653582s ago: executing program 0 (id=125): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000180), 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}], 0x1}], 0x1, 0x40800) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.419551696s ago: executing program 4 (id=126): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = eventfd(0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) write(r1, &(0x7f00000001c0)="63b8c0443883cab0", 0x8) timer_delete(0x0) 3.262968793s ago: executing program 2 (id=130): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="66b9800000c00f326635000100000f300fc73766b9800000c00f326635000400000f30660f2f7c009aded21c000f380356960f011d66b9800000c00f326635010000000f3026d6dc08", 0x49}], 0x1, 0x34, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x8, 0x400200cc2, 0xffd, 0x8002, 0x6, 0x8000000000000, 0x400000, 0x20005, 0xfffffffffffffffe, 0x6f, 0x5], 0x8080000, 0x193844}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fchdir(0xffffffffffffffff) connect(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x20048051}, 0x0) 3.088520311s ago: executing program 0 (id=133): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fffffff}]}) 2.991756435s ago: executing program 2 (id=134): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x2a, &(0x7f0000000340)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.608532331s ago: executing program 3 (id=135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000001c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0xfffffffc, 0x0, 0x10, 0x0, 0x7, 0x83, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x5, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 2.186869048s ago: executing program 4 (id=136): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e22, 0x7f, @empty, 0xf8b}}, 0x6, 0x6}, 0x90) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @local}}}, 0x108) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xf8d, @empty, 0x4}}, 0x13fffffe, 0x5, 0x0, 0x2, 0x54, 0xfffffffd, 0x1b}, 0x9c) 2.119209841s ago: executing program 2 (id=138): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) close(0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 2.096494902s ago: executing program 0 (id=139): openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 1.90510026s ago: executing program 2 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4840) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0xf7, 0x4, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffed, 0x2a, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xca}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000180)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="6465636f646573206e6f6e650016ebd79f667a37426fe5de48d72003dd693ca31d610e5148d90cf3233a8fb1ba483209b043807e441711901ac57596aaf0270db3d2ab0cbc36ce76e32473be2637cb"], 0xd) syz_usb_control_io(r2, &(0x7f0000000000)={0x18, &(0x7f0000000300)={0x40, 0xd, 0x7, {0x7, 0x21, "940977459b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) 1.771331576s ago: executing program 3 (id=144): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a", 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) io_setup(0x9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3}, 0x90) 1.719798708s ago: executing program 3 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x84) 1.66803201s ago: executing program 1 (id=146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 1.632374952s ago: executing program 4 (id=147): unshare(0xc000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x8, 0x40, 0x3, 0x1, 0xfffffff8, 0x0, 0x0, 0x0, 0x100, 0x5}}, 0x50) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x1000084, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) 1.602767653s ago: executing program 3 (id=148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5be081cd2e", 0x5}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x5, 0x80000001, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa21, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xffe2, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4810150018001fff75"], 0x3}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff, 0x2, 0x0, 0x9, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x4000, 0x10000, 0xc, 0x0, 0x8, 0xc4, 0x1, 0xfe, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0xff, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x4, 0x43, 0x2, 0x0, 0x0, 0xff, 0x5, 0xff}, {0xeeef0000, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x100000, 0x6000, 0x10, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0xfd, 0x2}, {0x80a0000, 0x3}, {0x2}, 0xfdfcfffb, 0x0, 0x0, 0x100, 0x0, 0xf801, 0x0, [0x80000001, 0x7, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.498239227s ago: executing program 0 (id=149): pipe2$9p(0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2086dd0000000000ac141416e0885a049a179424", 0x0, 0x3000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.44449242s ago: executing program 4 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.4372029s ago: executing program 1 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x8, 0x0, &(0x7f00000006c0)='J'}, {0x0, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0xc, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x1000004, 0x0}, {0x1, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x2, 0x0}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.42279155s ago: executing program 3 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 1.329388644s ago: executing program 1 (id=153): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0a00, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) 1.076811265s ago: executing program 1 (id=154): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) 567.927896ms ago: executing program 0 (id=155): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xbcff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x54000}], 0x1) 488.127119ms ago: executing program 3 (id=156): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 487.876689ms ago: executing program 1 (id=157): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0x0, 0x5}, 0x0) pivot_root(&(0x7f00000000c0)='./file1\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) rename(0x0, &(0x7f0000000240)='./file1\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x2, 0x0, 0x4000010}, 0x10) 403.669293ms ago: executing program 1 (id=158): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e22, 0x7f, @empty, 0xf8b}}, 0x6, 0x6}, 0x90) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @local}}}, 0x108) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xf8d, @empty, 0x4}}, 0x13fffffe, 0x5, 0x0, 0x2, 0x54, 0xfffffffd, 0x1b}, 0x9c) 353.594555ms ago: executing program 4 (id=159): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) 7.51361ms ago: executing program 4 (id=160): openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 0s ago: executing program 0 (id=170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x111) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000cc0)=ANY=[], 0x678) fallocate(r3, 0x0, 0x1, 0x2000406) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. syzkaller login: [ 51.064133][ T4171] cgroup: Unknown subsys name 'net' [ 51.202509][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.409574][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.709978][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 