last executing test programs: 1m41.353350822s ago: executing program 3 (id=105): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) 1m40.417753998s ago: executing program 3 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="757466383d302c726f6469722c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c646f733178666c6f7070792c73686f72746e616d653d6d697865642c636f6465706167653d3835322c696f636861727365743d6370313235312c756e695f786c6174653d302c757365667265652c757466383d302c756e695f786c6174653d312c757466383d302c757466383d302c000c92a2ebb3078016143217a27fa76dd70e0a48a1d34f4dedd5a451c3f5becc47efeb79d7e4a6996c3f6e4da63ffdaf683cf16f36033754820b4773355653d56d2cef62b755e2dbf6b7eab87571d21d926f57f789e17ad85e267c649cb763c329b273111303c55dab9bafe4496b6792309b30c4462d6f87fd3620a37a2e5f15f4f0cfcfa913aa93097e252a9e95915782bf8d654d4d8d1afad25f05461d6d7670d85f539a5d92c325cf85efe646350d61f4cf9619e5a7ec197556b6696cbbeb6ddaebec7105b4a6791a2d20f26323880aa90aafcc083fe9f292a8eb6041b63e50725a4e1c32ce10"], 0x1, 0x355, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x2, 0x1, 0x102, 0x0, 0x3}}) flistxattr(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) 1m33.449697998s ago: executing program 3 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000005080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2a00000005000800020400000400000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) 1m30.387539742s ago: executing program 3 (id=141): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f00000034c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='gid', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x41) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800c000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 1m29.298696042s ago: executing program 3 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 1m27.973851498s ago: executing program 3 (id=150): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}, {0x6bd5, 0x2a, 0x9, 0xa}, {0x600, 0x0, 0xf8, 0x5}, {0x0, 0x2, 0x14, 0x4529}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m27.221036798s ago: executing program 32 (id=150): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}, {0x6bd5, 0x2a, 0x9, 0xa}, {0x600, 0x0, 0xf8, 0x5}, {0x0, 0x2, 0x14, 0x4529}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.198139655s ago: executing program 5 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f0000000340), 0x4001) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0xa, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}], "0639"}}}}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c80), 0x400000000000294, 0x2101, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x2000, 0x6) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1fd, &(0x7f0000000bc0)="$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") sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x20, 0xfffffffe, 0x800000, 0x400000040000001e, 0x3, 0xfffffffffffffffa, 0x5, 0xfffffffe}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa7482fd, 0x8, 0x25dfdc00, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x2a00}, [@RTA_NH_ID={0x14, 0x1e, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1e, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4a044}, 0x80) 13.296925546s ago: executing program 5 (id=364): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085a30000860000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x4, 0x4, 0xc, 0xb}, {0x2, 0x2, 0x4, 0x3}], 0x10, 0x1000}, 0x94) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect$midi(0x6, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x48000) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x105000, 0x53) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x100, 0x80000000, 0x2, 0x400, 0xe, 0x800001, 0x75d, 0x3, 0x2, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x10000b, 0xfd, 0x5, 0x7c, 0xfffffffe, 0x40000003, 0x1, 0x10, 0x0, 0x0, 0x0, 0xe66, 0x3, 0x8, 0x8, 0x0, 0x1]}) ioctl$COMEDI_DEVINFO(r5, 0x80b06401, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000280)={0x0, 'veth1_vlan\x00', 0x2}, 0x18) syz_open_dev$evdev(0x0, 0x40, 0x8880) 11.953971053s ago: executing program 4 (id=367): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040041) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="2a7d705f72aaf66e879fb51a28766f37fd261016e3f629f6e3ac74fa3b7d3b0b9a5bfc4a0c2786e456e469abc7"], 0x134}, 0x1, 0x0, 0x0, 0x805}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000000)={0x7d, 0x0, 0x1, 0x4, 0x2, "947259d8b340c68d00935f8ef624964bfdabf4", 0x4, 0x6}) ioctl$TCXONC(r5, 0x540a, 0x3) setsockopt$inet6_int(r3, 0x29, 0x18, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000004640)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0x7, 0x4, [@remote]}, @lsrr={0x83, 0x3, 0xad}]}}}], 0x38}}], 0x2, 0x4000800) r9 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r9, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x2000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x1170, 0x1170, 0x128, 0x1170, 0x280, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_vlan\x00', {}, {}, 0x2e}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0xa}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x7fff}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 11.3460846s ago: executing program 4 (id=368): socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x4, 0x0, 0x0) acct(0x0) socket(0x23, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4, 0x0, 0x0, 0x1d}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x10}, {0x0, 0x3}, {0x0, 0x40}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xb5}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x8, 0x0, 0xfffffffc}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c62d008500000082000000bf91000000000000b7020000000000008500000084000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000000), &(0x7f0000000b40), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020) inotify_init1(0x800) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x229) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0xb, 0x0, &(0x7f0000000800)="17724b568c149730350c35", 0x0, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.300773776s ago: executing program 4 (id=372): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0xa, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}], "0639"}}}}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c80), 0x400000000000294, 0x2101, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x2000, 0x6) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1fd, &(0x7f0000000bc0)="$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") sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x20, 0xfffffffe, 0x800000, 0x400000040000001e, 0x3, 0xfffffffffffffffa, 0x5, 0xfffffffe}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa7482fd, 0x8, 0x25dfdc00, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x2a00}, [@RTA_NH_ID={0x14, 0x1e, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1e, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4a044}, 0x80) 7.849720006s ago: executing program 1 (id=375): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040)=0xff, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001e00010028bd7000fbdbdf25ac1e0101000000000000000000000000000004d402003300ac1414aa000000000000000000e2b400000000000000000008000b000500"], 0x48}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000) unshare(0x28000600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r1, 0x0, 0x5) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r4, &(0x7f0000000240), &(0x7f0000000080)=@tcp, 0x1000000}, 0x20) fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) 6.829813974s ago: executing program 1 (id=378): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.341221356s ago: executing program 2 (id=379): r0 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r1, 0x9, 0x2, "6ebd"}, 0xa) 6.340807876s ago: executing program 5 (id=380): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f000000b200)=[{{&(0x7f0000000040)={0xa, 0xfa04, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000001880)="96", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0xffffffdb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)="08cb63", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 6.340231716s ago: executing program 4 (id=381): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000050, &(0x7f0000000180)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@jqfmt_vfsv0}, {@resgid}, {@mblk_io_submit}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@quota}]}, 0x10, 0x4e0, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 6.169114772s ago: executing program 2 (id=382): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x80000) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x80800) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.069220454s ago: executing program 5 (id=383): setresuid(0xee00, 0xee01, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000000)="dc9a245ad500a9d948f8bc4f7d041ad0f8e0395bf22b007bdc9df3d3ea2958fe445951d64031d560", 0x28, 0xfffffffffffffffd) 5.949866547s ago: executing program 1 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 5.942004007s ago: executing program 0 (id=385): r0 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x881) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 5.795492821s ago: executing program 5 (id=386): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x4000040) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) bind$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xd, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 5.608782647s ago: executing program 2 (id=387): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000180)={0x4, 0x0}) 5.608600737s ago: executing program 0 (id=388): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43cde9e4d2f455ef61e1e98ca6fe62e9f077eb00a9fabbc28288b832c30001cb267708904f3bc", 0xffffffffffffff46, 0x30000090, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/56, 0x38}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x10, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000180)={0x6c, @local, 0x4e21, 0x4, 'dh\x00', 0x30, 0x0, 0x29}, 0x2c) close_range(r7, 0xffffffffffffffff, 0x0) 5.573186117s ago: executing program 2 (id=389): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0xf, 0x80000, 0x0) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000300)={0x6, 0x4, 0x5, 0x40087, 0xffffffff, 0x40}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0xe0}], 0x1, 0x0, 0x0, 0x2000081}, 0x20048040) 4.854167517s ago: executing program 4 (id=390): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x46, 0x107, 0x70bd28, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x5, 0x3, 0x0, 0x1, [@generic="ae"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x4, 0x0, 0x4}, 0xc) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc008001, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f908, 0xffffbfff, '\x00', @string=&(0x7f0000000180)=0xa3}}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) open(0x0, 0x4c37e, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x76, 0x7d, 0x9, 0x4, 0x81, 0x81}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 4.697946761s ago: executing program 1 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f0000000340), 0x4001) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0xa, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}], "0639"}}}}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c80), 0x400000000000294, 0x2101, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x2000, 0x6) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1fd, &(0x7f0000000bc0)="$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") sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x20, 0xfffffffe, 0x800000, 0x400000040000001e, 0x3, 0xfffffffffffffffa, 0x5, 0xfffffffe}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa7482fd, 0x8, 0x25dfdc00, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x2a00}, [@RTA_NH_ID={0x14, 0x1e, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1e, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4a044}, 0x80) 4.617555243s ago: executing program 0 (id=392): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x3, 0x4002) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x4a01) r3 = syz_open_dev$usbfs(0x0, 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) syz_open_dev$usbfs(0x0, 0xb, 0x101301) creat(&(0x7f0000000080)='./bus\x00', 0x154) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 