53.816730][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 53.848646][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 53.901325][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 53.919313][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.926969][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.934781][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.945941][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.953088][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.961053][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.983956][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 54.051683][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.078966][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.086028][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.094680][ T4183] device bridge_slave_0 entered promiscuous mode [ 54.105893][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.115415][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.122853][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.130768][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.148488][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.155555][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.163393][ T4183] device bridge_slave_1 entered promiscuous mode [ 54.175843][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.183091][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.190805][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.228579][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.235628][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.243542][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.267920][ T4182] team0: Port device team_slave_0 added [ 54.275322][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.293133][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.300436][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.311525][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.325398][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.336183][ T4182] team0: Port device team_slave_1 added [ 54.350818][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.367723][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.374792][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.382614][ T4186] device bridge_slave_0 entered promiscuous mode [ 54.405129][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.414976][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.422073][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.448095][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.466155][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.473381][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.481557][ T4186] device bridge_slave_1 entered promiscuous mode [ 54.501732][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.508845][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.535298][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.548338][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.571646][ T4183] team0: Port device team_slave_0 added [ 54.586269][ T4185] team0: Port device team_slave_0 added [ 54.594222][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.612216][ T4183] team0: Port device team_slave_1 added [ 54.619752][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.634964][ T4185] team0: Port device team_slave_1 added [ 54.654758][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.700945][ T4184] team0: Port device team_slave_0 added [ 54.720214][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.728484][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.754729][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.774907][ T4184] team0: Port device team_slave_1 added [ 54.783142][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.790078][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.797744][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.804684][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.831336][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.843239][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.850479][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.876702][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.889975][ T4186] team0: Port device team_slave_0 added [ 54.913450][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.920657][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.947168][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.963028][ T4186] team0: Port device team_slave_1 added [ 54.977429][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.984412][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.011056][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.023260][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.030288][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.056302][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.086018][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.093806][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.119832][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.147240][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.154198][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.180278][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.242278][ T4183] device hsr_slave_0 entered promiscuous mode [ 55.250053][ T4183] device hsr_slave_1 entered promiscuous mode [ 55.256691][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.264697][ T4183] Cannot create hsr debugfs directory [ 55.279709][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.286280][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.292926][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.300501][ T4185] Cannot create hsr debugfs directory [ 55.308757][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.318665][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.325550][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.333212][ T4184] Cannot create hsr debugfs directory [ 55.384465][ T4186] device hsr_slave_0 entered promiscuous mode [ 55.391678][ T4186] device hsr_slave_1 entered promiscuous mode [ 55.398755][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.407201][ T4186] Cannot create hsr debugfs directory [ 55.467734][ T3520] Bluetooth: hci4: command 0x0409 tx timeout [ 55.476732][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 55.487363][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 55.493582][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 55.506987][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 55.667932][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.697378][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.715602][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.737548][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.755020][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.777432][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.806088][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.817198][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.829184][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.840561][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.862431][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.887847][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.945552][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.980635][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.989225][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.999095][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.014235][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.041316][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.051125][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.073499][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.103271][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.113301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.129054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.138893][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.146198][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.177210][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.186452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.195313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.205595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.214612][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.221693][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.230458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.240546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.250215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.259314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.284924][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.292889][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.302453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.319261][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.343879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.353052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.361634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.373389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.382267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.391154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.401356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.409497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.423141][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.433911][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.444825][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.468932][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.478703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.488246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.498832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.507671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.515979][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.523064][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.541604][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.564524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.574008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.584273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.595279][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.602514][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.611300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.620238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.628702][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.635749][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.644132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.677438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.697158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.705535][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.712650][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.723073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.737704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.747599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.756131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.765226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.774785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.783892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.792832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.803690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.812788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.821927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.831146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.848172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.857296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.865514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.874066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.888410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.896254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.912217][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.925616][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.951468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.962378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.977726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.985489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.999922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.008644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.021778][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.031249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.045097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.075155][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.090824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.107315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.116055][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.123217][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.131761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.140707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.150753][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.157879][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.166186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.175867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.204236][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.214717][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.226170][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.237302][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.264739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.290131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.300730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.313376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.322474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.331514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.345340][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.359314][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.369835][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.382251][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.397336][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.421930][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.454945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.464277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.479836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.491809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.520546][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.530049][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.538883][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.546216][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.554459][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 