4.475409037s ago: executing program 2 (id=393): r0 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r1, 0x9, 0x2, "6ebd"}, 0xa) 3.401974087s ago: executing program 0 (id=394): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r0, 0x851, 0x400000000000000) 1.517425999s ago: executing program 4 (id=395): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0x0, r3, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r4}}}, 0x78) 1.514552388s ago: executing program 2 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpgrp(0xffffffffffffffff) getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mq_notify(r4, &(0x7f0000000000)={0x0, 0x3f, 0x2, @tid=r5}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9a}, @jmp={0x5, 0x0, 0x9, 0x0, 0xc}], &(0x7f0000000280)='GPL\x00'}, 0x94) r6 = io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x2, 0x1f2}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) writev(r7, &(0x7f0000000380), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.253876085s ago: executing program 1 (id=397): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x0, {}, {0x0, 0xff}, 0xfd}], 0x20) syz_open_dev$sndpcmc(0x0, 0x0, 0x20101) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000300)) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000003c0)="416e1e98b645ff3bf42c693588e4e6d63b2492a320c549756d905a8790f3ddffa564293917837d13af3432306b840b3066aaaacf76b8db0a4138a68368134b5f6ba46bc26b42fa7e71", 0x49, 0xfffffffffffffffe) 1.148677898s ago: executing program 0 (id=398): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) tkill(r1, 0x18) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x5) 49.777168ms ago: executing program 1 (id=399): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x5, 0x2000, 0x0, 0x0}], 0x1}) 0s ago: executing program 0 (id=400): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fallocate(0xffffffffffffffff, 0x0, 0xeffb, 0xe396) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 58.178199][ T4176] cgroup: Unknown subsys name 'net' [ 58.350506][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.835591][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.183391][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 61.243202][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.283106][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.312658][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 61.357034][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.406706][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.413809][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.422220][ T4192] device bridge_slave_0 entered promiscuous mode [ 61.457897][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.465138][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.472830][ T4192] device bridge_slave_1 entered promiscuous mode [ 61.523748][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.531143][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.539173][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.553102][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.561252][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.569264][ T4190] device bridge_slave_1 entered promiscuous mode [ 61.576703][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.583778][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.592167][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.620248][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.635586][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.642661][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.650702][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.658042][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.665408][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.673089][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.680491][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.688074][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.696164][ T4198] device bridge_slave_0 entered promiscuous mode [ 61.705590][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.733175][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.740478][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.749010][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.756155][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.763258][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.771802][ T4198] device bridge_slave_1 entered promiscuous mode [ 61.780702][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.799056][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.823362][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.839948][ T4192] team0: Port device team_slave_0 added [ 61.848293][ T4192] team0: Port device team_slave_1 added [ 61.866780][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.897772][ T4190] team0: Port device team_slave_0 added [ 61.906209][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.922934][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.934531][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.956621][ T4190] team0: Port device team_slave_1 added [ 61.963039][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.970779][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.997543][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.016690][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.043296][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.050420][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.076489][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.090324][ T4191] team0: Port device team_slave_0 added [ 62.099157][ T4191] team0: Port device team_slave_1 added [ 62.113074][ T4189] team0: Port device team_slave_0 added [ 62.122082][ T4189] team0: Port device team_slave_1 added [ 62.147849][ T4198] team0: Port device team_slave_0 added [ 62.169709][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.176976][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.203608][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.229779][ T4198] team0: Port device team_slave_1 added [ 62.249386][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.256463][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.282385][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.301894][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.308940][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.335228][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.346721][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.353696][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.380042][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.406796][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.413612][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.421081][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.428203][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.454635][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.466413][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.473394][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.499709][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.512076][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.519366][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.545319][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.573489][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.580624][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.606835][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.635329][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.642253][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.649265][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.657308][ T4190] Cannot create hsr debugfs directory [ 62.728982][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.736299][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.742929][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.750809][ T4191] Cannot create hsr debugfs directory [ 62.770963][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.778048][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.786206][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.793803][ T4189] Cannot create hsr debugfs directory [ 62.846622][ T4198] device hsr_slave_0 entered promiscuous mode [ 62.853691][ T4198] device hsr_slave_1 entered promiscuous mode [ 62.860572][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.868420][ T4198] Cannot create hsr debugfs directory [ 62.925319][ T4195] Bluetooth: hci3: command 0x0409 tx timeout [ 62.934986][ T4195] Bluetooth: hci1: command 0x0409 tx timeout [ 62.942980][ T4195] Bluetooth: hci4: command 0x0409 tx timeout [ 62.949739][ T4195] Bluetooth: hci0: command 0x0409 tx timeout [ 62.956175][ T4195] Bluetooth: hci2: command 0x0409 tx timeout [ 63.158643][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.178115][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.193447][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.203525][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.229929][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.240733][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.252003][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.263099][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.350142][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.360395][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.369443][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.398760][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.422445][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.458930][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.476281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.487647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.496746][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.505574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.514446][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.521748][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.531311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.551437][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.561440][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.572441][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.581889][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.589119][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.597680][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.614901][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.630367][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.640028][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.666691][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.677099][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.687486][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.697460][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.706653][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.715772][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.744147][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.756318][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.765593][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.775160][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.783960][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.800125][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.818494][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.830762][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.839340][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.849518][ T4198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.859705][ T4198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.880623][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.889792][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.898843][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.905978][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.914966][ T4198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.944791][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.953332][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.963726][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.973037][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.980195][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.990058][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.999170][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.010901][ T4198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.033540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.046404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.056215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.073790][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.105257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.114094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.126496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.138370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.147444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.161530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.175234][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.186938][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.213008][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.220369][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.230909][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.263911][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.285063][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.292596][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.301043][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.309712][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.318038][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.327270][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.336896][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.343953][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.352266][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.361128][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.373193][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.380335][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.389277][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.397801][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.423340][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.436575][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.455093][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.466116][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.473305][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.488797][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.501586][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.511060][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.518238][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.533711][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.551596][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.572667][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.615190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.625954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.641724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.650707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.659328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.667920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.680336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.689994][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.699982][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.718807][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.731543][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.741116][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.758205][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.777086][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.789682][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.798819][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.807596][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.816958][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.825706][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.838366][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.849153][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.858781][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.885436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.896882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.906758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.917486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.926251][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.933298][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.942001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.950996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.960691][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.967808][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.976307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.997246][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.004746][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 65.009543][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.011043][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 65.028374][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 65.030594][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.035535][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 65.048390][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 65.054897][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.063660][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.075785][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.087447][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.097918][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.107135][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.116170][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.126200][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.152599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.161312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.199210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.218539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.245772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.255098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.263758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.272819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.293765][ T4190] device veth0_vlan entered promiscuous mode [ 65.305142][ T4192] device veth0_vlan entered promiscuous mode [ 65.313141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.323871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.333510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.342818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.353050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.362494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.371645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.387456][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.401726][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.433892][ T4190] device veth1_vlan entered promiscuous mode [ 65.442629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.451808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.476396][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.490772][ T4192] device veth1_vlan entered promiscuous mode [ 65.519721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.529097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.562575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.578454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.614204][ T4192] device veth0_macvtap entered promiscuous mode [ 65.624592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.633386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.644093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.653687][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.663483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.673376][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.689152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.698098][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.706561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.716022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.724624][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.738936][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.748295][ T4189] device veth0_vlan entered promiscuous mode [ 65.762809][ T4192] device veth1_macvtap entered promiscuous mode [ 65.778483][ T4190] device veth0_macvtap entered promiscuous mode [ 65.787511][ T4189] device veth1_vlan entered promiscuous mode [ 65.811924][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.822748][ T4190] device veth1_macvtap entered promiscuous mode [ 65.839089][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.848555][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.856905][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.865210][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.873162][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.881842][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.891213][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.908225][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.923121][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.936393][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.948037][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.957808][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.967388][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.978499][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.988333][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.997271][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.006806][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.024888][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.034164][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.043381][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.052462][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.062724][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.084858][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.097775][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.109309][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.117207][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.125875][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.133417][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.142105][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.160163][ T4191] device veth0_vlan entered promiscuous mode [ 66.172082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.185054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.196686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.206369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.232019][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.242143][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.251468][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.260527][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.281208][ T4191] device veth1_vlan entered promiscuous mode [ 66.305223][ T4189] device veth0_macvtap entered promiscuous mode [ 66.314842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.322948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.332449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.341523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.350454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.359910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.406258][ T4189] device veth1_macvtap entered promiscuous mode [ 66.465203][ T4198] device veth0_vlan entered promiscuous mode [ 66.491250][ T4191] device veth0_macvtap entered promiscuous mode [ 66.498839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.510611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.519572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.529383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.541229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.551853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.559921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.597821][ T4191] device veth1_macvtap entered promiscuous mode [ 66.609703][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.619689][ T4198] device veth1_vlan entered promiscuous mode [ 