57.559965][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.561561][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 57.571721][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.576174][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 57.586435][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.589495][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 57.595953][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.602375][ T4260] Bluetooth: hci4: command 0x041b tx timeout [ 57.617187][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.632383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.641962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.651130][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.694904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.707641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.716332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.729285][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.743001][ T4183] device veth0_vlan entered promiscuous mode [ 57.757058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.765597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.777015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.785927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.795565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.804501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.838497][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.846273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.854813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.864870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.875590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.883560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.891716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.900724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.909093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.917671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.925886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.933818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.941561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.951209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.966008][ T4182] device veth0_vlan entered promiscuous mode [ 57.981914][ T4182] device veth1_vlan entered promiscuous mode [ 57.994895][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.006534][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.019875][ T4183] device veth1_vlan entered promiscuous mode [ 58.031688][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.040080][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.057942][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.067614][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.087075][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.095027][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.146398][ T4186] device veth0_vlan entered promiscuous mode [ 58.162611][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.173071][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.191628][ T4184] device veth0_vlan entered promiscuous mode [ 58.212279][ T4186] device veth1_vlan entered promiscuous mode [ 58.224932][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.234030][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.243181][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.252488][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.261312][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.270706][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.279346][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.291465][ T4183] device veth0_macvtap entered promiscuous mode [ 58.302917][ T4184] device veth1_vlan entered promiscuous mode [ 58.328419][ T4183] device veth1_macvtap entered promiscuous mode [ 58.337482][ T4182] device veth0_macvtap entered promiscuous mode [ 58.351764][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.360215][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.368809][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.377079][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.384912][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.394001][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.403016][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.411868][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.424584][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.435747][ T4182] device veth1_macvtap entered promiscuous mode [ 58.447891][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.460676][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.469085][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.478676][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.487168][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.495671][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.524417][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.536207][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.547463][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.557579][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.576334][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.590896][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.602731][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.611487][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.620219][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.630287][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.639148][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.648191][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.656775][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.665357][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.674868][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.685257][ T4186] device veth0_macvtap entered promiscuous mode [ 58.711954][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.721429][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.731677][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.740765][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.757186][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.765896][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.775562][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.785111][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.797453][ T4186] device veth1_macvtap entered promiscuous mode [ 58.814525][ T4184] device veth0_macvtap entered promiscuous mode [ 58.823827][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.833895][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.842902][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.852403][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.861949][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.870970][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.880308][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.925473][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.934894][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.945012][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.953161][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.962854][ T4184] device veth1_macvtap entered promiscuous mode [ 58.978378][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.989974][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.000251][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.010775][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.021727][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.035004][ T4185] device veth0_vlan entered promiscuous mode [ 59.061330][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.071666][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.083703][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.100336][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.110636][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.121339][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.132330][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.149588][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.162202][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.172191][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.182818][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.192732][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.203308][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.214602][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.224733][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.236624][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.246453][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.257009][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.268164][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.278718][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.289487][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.300745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.313551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.322399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.331517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.340742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.349450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.360527][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.370068][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.380058][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.389788][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.412730][ T4185] device veth1_vlan entered promiscuous mode [ 59.423300][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.432311][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.441909][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.450931][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.535307][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.549116][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.556139][ T4185] device veth0_macvtap entered promiscuous mode [ 59.569534][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.579424][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.596744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.607422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.615494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.623728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.633571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.637126][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 59.642810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.653231][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 59.661535][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 59.663364][ T4185] device veth1_macvtap entered promiscuous mode [ 59.668036][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 59.690958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.691391][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.700350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.715887][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 59.725715][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.737310][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.748727][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.750686][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.759605][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.776865][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.787872][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.797982][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.808718][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.819827][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.838269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.846322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.855431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.873826][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.890991][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.901176][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.911939][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.922144][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.933608][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.944155][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.955889][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.973439][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.987703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.999267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.019918][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.032166][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.042968][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.053504][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.055817][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.065172][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.094481][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.118766][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.132987][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.144593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.233720][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.247960][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.264315][ T760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.294065][ T760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.304308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.328623][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.341873][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.360558][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.369482][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.384712][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.399815][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.413673][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.448885][ T760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.482235][ T760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.521923][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.720311][ T4317] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 61.158389][ T760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.172792][ T760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.341664][ T4328] loop2: detected capacity change from 0 to 512 [ 61.653207][ T4334] loop4: detected capacity change from 0 to 2048 [ 61.717613][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 