66.631950][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.650279][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.660986][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.671674][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.682320][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.693345][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.711487][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.722266][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.732694][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.743468][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.753971][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.765904][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.777819][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.786407][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.795543][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.803811][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.812443][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.820372][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.829336][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.839116][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.847915][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.863453][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.871600][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.881299][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.891314][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.900876][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.910031][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.920644][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.931405][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.942498][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.954252][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.975656][ T4198] device veth0_macvtap entered promiscuous mode [ 66.984840][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.992342][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.993234][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.001528][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.019414][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.028415][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.037458][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.049633][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.059691][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.070258][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.080155][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.091628][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 67.097770][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.107772][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 67.109480][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.113899][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 67.127695][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 67.133826][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 67.135968][ T4198] device veth1_macvtap entered promiscuous mode [ 67.151866][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.162707][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.173095][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.182225][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.192929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.201138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.210228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.222505][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.232107][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.241746][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.251129][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.275020][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.283002][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.321176][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.371274][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.392303][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.402868][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.415410][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.425496][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.436236][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.446394][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.458244][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.471295][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.514969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.523721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.560997][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.583916][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.596094][ T4268] Zero length message leads to an empty skb [ 67.600344][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.612639][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.623073][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.634713][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.645829][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.657513][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.669239][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.677933][ T4269] loop4: detected capacity change from 0 to 2048 [ 67.713501][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.724454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.738841][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.747910][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.768995][ T4269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.780476][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.782992][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.805518][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.833833][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.866202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.113159][ T4269] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 68.381897][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.518311][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.623206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.653356][ T4275] loop0: detected capacity change from 0 to 2048 [ 68.683237][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.693388][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.724220][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.761031][ T3093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.795467][ T3093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.815768][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.837346][ T4275] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 68.869998][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.970285][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.986402][ T26] audit: type=1800 audit(1777598190.998:2): pid=4275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 69.040344][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.153635][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.161878][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.165395][ T4195] Bluetooth: hci2: command 0x0419 tx timeout [ 69.172056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.233040][ T4195] Bluetooth: hci0: command 0x0419 tx timeout [ 69.255318][ T4195] Bluetooth: hci4: command 0x0419 tx timeout [ 69.272565][ T4195] Bluetooth: hci1: command 0x0419 tx timeout [ 69.299863][ T4195] Bluetooth: hci3: command 0x0419 tx timeout [ 69.334342][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.344349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.604461][ T4281] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.742519][ T4293] loop1: detected capacity change from 0 to 40427 [ 69.794956][ T2303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.821902][ T4293] F2FS-fs (loop1): invalid crc value [ 69.841299][ T4293] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.891996][ T4293] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 69.896474][ T4281] usb 5-1: Using ep0 maxpacket: 32 [ 70.165295][ T4281] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.685476][ T2303] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 70.703077][ T4281] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.752093][ T2303] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 70.775210][ T4303] loop0: detected capacity change from 0 to 2048 [ 70.826151][ T4303] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 70.859252][ T4303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.977195][ T2303] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 71.036053][ T4281] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 71.113997][ T4281] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 71.159594][ T2303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.283484][ T4281] usb 5-1: Product: syz [ 71.372480][ T4281] usb 5-1: Manufacturer: syz [ 71.419666][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426782][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.474485][ T4317] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11'. [ 71.485284][ T4291] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 71.592904][ T4281] hub 5-1:4.0: USB hub found [ 71.764482][ T4281] hub 5-1:4.0: 2 ports detected [ 72.495974][ T2303] usb 4-1: USB disconnect, device number 2 [ 72.861321][ T4328] loop0: detected capacity change from 0 to 2048 [ 73.124422][ T4328] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.249891][ T4328] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 73.305323][ T13] hub 5-1:4.0: activate --> -90 [ 73.364416][ T4337] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.514936][ T13] hub 5-1:4.0: hub_ext_port_status failed (err = 0) [ 73.678661][ T4328] Remounting filesystem read-only [ 73.817968][ T4281] usb 5-1: USB disconnect, device number 2 [ 74.002021][ T4340] loop3: detected capacity change from 0 to 2048 [ 74.096799][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.119489][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.142732][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.168445][ T4346] device bridge_slave_0 left promiscuous mode [ 74.232001][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.288599][ T4340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.305778][ T4346] device bridge_slave_1 left promiscuous mode [ 75.193612][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.386058][ T4354] loop2: detected capacity change from 0 to 256 [ 75.612614][ T4346] bond0: (slave bond_slave_0): Releasing backup interface [ 75.647721][ T4354] ======================================================= [ 75.647721][ T4354] WARNING: The mand mount option has been deprecated and [ 75.647721][ T4354] and is ignored by this kernel. Remove the mand [ 75.647721][ T4354] option from the mount to silence this warning. [ 75.647721][ T4354] ======================================================= [ 76.092563][ T4361] raw_sendmsg: syz.4.20 forgot to set AF_INET. Fix it! [ 77.274329][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18!!! [ 77.302303][ T4346] bond0: (slave bond_slave_1): Releasing backup interface [ 77.367346][ T4361] ceph: No mds server is up or the cluster is laggy [ 77.382945][ T4195] libceph: connect (1)[c::]:6789 error -101 [ 77.402341][ T4354] FAT-fs (loop2): Directory bread(block 64) failed [ 77.407581][ T4195] libceph: mon0 (1)[c::]:6789 connect error [ 77.409438][ T4354] FAT-fs (loop2): Directory bread(block 65) failed [ 77.433193][ T4354] FAT-fs (loop2): Directory bread(block 66) failed [ 77.445010][ T4354] FAT-fs (loop2): Directory bread(block 67) failed [ 77.451704][ T4354] FAT-fs (loop2): Directory bread(block 68) failed [ 77.470912][ T4354] FAT-fs (loop2): Directory bread(block 69) failed [ 77.477885][ T4354] FAT-fs (loop2): Directory bread(block 70) failed [ 77.490587][ T4346] team0: Port device team_slave_0 removed [ 77.494852][ T4354] FAT-fs (loop2): Directory bread(block 71) failed [ 77.528438][ T4354] FAT-fs (loop2): Directory bread(block 72) failed [ 77.535302][ T4354] FAT-fs (loop2): Directory bread(block 73) failed [ 77.581309][ T4346] team0: Port device team_slave_1 removed [ 77.605221][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.618651][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.731081][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.740047][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.776956][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 77.814324][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 77.824336][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 77.834324][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.269735][ T4360] netlink: 'syz.0.22': attribute type 21 has an invalid length. [ 78.321951][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.329495][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.340182][ T4362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.480784][ T4373] loop1: detected capacity change from 0 to 2048 [ 78.557932][ T4381] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 78.572040][ T4373] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 78.650850][ T4373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.794638][ T2303] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 78.870611][ T4385] loop3: detected capacity change from 0 to 2048 [ 78.932494][ T4385] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.015125][ T4385] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 79.027989][ T4390] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.039972][ T4385] Remounting filesystem read-only [ 79.175540][ T2303] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.221997][ T2303] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 79.238312][ T2303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.262457][ T2303] usb 1-1: config 0 descriptor?? [ 79.470738][ T4395] loop4: detected capacity change from 0 to 2048 [ 79.972586][ T4178] usb 1-1: USB disconnect, device number 2 [ 80.369792][ T4395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.407780][ T4399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 81.297580][ T4408] loop0: detected capacity change from 0 to 16 [ 81.401208][ T4408] erofs: (device loop0): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 81.524014][ T4408] netlink: 'syz.0.36': attribute type 30 has an invalid length. [ 82.008082][ T4412] loop4: detected capacity change from 0 to 256 [ 82.054385][ T4416] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 82.111688][ T4416] netlink: 'syz.1.40': attribute type 10 has an invalid length. [ 82.230771][ T4416] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.275075][ T4416] bond0: (slave team0): Enslaving as an active interface with an up link [ 82.469461][ T4412] FAT-fs (loop4): Directory bread(block 64) failed [ 82.498457][ T4412] FAT-fs (loop4): Directory bread(block 65) failed [ 82.640171][ T4412] FAT-fs (loop4): Directory bread(block 66) failed [ 82.729598][ T4412] FAT-fs (loop4): Directory bread(block 67) failed [ 82.863089][ T4412] FAT-fs (loop4): Directory bread(block 68) failed [ 82.986489][ T4412] FAT-fs (loop4): Directory bread(block 69) failed [ 83.068282][ T4412] FAT-fs (loop4): Directory bread(block 70) failed [ 83.075041][ T4412] FAT-fs (loop4): Directory bread(block 71) failed [ 83.081812][ T4412] FAT-fs (loop4): Directory bread(block 72) failed [ 83.100959][ T4412] FAT-fs (loop4): Directory bread(block 73) failed [ 85.464866][ T4435] loop1: detected capacity change from 0 to 2048 [ 85.794281][ C1] sched: RT throttling activated [ 86.254899][ T4441] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 86.780068][ T21] cfg80211: failed to load regulatory.db [ 86.805769][ T4435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.884091][ T4458] loop1: detected capacity change from 0 to 16 [ 89.364308][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 89.684788][ T4458] erofs: (device loop1): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 89.704151][ T4455] netlink: 'syz.1.50': attribute type 30 has an invalid length. [ 89.796249][ T4457] loop0: detected capacity change from 0 to 2048 [ 89.977482][ T4457] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.389701][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.764517][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 91.466960][ T4462] loop4: detected capacity change from 0 to 32768 [ 91.550515][ T4478] loop0: detected capacity change from 0 to 2048 [ 91.573128][ T4480] loop3: detected capacity change from 0 to 256 [ 91.596296][ T4462] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.54 (4462) [ 91.710577][ T4478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.783064][ T4480] FAT-fs (loop3): Directory bread(block 64) failed [ 91.803519][ T4480] FAT-fs (loop3): Directory bread(block 65) failed [ 91.886756][ T4480] FAT-fs (loop3): Directory bread(block 66) failed [ 91.925078][ T4480] FAT-fs (loop3): Directory bread(block 67) failed [ 91.987873][ T4480] FAT-fs (loop3): Directory bread(block 68) failed [ 92.030031][ T4480] FAT-fs (loop3): Directory bread(block 69) failed [ 92.142604][ T21] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 92.153047][ T21] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 92.161314][ T21] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 92.169550][ T21] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 92.177910][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 92.186838][ T21] usb 2-1: config 0 has no interface number 0 [ 92.193137][ T21] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 92.214600][ T4480] FAT-fs (loop3): Directory bread(block 70) failed [ 92.224493][ T21] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 92.236465][ T4480] FAT-fs (loop3): Directory bread(block 71) failed [ 92.264675][ T4480] FAT-fs (loop3): Directory bread(block 72) failed [ 92.274591][ T21] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.277566][ T4480] FAT-fs (loop3): Directory bread(block 73) failed [ 92.294528][ T21] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.029446][ T21] usb 2-1: config 0 interface 125 has no altsetting 0 [ 93.036374][ T21] usb 2-1: config 0 interface 125 has no altsetting 2 [ 93.204006][ T4462] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 93.246068][ T21] usb 2-1: string descriptor 0 read error: -71 [ 93.252316][ T21] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 93.263118][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.274363][ T21] usb 2-1: config 0 descriptor?? [ 93.299208][ T4462] BTRFS info (device loop4): using free space tree [ 93.306310][ T21] usb 2-1: can't set config #0, error -71 [ 93.315034][ T4462] BTRFS info (device loop4): has skinny extents [ 93.325203][ T21] usb 2-1: USB disconnect, device number 2 [ 93.618521][ T4511] loop1: detected capacity change from 0 to 16 [ 94.484311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.001432][ T4462] BTRFS error (device loop4): open_ctree failed: -12 [ 95.075148][ T4511] erofs: (device loop1): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 95.095602][ T4505] netlink: 'syz.1.65': attribute type 30 has an invalid length. [ 95.281542][ T4516] loop2: detected capacity change from 0 to 2048 [ 95.395195][ T4516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.000110][ T4521] loop1: detected capacity change from 0 to 8192 [ 96.319410][ T4529] netlink: 36 bytes leftover after parsing attributes in process `syz.4.72'. [ 96.713439][ T4535] loop0: detected capacity change from 0 to 2048 [ 96.885968][ T4535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.438117][ T4542] loop2: detected capacity change from 0 to 32768 [ 97.555097][ T4544] loop4: detected capacity change from 0 to 2048 [ 97.677520][ T4544] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 97.703280][ T4542] XFS (loop2): Mounting V5 Filesystem [ 97.834808][ T4544] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 97.851978][ T4562] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.883760][ T4542] XFS (loop2): Ending clean mount [ 98.045286][ T4567] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.073292][ T4544] Remounting filesystem read-only [ 98.089888][ T26] audit: type=1800 audit(1777598220.098:3): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.76" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 98.524948][ T4572] fuse: Bad value for 'fd' [ 99.494038][ T4556] loop3: detected capacity change from 0 to 32768 [ 99.546662][ T4556] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.81 (4556) [ 99.551160][ T4191] XFS (loop2): Unmounting Filesystem [ 99.587649][ T4556] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 99.638160][ T4556] BTRFS info (device loop3): force zlib compression, level 3 [ 99.654488][ T1111] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 99.708413][ T4556] BTRFS info (device loop3): setting nodatasum [ 99.750277][ T4556] BTRFS info (device loop3): ignoring data csums [ 99.770551][ T4556] BTRFS info (device loop3): allowing degraded mounts [ 99.790756][ T4556] BTRFS info (device loop3): enabling disk space caching [ 99.816488][ T4556] BTRFS error (device loop3): ignoredatacsums must be used with ro mount option [ 99.829852][ T4581] loop0: detected capacity change from 0 to 32768 [ 99.838865][ T4556] BTRFS error (device loop3): cannot disable free space tree [ 99.856047][ T4556] BTRFS error (device loop3): open_ctree failed: -22 [ 99.927483][ T4581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.86 (4581) [ 99.947763][ T4581] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 99.957114][ T4581] BTRFS info (device loop0): metadata ratio 7 [ 99.963280][ T4581] BTRFS info (device loop0): disabling tree log [ 99.969670][ T4581] BTRFS info (device loop0): turning off barriers [ 99.976394][ T4581] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 99.987207][ T4581] BTRFS info (device loop0): trying to use backup root at mount time [ 99.995557][ T4581] BTRFS info (device loop0): turning on flush-on-commit [ 100.002541][ T4581] BTRFS info (device loop0): using free space tree [ 100.009273][ T4581] BTRFS info (device loop0): has skinny extents [ 100.044635][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.095784][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.127532][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.148076][ T1111] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 100.164322][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.216866][ T1111] usb 5-1: config 0 descriptor?? [ 100.230644][ T4179] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by udevd (4179) [ 100.996400][ T4272] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 101.060351][ T4581] BTRFS warning (device loop0): couldn't read tree root [ 101.068945][ T4442] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 101.112448][ T4581] BTRFS warning (device loop0): couldn't read tree root [ 101.120077][ T4442] BTRFS warning (device loop0): checksum verify failed on 5255168 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 101.164966][ T4581] BTRFS warning (device loop0): couldn't read tree root [ 101.192516][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.192728][ T4581] BTRFS info (device loop0): enabling ssd optimizations [ 101.208595][ T4581] BTRFS info (device loop0): clearing free space tree [ 101.216518][ T4581] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.226681][ T4581] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.262262][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.279423][ T4581] BTRFS info (device loop0): creating free space tree [ 101.288611][ T4581] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.298411][ T4581] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.304344][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.487505][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.495714][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.503331][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.511622][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.519524][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.527278][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.544434][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.552835][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.571583][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.598962][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 101.636013][ T4619] loop2: detected capacity change from 0 to 16 [ 101.678517][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 102.469572][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 102.478166][ T4619] erofs: (device loop2): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 102.498357][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 102.506054][ T4616] netlink: 'syz.2.87': attribute type 30 has an invalid length. [ 102.554399][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 102.731383][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 102.827592][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 103.058730][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 103.067050][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 103.075252][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 103.083348][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 103.092764][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 103.101197][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 