61.729310][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 61.762086][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 61.805314][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 61.853378][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 61.880812][ T4334] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 62.141292][ T4345] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.157826][ T4345] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 62.170456][ T4345] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.170456][ T4345] [ 62.180165][ T4345] EXT4-fs (loop4): Total free blocks count 0 [ 62.186168][ T4345] EXT4-fs (loop4): Free/Dirty block details [ 62.192152][ T4345] EXT4-fs (loop4): free_blocks=2415919504 [ 62.197975][ T4345] EXT4-fs (loop4): dirty_blocks=336 [ 62.203227][ T4345] EXT4-fs (loop4): Block reservation details [ 62.209262][ T4345] EXT4-fs (loop4): i_reserved_data_blocks=21 [ 62.568499][ T760] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 320 with max blocks 926 with error 28 [ 62.581772][ T760] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.581772][ T760] [ 62.730976][ T4349] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.811389][ T4352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 63.370631][ T4371] tipc: Failed to remove unknown binding: 66,1,1/0:1833813118/1833813120 [ 63.392807][ T4371] tipc: Failed to remove unknown binding: 66,1,1/0:1833813118/1833813120 [ 63.416926][ T4371] tipc: Failed to remove unknown binding: 66,1,1/0:1833813118/1833813120 [ 63.816169][ T4393] netlink: 'syz.2.34': attribute type 10 has an invalid length. [ 63.903258][ T4393] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 64.623919][ T4390] loop4: detected capacity change from 0 to 32768 [ 64.854470][ T4192] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.941396][ T4390] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.33 (4390) [ 65.037154][ T4390] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 65.057133][ T4390] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 65.068677][ T4390] BTRFS info (device loop4): use zstd compression, level 3 [ 65.077226][ T4390] BTRFS info (device loop4): using free space tree [ 65.084319][ T4390] BTRFS info (device loop4): has skinny extents [ 65.146990][ T4190] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.186631][ T4192] usb 2-1: Using ep0 maxpacket: 16 [ 65.274875][ T4390] BTRFS info (device loop4): enabling ssd optimizations [ 65.317273][ T4192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 65.345314][ T4421] loop0: detected capacity change from 0 to 2048 [ 65.398503][ T4421] ======================================================= [ 65.398503][ T4421] WARNING: The mand mount option has been deprecated and [ 65.398503][ T4421] and is ignored by this kernel. Remove the mand [ 65.398503][ T4421] option from the mount to silence this warning. [ 65.398503][ T4421] ======================================================= [ 65.536965][ T4192] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 65.546958][ T4421] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 65.551660][ T4192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.575792][ T4192] usb 2-1: Product: syz [ 65.580496][ T4190] usb 3-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 65.597968][ T4192] usb 2-1: Manufacturer: syz [ 65.602782][ T4190] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.625587][ T4192] usb 2-1: SerialNumber: syz [ 65.641993][ T4421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.670154][ T4192] usb 2-1: config 0 descriptor?? [ 65.736790][ T4190] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.745872][ T4190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.759158][ T4192] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 65.770932][ T4192] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 65.777462][ T4190] usb 3-1: SerialNumber: syz [ 65.959150][ T4435] loop3: detected capacity change from 0 to 4096 [ 66.017663][ T4435] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 66.022420][ T4438] loop2: detected capacity change from 0 to 7 [ 66.062507][ T4190] usb 3-1: 0:2 : does not exist [ 66.077252][ T4202] Dev loop2: unable to read RDB block 7 [ 66.106154][ T4202] loop2: unable to read partition table [ 66.131017][ T4202] loop2: partition table beyond EOD, truncated [ 66.188600][ T4435] EXT4-fs (loop3): Test dummy encryption mode enabled [ 66.195715][ T4438] Dev loop2: unable to read RDB block 7 [ 66.209254][ T4438] loop2: unable to read partition table [ 66.215247][ T4435] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 66.236754][ T4438] loop2: partition table beyond EOD, truncated [ 66.244084][ T4438] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 66.296962][ T4190] usb 3-1: 5:0: cannot get min/max values for control 7 (id 5) [ 66.322857][ T3560] Dev loop2: unable to read RDB block 7 [ 66.352299][ T3560] loop2: unable to read partition table [ 66.369431][ T3560] loop2: partition table beyond EOD, truncated [ 66.375598][ T4192] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 66.406191][ T4190] usb 3-1: USB disconnect, device number 2 [ 66.524159][ T4460] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 66.648499][ T4469] loop3: detected capacity change from 0 to 8 [ 66.698327][ T4197] udevd[4197]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.740259][ T4471] kvm: emulating exchange as write [ 66.823375][ T4469] SQUASHFS error: lzo decompression failed, data probably corrupt [ 66.866644][ T4469] SQUASHFS error: Failed to read block 0x91: -5 [ 66.874264][ T4469] SQUASHFS error: Unable to read metadata cache entry [8f] [ 66.902749][ T4469] SQUASHFS error: Unable to read inode 0x11f [ 67.054705][ T4469] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 67.116868][ T4192] em28xx 2-1:0.0: board has no eeprom [ 67.149295][ T4476] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 67.436738][ T4192] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 67.448247][ T4192] em28xx 2-1:0.0: dvb set to bulk mode. [ 67.467783][ T4478] device syzkaller1 entered promiscuous mode [ 67.527238][ T4192] usb 2-1: USB disconnect, device number 2 [ 67.540727][ T4480] netlink: 96 bytes leftover after parsing attributes in process `syz.3.52'. [ 67.564904][ T4192] em28xx 2-1:0.0: Disconnecting em28xx [ 67.595516][ T4445] em28xx 2-1:0.0: Binding DVB extension [ 67.751902][ T4445] em28xx 2-1:0.0: Registering input extension [ 67.762845][ T4192] em28xx 2-1:0.0: Closing input extension [ 67.846683][ T4192] em28xx 2-1:0.0: Freeing device [ 67.873503][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 67.985607][ T4494] loop3: detected capacity change from 0 to 128 [ 68.524726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.533889][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.542966][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.552071][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.561187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.570238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.579340][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.588424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 68.597632][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 68.606901][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.464804][ T4505] loop2: detected capacity change from 0 