103.113473][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 103.328247][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 104.824564][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 104.833045][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 104.841252][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 104.913324][ T4646] fuse: Bad value for 'fd' [ 105.013039][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.020565][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.028036][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.036446][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.043873][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.051539][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.059008][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.077063][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.284614][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.292076][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.299966][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.307663][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.315417][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 105.322927][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.081807][ T4660] netlink: 44 bytes leftover after parsing attributes in process `syz.1.101'. [ 106.175786][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.356708][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.629288][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.644923][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.652573][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.671512][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.689319][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.707182][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.725153][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.750678][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.771000][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.812664][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.850872][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.881837][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.894384][ T4663] loop3: detected capacity change from 0 to 32768 [ 106.907129][ T4663] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.102 (4663) [ 106.908174][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.936470][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.949162][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.960061][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 106.972352][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.011986][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.029961][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.046029][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.056733][ T4179] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4179) [ 107.067134][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.077248][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.092897][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.100872][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.108653][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.116633][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.124103][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.132210][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.148614][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.164387][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.179909][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.198706][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.219035][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.239382][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.249130][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.264486][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.282261][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.291500][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.305319][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.312754][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.325844][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.333268][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.342702][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.351545][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.361040][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.369860][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.379291][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.387768][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.395399][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.402794][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.410722][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.418149][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.425702][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.433101][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.441239][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.448840][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.456413][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.463804][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.471238][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.478780][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.486224][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.494310][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.501772][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.509268][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.516728][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.524136][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.531582][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.539031][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.546473][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.553858][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.561305][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.568870][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.576338][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.583741][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.591204][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.599251][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x6 [ 107.606725][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.614219][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.621690][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.629181][ T1111] hid-generic 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.636748][ T1111] hid-generic 0003:05AC:0324.0001: collection stack underflow [ 107.644230][ T1111] hid-generic 0003:05AC:0324.0001: item 0 0 0 12 parsing failed [ 107.652371][ T1111] hid-generic: probe of 0003:05AC:0324.0001 failed with error -22 [ 107.664615][ T1111] usb 5-1: USB disconnect, device number 3 [ 108.081440][ T4672] loop2: detected capacity change from 0 to 16 [ 108.178345][ T4672] erofs: (device loop2): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 108.360820][ T4672] netlink: 'syz.2.104': attribute type 30 has an invalid length. [ 108.894356][ T4682] loop3: detected capacity change from 0 to 256 [ 109.268966][ T4682] FAT-fs (loop3): Directory bread(block 64) failed [ 109.369583][ T4682] FAT-fs (loop3): Directory bread(block 65) failed [ 109.544512][ T4682] FAT-fs (loop3): Directory bread(block 66) failed [ 109.690538][ T4682] FAT-fs (loop3): Directory bread(block 67) failed [ 109.824245][ T4682] FAT-fs (loop3): Directory bread(block 68) failed [ 109.831150][ T4682] FAT-fs (loop3): Directory bread(block 69) failed [ 109.996886][ T4682] FAT-fs (loop3): Directory bread(block 70) failed [ 110.003564][ T4682] FAT-fs (loop3): Directory bread(block 71) failed [ 110.276165][ T4682] FAT-fs (loop3): Directory bread(block 72) failed [ 110.282996][ T4682] FAT-fs (loop3): Directory bread(block 73) failed [ 111.565975][ T4703] netlink: 'syz.1.112': attribute type 39 has an invalid length. [ 112.484319][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 112.494328][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 112.760388][ T4718] fuse: Bad value for 'fd' [ 112.802293][ T4716] device syzkaller0 entered promiscuous mode [ 113.232735][ T4725] loop4: detected capacity change from 0 to 16 [ 113.351671][ T4725] erofs: (device loop4): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 113.372463][ T4725] netlink: 'syz.4.117': attribute type 30 has an invalid length. [ 114.055610][ T4727] binder: 4726:4727 ioctl 40286608 200000000000 returned -22 [ 114.780088][ T4727] orangefs_mount: mount request failed with -4 [ 115.433491][ T4747] netlink: 'syz.4.126': attribute type 4 has an invalid length. [ 115.580515][ T4753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.127'. [ 115.697902][ T4756] fuse: Bad value for 'fd' [ 118.992441][ T4801] loop3: detected capacity change from 0 to 256 [ 119.028848][ T4803] loop0: detected capacity change from 0 to 1024 [ 119.068636][ T4805] loop2: detected capacity change from 0 to 256 [ 119.082067][ T4801] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 119.108492][ T4803] EXT4-fs (loop0): Ignoring removed bh option [ 119.167062][ T4805] FAT-fs (loop2): Directory bread(block 64) failed [ 119.180775][ T4805] FAT-fs (loop2): Directory bread(block 65) failed [ 119.191616][ T4805] FAT-fs (loop2): Directory bread(block 66) failed [ 119.203403][ T4805] FAT-fs (loop2): Directory bread(block 67) failed [ 119.245037][ T4805] FAT-fs (loop2): Directory bread(block 68) failed [ 119.395067][ T4805] FAT-fs (loop2): Directory bread(block 69) failed [ 119.410071][ T4805] FAT-fs (loop2): Directory bread(block 70) failed [ 119.419384][ T4805] FAT-fs (loop2): Directory bread(block 71) failed [ 119.427799][ T4805] FAT-fs (loop2): Directory bread(block 72) failed [ 119.432033][ T4803] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 119.435148][ T4805] FAT-fs (loop2): Directory bread(block 73) failed [ 119.459069][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.856473][ T4803] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.172939][ T4816] loop0: detected capacity change from 0 to 64 [ 120.209581][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.287769][ T26] audit: type=1800 audit(1777598242.298:4): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.147" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 120.464519][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 121.245238][ T7] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 121.267486][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.289824][ T7] usb 2-1: Product: syz [ 121.294101][ T7] usb 2-1: Manufacturer: syz [ 121.301656][ T7] usb 2-1: SerialNumber: syz [ 121.329367][ T7] usb 2-1: config 0 descriptor?? [ 121.390025][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.427316][ T7] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 121.654019][ T4825] CUSE: unknown device info "" [ 121.659145][ T4825] CUSE: zero length info key specified [ 122.391177][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.458551][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.480004][ T4819] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 122.486670][ T4819] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 122.493162][ T4819] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 122.573073][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.486780][ T4814] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.876087][ T4844] loop0: detected capacity change from 0 to 32768 [ 124.151057][ T7] gspca_ov534_9: reg_w failed -110 [ 124.407943][ T4844] JBD2: Ignoring recovery information on journal [ 124.497320][ T4844] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 125.045659][ T7] gspca_ov534_9: Unknown sensor 0000 [ 125.131001][ T7] ov534_9: probe of 2-1:0.0 failed with error -22 [ 125.183729][ T2303] Bluetooth: hci0: command 0x0409 tx timeout [ 125.200267][ T4852] kAFS: No cell specified [ 125.427964][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 126.615145][ T4873] CUSE: unknown device info "" [ 126.620120][ T4873] CUSE: zero length info key specified [ 127.247256][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 129.510436][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 131.022393][ T4895] loop2: detected capacity change from 0 to 256 [ 131.113290][ T4895] FAT-fs (loop2): Directory bread(block 64) failed [ 131.123476][ T4895] FAT-fs (loop2): Directory bread(block 65) failed [ 131.132762][ T4895] FAT-fs (loop2): Directory bread(block 66) failed [ 131.139740][ T4895] FAT-fs (loop2): Directory bread(block 67) failed [ 131.147675][ T4895] FAT-fs (loop2): Directory bread(block 68) failed [ 131.198071][ T4895] FAT-fs (loop2): Directory bread(block 69) failed [ 131.212855][ T4895] FAT-fs (loop2): Directory bread(block 70) failed [ 131.238076][ T4895] FAT-fs (loop2): Directory bread(block 71) failed [ 131.262898][ T4895] FAT-fs (loop2): Directory bread(block 72) failed [ 131.284476][ T4895] FAT-fs (loop2): Directory bread(block 73) failed [ 131.350869][ T4814] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.366221][ T4814] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.379428][ T4814] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.408982][ T4814] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.506664][ T4897] process 'syz.0.168' launched '/dev/fd/6' with NULL argv: empty string added [ 132.017784][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 132.255516][ T4237] usb 2-1: USB disconnect, device number 3 [ 133.054354][ T4916] CUSE: unknown device info "" [ 133.059378][ T4916] CUSE: zero length info key specified [ 133.345000][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.351519][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.005888][ T4922] loop1: detected capacity change from 0 to 2048 [ 134.049217][ T4835] chnl_net:caif_netlink_parms(): no params data found [ 134.085606][ T4922] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 134.192666][ T4929] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.193097][ T4922] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 134.294677][ T4922] Remounting filesystem read-only [ 134.452159][ T4835] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.460489][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.469527][ T4835] device bridge_slave_0 entered promiscuous mode [ 134.496461][ T4835] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.503699][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.527862][ T4835] device bridge_slave_1 entered promiscuous mode [ 134.708093][ T4835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.929419][ T4835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.591903][ T4947] ucma_write: process 105 (syz.1.179) changed security contexts after opening file descriptor, this is not allowed. [ 135.712553][ T4835] team0: Port device team_slave_0 added [ 135.792119][ T4835] team0: Port device team_slave_1 added [ 136.010843][ T4835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.302818][ T4959] loop1: detected capacity change from 0 to 32768 [ 136.352773][ T4835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.368462][ T4959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.182 (4959) [ 136.394710][ T4835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.432056][ T4835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.449840][ T4959] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 136.459171][ T4959] BTRFS info (device loop1): metadata ratio 7 [ 136.465358][ T4959] BTRFS info (device loop1): disabling tree log [ 136.472039][ T4959] BTRFS info (device loop1): turning off barriers [ 136.478660][ T4959] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.489723][ T4959] BTRFS info (device loop1): trying to use backup root at mount time [ 136.497921][ T4959] BTRFS info (device loop1): turning on flush-on-commit [ 136.505015][ T4959] BTRFS info (device loop1): using free space tree [ 136.511538][ T4959] BTRFS info (device loop1): has skinny extents [ 136.525907][ T4835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.558396][ T4835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.945664][ T4986] CUSE: unknown device info "" [ 136.950633][ T4986] CUSE: zero length info key specified [ 137.190095][ T4835] device hsr_slave_0 entered promiscuous mode [ 137.435695][ T4305] BTRFS warning (device loop1): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 137.554877][ T4835] device hsr_slave_1 entered promiscuous mode [ 137.603896][ T4959] BTRFS warning (device loop1): couldn't read tree root [ 137.612050][ T4851] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 137.634963][ T4835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.642577][ T4835] Cannot create hsr debugfs directory [ 137.865472][ T4959] BTRFS warning (device loop1): couldn't read tree root [ 137.873110][ T4305] BTRFS warning (device loop1): checksum verify failed on 5255168 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 138.615052][ T4959] BTRFS warning (device loop1): couldn't read tree root [ 138.696428][ T4959] BTRFS info (device loop1): enabling ssd optimizations [ 138.704037][ T4959] BTRFS info (device loop1): clearing free space tree [ 138.710958][ T4959] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.720677][ T4959] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.740719][ T4959] BTRFS info (device loop1): creating free space tree [ 138.748522][ T4959] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.758152][ T4959] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.189440][ T5021] loop2: detected capacity change from 0 to 64 [ 139.552784][ T5019] loop0: detected capacity change from 0 to 2048 [ 140.036442][ T5019] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 140.106249][ T5019] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 140.116448][ T5026] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.177081][ T5019] Remounting filesystem read-only [ 140.369910][ T144] device hsr_slave_0 left promiscuous mode [ 140.426085][ T144] device hsr_slave_1 left promiscuous mode [ 141.584861][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.617916][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.659871][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.737167][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.768376][ T144] device bridge_slave_1 left promiscuous mode [ 141.792215][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.855754][ T144] device bridge_slave_0 left promiscuous mode [ 141.862028][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.071458][ T144] device veth1_macvtap left promiscuous mode [ 142.137307][ T144] device veth0_macvtap left promiscuous mode [ 142.143456][ T144] device veth1_vlan left promiscuous mode [ 142.322884][ T5035] loop2: detected capacity change from 0 to 40427 [ 142.338022][ T144] device veth0_vlan left promiscuous mode [ 142.422560][ T5035] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 142.430676][ T5035] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.444904][ T5035] F2FS-fs (loop2): invalid crc value [ 142.540869][ T5035] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.747395][ T5035] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.755003][ T5035] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.194214][ T5064] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 145.802488][ T5070] loop4: detected capacity change from 0 to 2048 [ 145.839469][ T5070] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.874187][ T5070] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 145.886500][ T5071] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.924422][ T5070] Remounting filesystem read-only [ 145.946937][ T144] team0 (unregistering): Port device team_slave_1 removed [ 145.985344][ T144] team0 (unregistering): Port device team_slave_0 removed [ 146.016077][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.066303][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.526263][ T144] bond0 (unregistering): Released all slaves [ 146.723067][ T5076] loop4: detected capacity change from 0 to 40427 [ 146.873176][ T5076] F2FS-fs (loop4): invalid crc value [ 147.040777][ T5076] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.068483][ T5076] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 147.315876][ T4835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.903855][ T4835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.974851][ T4835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.051247][ T4835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.794826][ T4835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.864894][ T5102] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 150.567595][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.579636][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.629316][ T4835] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.653090][ T5106] loop0: detected capacity change from 0 to 2048 [ 150.715133][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.745812][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.789816][ T5106] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.825482][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.832610][ T4851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.983885][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.991743][ T5106] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 151.001458][ T5117] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.057018][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.067431][ T5106] Remounting filesystem read-only [ 151.073785][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.112895][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.120069][ T4851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.168296][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.215796][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.274518][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.319114][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.355112][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.375002][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.415122][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.452417][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.506433][ T5126] loop0: detected capacity change from 0 to 1024 [ 151.508709][ T4835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.551202][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.651243][ T5126] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 151.673096][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.697108][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.765117][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.768093][ T5132] loop1: detected capacity change from 0 to 256 [ 151.898287][ T5136] loop2: detected capacity change from 0 to 256 [ 151.938398][ T5132] exfat: Deprecated parameter 'utf8' [ 152.009301][ T5132] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 152.186213][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.211870][ T5136] FAT-fs (loop2): Directory bread(block 64) failed [ 152.224678][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.270127][ T5136] FAT-fs (loop2): Directory bread(block 65) failed [ 152.270273][ T4835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.323545][ T5136] FAT-fs (loop2): Directory bread(block 66) failed [ 154.353202][ T5136] FAT-fs (loop2): Directory bread(block 67) failed [ 154.435041][ T5136] FAT-fs (loop2): Directory bread(block 68) failed [ 154.441659][ T5136] FAT-fs (loop2): Directory bread(block 69) failed [ 154.554959][ T5136] FAT-fs (loop2): Directory bread(block 70) failed [ 154.574558][ T5136] FAT-fs (loop2): Directory bread(block 71) failed [ 154.614601][ T5136] FAT-fs (loop2): Directory bread(block 72) failed [ 154.621208][ T5136] FAT-fs (loop2): Directory bread(block 73) failed [ 154.870936][ T5160] netlink: 'syz.1.219': attribute type 1 has an invalid length. [ 156.604857][ T2303] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.630546][ T5173] loop2: detected capacity change from 0 to 2048 [ 156.679296][ T5173] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 156.783796][ T5173] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 156.785420][ T5177] fuse: Bad value for 'fd' [ 156.802817][ T5181] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.825813][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.840507][ T5173] Remounting filesystem read-only [ 156.844411][ T2303] usb 2-1: Using ep0 maxpacket: 32 [ 156.878500][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.964652][ T2303] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 156.973112][ T2303] usb 2-1: config 0 has no interface number 0 [ 156.982398][ T4835] device veth0_vlan entered promiscuous mode [ 157.020355][ T2303] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 