to 32768 [ 69.583434][ T4505] JBD2: Ignoring recovery information on journal [ 69.658354][ T4521] loop4: detected capacity change from 0 to 128 [ 69.762994][ T4521] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.782488][ T4521] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.811592][ T4505] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 69.861520][ T4497] loop0: detected capacity change from 0 to 32768 [ 69.951709][ T4497] (syz.0.59,4497,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 70.007353][ T4497] (syz.0.59,4497,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 70.075395][ T4497] (syz.0.59,4497,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 70.128939][ T4497] JBD2: Ignoring recovery information on journal [ 70.156915][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.166103][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.235696][ T4497] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 70.273339][ T4505] (syz.2.61,4505,0):ocfs2_rename:1687 ERROR: status = -39 [ 70.413186][ T4497] (syz.0.59,4497,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "0x0000000000000000)tQ? hB΁F*r [ 70.413186][ T4497] $5\]`. HID v0.00 Device [syz1] on syz0 [ 83.746853][ T4445] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.009002][ T4445] usb 4-1: Using ep0 maxpacket: 32 [ 84.021875][ T4822] loop0: detected capacity change from 0 to 512 [ 84.046134][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.047040][ T4822] EXT4-fs (loop0): Ignoring removed bh option [ 84.061913][ T4767] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 84.079890][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.092937][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.098116][ T13] sony 0003:054C:09CC.0002: hidraw0: USB HID vff.ed Device [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 84.113077][ T13] sony 0003:054C:09CC.0002: failed to claim input [ 84.154535][ T4822] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 84.175664][ T4825] device syzkaller0 entered promiscuous mode [ 84.192618][ T4822] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.302524][ T13] usb 3-1: USB disconnect, device number 4 [ 84.317898][ T4822] [ 84.320249][ T4822] ====================================================== [ 84.327245][ T4822] WARNING: possible circular locking dependency detected [ 84.334309][ T4822] syzkaller #0 Not tainted [ 84.338704][ T4822] ------------------------------------------------------ [ 84.345699][ T4822] syz.0.170/4822 is trying to acquire lock: [ 84.351576][ T4822] ffff8880615660a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 84.360443][ T4822] [ 84.360443][ T4822] but task is already holding lock: [ 84.367812][ T4822] ffff888061523e48 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 84.376937][ T4822] [ 84.376937][ T4822] which lock already depends on the new lock. [ 84.376937][ T4822] [ 84.387324][ T4822] [ 84.387324][ T4822] the existing dependency chain (in reverse order) is: [ 84.396321][ T4822] [ 84.396321][ T4822] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 84.403944][ T4822] down_write+0x38/0x60 [ 84.408606][ T4822] ext4_truncate+0x96d/0x10d0 [ 84.413784][ T4822] ext4_setattr+0xffe/0x19e0 [ 84.418879][ T4822] notify_change+0xbcd/0xee0 [ 84.423973][ T4822] do_truncate+0x197/0x220 [ 84.428901][ T4822] do_sys_ftruncate+0x31b/0x3d0 [ 84.434278][ T4822] do_syscall_64+0x4c/0xa0 [ 84.439197][ T4822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.445590][ T4822] [ 84.445590][ T4822] -> #4 (jbd2_handle){++++}-{0:0}: [ 84.452858][ T4822] start_this_handle+0x1338/0x15a0 [ 84.458474][ T4822] jbd2__journal_start+0x2b7/0x5a0 [ 84.464085][ T4822] jbd2_journal_start+0x26/0x30 [ 84.469435][ T4822] ocfs2_start_trans+0x374/0x6c0 [ 84.474873][ T4822] ocfs2_mknod+0xe2f/0x22b0 [ 84.479878][ T4822] ocfs2_mkdir+0x192/0x410 [ 84.484802][ T4822] vfs_mkdir+0x387/0x570 [ 84.489552][ T4822] do_mkdirat+0x1d7/0x5a0 [ 84.494385][ T4822] __x64_sys_mkdirat+0x85/0x90 [ 84.499650][ T4822] do_syscall_64+0x4c/0xa0 [ 84.504572][ T4822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.510973][ T4822] [ 84.510973][ T4822] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 84.519549][ T4822] down_read+0x44/0x2e0 [ 84.524250][ T4822] ocfs2_start_trans+0x368/0x6c0 [ 84.529694][ T4822] ocfs2_mknod+0xe2f/0x22b0 [ 84.534699][ T4822] ocfs2_mkdir+0x192/0x410 [ 84.539615][ T4822] vfs_mkdir+0x387/0x570 [ 84.544374][ T4822] do_mkdirat+0x1d7/0x5a0 [ 84.549205][ T4822] __x64_sys_mkdirat+0x85/0x90 [ 84.554470][ T4822] do_syscall_64+0x4c/0xa0 [ 84.559557][ T4822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.565972][ T4822] [ 84.565972][ T4822] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 84.573422][ T4822] ocfs2_start_trans+0x269/0x6c0 [ 84.578868][ T4822] ocfs2_acquire_dquot+0x677/0xaf0 [ 84.584489][ T4822] dqget+0x778/0xeb0 [ 84.588902][ T4822] __dquot_initialize+0x3b6/0xcb0 [ 84.594430][ T4822] ocfs2_get_init_inode+0x138/0x1b0 [ 84.600127][ T4822] ocfs2_mknod+0x8aa/0x22b0 [ 84.605125][ T4822] ocfs2_create+0x192/0x410 [ 84.610130][ T4822] path_openat+0x11e1/0x2f30 [ 84.615239][ T4822] do_filp_open+0x1b3/0x3e0 [ 84.620243][ T4822] do_sys_openat2+0x142/0x4a0 [ 84.625425][ T4822] __x64_sys_open+0x11b/0x140 [ 84.630607][ T4822] do_syscall_64+0x4c/0xa0 [ 84.635525][ T4822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.641927][ T4822] [ 84.641927][ T4822] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 84.650784][ T4822] down_write+0x38/0x60 [ 84.655441][ T4822] ocfs2_create_local_dquot+0x194/0x1750 [ 84.661578][ T4822] ocfs2_acquire_dquot+0x7cb/0xaf0 [ 84.667189][ T4822] dqget+0x778/0xeb0 [ 84.671591][ T4822] __dquot_initialize+0x3b6/0xcb0 [ 84.677111][ T4822] ocfs2_get_init_inode+0x138/0x1b0 [ 84.682811][ T4822] ocfs2_mknod+0x8aa/0x22b0 [ 84.687813][ T4822] ocfs2_create+0x192/0x410 [ 84.692809][ T4822] path_openat+0x11e1/0x2f30 [ 84.697902][ T4822] do_filp_open+0x1b3/0x3e0 [ 84.702903][ T4822] do_sys_openat2+0x142/0x4a0 [ 84.708082][ T4822] __x64_sys_open+0x11b/0x140 [ 84.713261][ T4822] do_syscall_64+0x4c/0xa0 [ 84.718174][ T4822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.724565][ T4822] [ 84.724565][ T4822] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 84.732193][ T4822] __lock_acquire+0x2c33/0x7c60 [ 84.737547][ T4822] lock_acquire+0x197/0x3f0 [ 84.742550][ T4822] __mutex_lock_common+0x1eb/0x2390 [ 84.748253][ T4822] mutex_lock_nested+0x17/0x20 [ 84.753518][ T4822] dquot_commit+0x5a/0x410 [ 84.758437][ T4822] ext4_write_dquot+0x1f0/0x360 [ 84.763793][ T4822] mark_all_dquot_dirty+0xf9/0x400 [ 84.769404][ T4822] __dquot_free_space+0x7ca/0xb90 [ 84.774924][ T4822] ext4_free_blocks+0x1af5/0x2480 [ 84.780452][ T4822] ext4_ext_remove_space+0x1eaa/0x43a0 [ 84.786406][ T4822] ext4_ext_truncate+0x192/0x240 [ 84.791839][ T4822] ext4_truncate+0x9f1/0x10d0 [ 84.797017][ T4822] ext4_setattr+0xffe/0x19e0 [ 84.802102][ T4822] notify_change+0xbcd/0xee0 [ 84.807198][ T4822] do_truncate+0x197/0x220 [ 84.812115][ T4822] path_openat+0x28af/0x2f30 [ 84.817220][ T4822] do_filp_open+0x1b3/0x3e0 [ 84.822218][ T4822] do_sys_openat2+0x142/0x4a0 [ 84.827394][ T4822] __x64_sys_openat+0x135/0x160 [ 84.832750][ T4822] do_syscall_64+0x4c/0xa0 [ 84.837662][ T4822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.844055][ T4822] [ 84.844055][ T4822] other info that might help us debug this: [ 84.844055][ T4822] [ 84.854264][ T4822] Chain exists of: [ 84.854264][ T4822] &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem [ 84.854264][ T4822] [ 84.866921][ T4822] Possible unsafe locking scenario: [ 84.866921][ T4822] [ 84.874348][ T4822] CPU0 CPU1 [ 84.879688][ T4822] ---- ---- [ 84.885035][ T4822] lock(&ei->i_data_sem); [ 84.889429][ T4822] lock(jbd2_handle); [ 84.895998][ T4822] lock(&ei->i_data_sem); [ 84.902911][ T4822] lock(&dquot->dq_lock); [ 84.907330][ T4822] [ 84.907330][ T4822] *** DEADLOCK *** [ 84.907330][ T4822] [ 84.915461][ T4822] 5 locks held by syz.0.170/4822: [ 84.920462][ T4822] #0: ffff88801ff12460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 84.929674][ T4822] #1: ffff888061523fc0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x183/0x220 [ 84.939924][ T4822] #2: ffff888061524160 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xdb6/0x19e0 [ 84.950112][ T4822] #3: ffff888061523e48 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 84.959668][ T4822] #4: ffffffff8c23f118 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 84.968692][ T4822] [ 84.968692][ T4822] stack backtrace: [ 84.974563][ T4822] CPU: 0 PID: 4822 Comm: syz.0.170 Not tainted syzkaller #0 [ 84.981821][ T4822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.991866][ T4822] Call Trace: [ 84.995128][ T4822] [ 84.998036][ T4822] dump_stack_lvl+0x168/0x230 [ 85.002697][ T4822] ? load_image+0x3b0/0x3b0 [ 85.007177][ T4822] ? show_regs_print_info+0x20/0x20 [ 85.012364][ T4822] ? print_circular_bug+0x12b/0x1a0 [ 85.017558][ T4822] check_noncircular+0x274/0x310 [ 85.022496][ T4822] ? add_chain_block+0x940/0x940 [ 85.027433][ T4822] ? lockdep_lock+0xdc/0x1e0 [ 85.032003][ T4822] ? __lock_acquire+0x12d9/0x7c60 [ 85.037008][ T4822] ? mark_lock+0x94/0x320 [ 85.041327][ T4822] ? mark_lock+0x94/0x320 [ 85.045637][ T4822] __lock_acquire+0x2c33/0x7c60 [ 85.050471][ T4822] ? hlock_conflict+0x59/0x1f0 [ 85.055212][ T4822] ? check_path+0x40/0x40 [ 85.059522][ T4822] ? verify_lock_unused+0x140/0x140 [ 85.064699][ T4822] ? check_path+0x21/0x40 [ 85.069004][ T4822] ? check_noncircular+0x16f/0x310 [ 85.074094][ T4822] ? add_chain_block+0x940/0x940 [ 85.079004][ T4822] ? lockdep_lock+0xdc/0x1e0 [ 85.083573][ T4822] ? lockdep_unlock+0x134/0x2d0 [ 85.088399][ T4822] ? lockdep_lock+0x1e0/0x1e0 [ 85.093059][ T4822] lock_acquire+0x197/0x3f0 [ 85.097542][ T4822] ? dquot_commit+0x5a/0x410 [ 85.102162][ T4822] ? __might_sleep+0xf0/0xf0 [ 85.106735][ T4822] ? read_lock_is_recursive+0x10/0x10 [ 85.112090][ T4822] ? dquot_commit+0x5a/0x410 [ 85.116664][ T4822] __mutex_lock_common+0x1eb/0x2390 [ 85.121861][ T4822] ? dquot_commit+0x5a/0x410 [ 85.126431][ T4822] ? __might_sleep+0xf0/0xf0 [ 85.130994][ T4822] ? mutex_lock_io_nested+0x60/0x60 [ 85.136173][ T4822] mutex_lock_nested+0x17/0x20 [ 85.140912][ T4822] dquot_commit+0x5a/0x410 [ 85.145322][ T4822] ? __ext4_journal_start_sb+0x1bd/0x360 [ 85.150940][ T4822] ext4_write_dquot+0x1f0/0x360 [ 85.155776][ T4822] mark_all_dquot_dirty+0xf9/0x400 [ 85.160869][ T4822] __dquot_free_space+0x7ca/0xb90 [ 85.165876][ T4822] ext4_free_blocks+0x1af5/0x2480 [ 85.170888][ T4822] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 85.178236][ T4822] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 85.184287][ T4822] ? ext4_inode_journal_mode+0x18f/0x460 [ 85.189898][ T4822] ext4_ext_remove_space+0x1eaa/0x43a0 [ 85.195341][ T4822] ? rcu_is_watching+0x11/0xa0 [ 85.200088][ T4822] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 85.205872][ T4822] ? ext4_es_remove_extent+0x24f/0x3e0 [ 85.211322][ T4822] ext4_ext_truncate+0x192/0x240 [ 85.216238][ T4822] ext4_truncate+0x9f1/0x10d0 [ 85.220890][ T4822] ? clear_nonspinnable+0x60/0x60 [ 85.225889][ T4822] ? preempt_count_add+0x8d/0x190 [ 85.230891][ T4822] ? up_write+0x1bb/0x420 [ 85.235209][ T4822] ? __ext4_mark_inode_dirty+0x700/0x700 [ 85.240824][ T4822] ext4_setattr+0xffe/0x19e0 [ 85.245400][ T4822] ? ext4_write_inode+0x5f0/0x5f0 [ 85.250410][ T4822] notify_change+0xbcd/0xee0 [ 85.254985][ T4822] do_truncate+0x197/0x220 [ 85.259377][ T4822] ? aa_get_task_label+0x21c/0x2c0 [ 85.264493][ T4822] ? rcu_lock_release+0x20/0x20 [ 85.269327][ T4822] ? ima_bprm_check+0x1f0/0x1f0 [ 85.274173][ T4822] ? bpf_lsm_path_truncate+0x5/0x10 [ 85.279365][ T4822] path_openat+0x28af/0x2f30 [ 85.283959][ T4822] ? do_filp_open+0x3e0/0x3e0 [ 85.288648][ T4822] do_filp_open+0x1b3/0x3e0 [ 85.293148][ T4822] ? vfs_tmpfile+0x300/0x300 [ 85.297728][ T4822] ? _raw_spin_unlock+0x24/0x40 [ 85.302559][ T4822] ? alloc_fd+0x598/0x630 [ 85.306876][ T4822] do_sys_openat2+0x142/0x4a0 [ 85.311558][ T4822] ? __lock_acquire+0x7c60/0x7c60 [ 85.316595][ T4822] ? do_sys_open+0xe0/0xe0 [ 85.321004][ T4822] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 85.326976][ T4822] ? lock_chain_count+0x20/0x20 [ 85.331810][ T4822] ? vtime_user_exit+0x2dc/0x400 [ 85.336737][ T4822] __x64_sys_openat+0x135/0x160 [ 85.341577][ T4822] do_syscall_64+0x4c/0xa0 [ 85.345979][ T4822] ? clear_bhb_loop+0x30/0x80 [ 85.350639][ T4822] ? clear_bhb_loop+0x30/0x80 [ 85.355298][ T4822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.361183][ T4822] RIP: 0033:0x7f9b557fc749 [ 85.365583][ T4822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.385171][ T4822] RSP: 002b:00007f9b53a63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.393567][ T4822] RAX: ffffffffffffffda RBX: 00007f9b55a52fa0 RCX: 00007f9b557fc749 [ 85.401520][ T4822] RDX: 0000000000181242 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 85.409474][ T4822] RBP: 00007f9b55880f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.417427][ T4822] R10: 0000000000000148 R11: 0000000000000246 R12: 0000000000000000 [ 85.425383][ T4822] R13: 00007f9b55a53038 R14: 00007f9b55a52fa0 R15: 00007ffdcf7d90f8 [ 85.433346][ T4822] [ 85.476861][ T4445] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 85.488458][ T4445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.501206][ T4445] usb 4-1: Product: syz [ 85.505459][ T4445] usb 4-1: Manufacturer: syz [ 85.510479][ T4445] usb 4-1: SerialNumber: syz [ 85.516966][ T4445] usb 4-1: config 0 descriptor?? [ 85.577995][ T4445] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 87.966650][ T4445] gspca_stk1135: reg_w 0x2ff err -71 [ 87.973006][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 87.979503][ T4445] gspca_stk1135: Sensor write failed [ 87.984796][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 87.991164][ T4445] gspca_stk1135: Sensor write failed [ 87.996456][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 88.002822][ T4445] gspca_stk1135: Sensor read failed [ 88.008060][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 88.014596][ T4445] gspca_stk1135: Sensor read failed [ 88.019828][ T4445] gspca_stk1135: Detected sensor type unknown (0x0) [ 88.026421][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 88.033045][ T4445] gspca_stk1135: Sensor read failed [ 88.038290][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 88.044611][ T4445] gspca_stk1135: Sensor read failed [ 88.049885][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 88.056214][ T4445] gspca_stk1135: Sensor write failed [ 88.061540][ T4445] gspca_stk1135: serial bus timeout: status=0x00 [ 88.067875][ T4445] gspca_stk1135: Sensor write failed [ 88.073166][ T4445] stk1135: probe of 4-1:0.0 failed with error -71 [ 88.080969][ T4445] usb 4-1: USB disconnect, device number 2