157.041996][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.058117][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.127869][ T4835] device veth1_vlan entered promiscuous mode [ 157.165173][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.196951][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.234496][ T2303] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 157.247242][ T2303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.275360][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.309369][ T2303] usb 2-1: Product: syz [ 157.324872][ T2303] usb 2-1: Manufacturer: syz [ 157.335443][ T2303] usb 2-1: SerialNumber: syz [ 157.358926][ T2303] usb 2-1: config 0 descriptor?? [ 157.384798][ T5165] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 157.418214][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.436721][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.488517][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.530099][ T4835] device veth0_macvtap entered promiscuous mode [ 157.550667][ T4835] device veth1_macvtap entered promiscuous mode [ 157.612777][ T5165] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 157.652784][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.719160][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.759082][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.790319][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.828657][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.855517][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.891111][ T4835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.916357][ T5191] loop0: detected capacity change from 0 to 2048 [ 157.942861][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.961017][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.003026][ T5191] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 158.047058][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.091722][ T5191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.115253][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.167554][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.219696][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.281908][ T5189] loop2: detected capacity change from 0 to 65536 [ 158.294537][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.297472][ T5195] loop4: detected capacity change from 0 to 1024 [ 158.324457][ T2303] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 158.342597][ T2303] asix: probe of 2-1:0.188 failed with error -32 [ 158.372061][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.417079][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.444807][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.475888][ T4835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.495786][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.515396][ T5189] XFS: ikeep mount option is deprecated. [ 158.515678][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.551070][ T4835] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.566398][ T4835] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.575649][ T4835] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.585119][ T4835] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.682459][ T5189] XFS (loop2): Mounting V5 Filesystem [ 158.801370][ T5203] tipc: Started in network mode [ 158.815220][ T5203] tipc: Node identity ac14140f, cluster identity 4711 [ 158.823877][ T5203] tipc: Enabled bearer , priority 10 [ 158.899424][ T5210] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 159.097897][ T5189] XFS (loop2): Ending clean mount [ 159.150200][ T4240] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x6 [ 159.364467][ T4240] XFS (loop2): Unmount and run xfs_repair [ 159.564871][ T4240] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 159.572319][ T4240] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 159.594289][ T4240] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 159.603188][ T4240] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 159.870447][ T4240] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 159.914418][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.274401][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.305477][ T1108] usb 2-1: USB disconnect, device number 4 [ 160.336547][ T4240] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 160.371912][ T4240] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 160.398173][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.448038][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.615272][ T5227] loop1: detected capacity change from 0 to 40427 [ 160.621971][ T4240] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.630926][ T4240] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.640673][ T5189] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x6 len 2 error 74 [ 160.646528][ T2303] tipc: Node number set to 2886997007 [ 160.662201][ T5189] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 160.670291][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.676996][ T5189] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 160.723509][ T4191] XFS (loop2): Unmounting Filesystem [ 160.738471][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.776081][ T5227] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 160.783540][ T5227] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 160.795594][ T5227] F2FS-fs (loop1): invalid crc value [ 160.800954][ T5227] F2FS-fs (loop1): Ignore s_resuid=145, s_resgid=0 w/o reserve_root [ 160.830072][ T5231] loop4: detected capacity change from 0 to 512 [ 160.901376][ T5227] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.945829][ T5227] F2FS-fs (loop1): Start checkpoint disabled! [ 161.012554][ T5227] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 161.023799][ T5227] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 161.059482][ T5231] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 161.098190][ T5231] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 161.484048][ T5231] EXT4-fs (loop4): 1 orphan inode deleted [ 161.534363][ T5231] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,mblk_io_submit,auto_da_alloc=0x0000000000000002,quota,. Quota mode: writeback. [ 161.604470][ T5231] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.758635][ T5258] fuse: Bad value for 'fd' [ 163.231026][ T5267] loop4: detected capacity change from 0 to 64 [ 163.438558][ T4192] hfs: request for non-existent node 131072 in B*Tree [ 163.867427][ T5283] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 164.945398][ T4865] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.844656][ T4865] usb 2-1: Using ep0 maxpacket: 16 [ 165.913337][ T5300] syz.4.246 (5300): /proc/5299/oom_adj is deprecated, please use /proc/5299/oom_score_adj instead. [ 166.004740][ T4865] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 166.014708][ T4865] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 166.023009][ T4865] usb 2-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 166.116559][ T5306] loop4: detected capacity change from 0 to 1024 [ 166.144397][ T4865] usb 2-1: config 166 has no interface number 0 [ 166.171129][ T4865] usb 2-1: config 166 has no interface number 1 [ 166.185957][ T4865] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 166.224151][ T4865] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 166.290152][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.290370][ T4865] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 166.476623][ T5323] loop0: detected capacity change from 0 to 2048 [ 166.531184][ T5323] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.712052][ T5330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.723315][ T5323] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 166.759089][ T4865] usb 2-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 166.852627][ T5323] Remounting filesystem read-only [ 166.921158][ T4865] usb 2-1: config 166 interface 177 has no altsetting 0 [ 166.940524][ T4865] usb 2-1: config 166 interface 34 has no altsetting 0 [ 167.159367][ T5338] fuse: Bad value for 'fd' [ 167.166753][ T4865] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 167.199947][ T4865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.244441][ T4865] usb 2-1: Product: syz [ 167.289270][ T4865] usb 2-1: Manufacturer: syz [ 167.312588][ T4865] usb 2-1: SerialNumber: syz [ 167.643081][ T4865] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 167.915547][ T4865] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 168.064579][ T4865] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 168.071047][ T4865] usb 2-1: No valid video chain found. [ 168.147233][ T4865] usb 2-1: USB disconnect, device number 5 [ 168.371066][ T5378] loop1: detected capacity change from 0 to 2048 [ 168.504440][ T5378] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 168.539117][ T5378] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 168.556196][ T5385] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.582264][ T5378] Remounting filesystem read-only [ 169.803630][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ff27400: rx timeout, send abort [ 169.814573][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ff27400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 169.915711][ T26] audit: type=1326 audit(1777598291.898:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5401 comm="syz.0.273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1caf071dd9 code=0x0 [ 170.286578][ T5429] loop1: detected capacity change from 0 to 8 [ 170.651613][ T5433] loop0: detected capacity change from 0 to 40427 [ 170.691771][ T5436] loop2: detected capacity change from 0 to 2048 [ 170.766607][ T5433] F2FS-fs (loop0): invalid crc value [ 170.843893][ T5438] SQUASHFS error: lzo decompression failed, data probably corrupt [ 170.852463][ T5438] SQUASHFS error: Failed to read block 0x0: -5 [ 170.858751][ T5438] SQUASHFS error: Unable to read data cache entry [0] [ 170.865638][ T5438] SQUASHFS error: Unable to read page, block 0, size ff [ 170.872985][ T5438] SQUASHFS error: Unable to read data cache entry [0] [ 170.880226][ T5438] SQUASHFS error: Unable to read page, block 0, size ff [ 171.012027][ T5438] SQUASHFS error: lzo decompression failed, data probably corrupt [ 171.020027][ T5438] SQUASHFS error: Failed to read block 0x0: -5 [ 171.027534][ T5438] SQUASHFS error: lzo decompression failed, data probably corrupt [ 171.035458][ T5438] SQUASHFS error: Failed to read block 0x0: -5 [ 171.042401][ T5438] SQUASHFS error: lzo decompression failed, data probably corrupt [ 171.050332][ T5438] SQUASHFS error: Failed to read block 0x0: -5 [ 171.078691][ T5433] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.117587][ T26] audit: type=1800 audit(1777598293.068:6): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.279" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 171.153500][ T5433] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 171.175516][ T5436] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 171.308011][ T5442] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.308281][ T5436] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 171.495628][ T5436] Remounting filesystem read-only [ 173.584063][ T5485] loop5: detected capacity change from 0 to 2048 [ 173.632918][ T5485] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 173.724155][ T5490] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.724989][ T5485] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 173.757736][ T5485] Remounting filesystem read-only [ 174.495991][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880603d0400: rx timeout, send abort [ 174.504808][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880603d0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.888996][ T5526] loop5: detected capacity change from 0 to 32768 [ 175.900326][ T5526] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.308 (5526) [ 175.968751][ T5526] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 175.977685][ T5526] BTRFS info (device loop5): metadata ratio 7 [ 175.983808][ T5526] BTRFS info (device loop5): disabling tree log [ 175.990180][ T5526] BTRFS info (device loop5): turning off barriers [ 175.997364][ T5526] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 176.008315][ T5526] BTRFS info (device loop5): trying to use backup root at mount time [ 176.016465][ T5526] BTRFS info (device loop5): turning on flush-on-commit [ 176.023430][ T5526] BTRFS info (device loop5): using free space tree [ 176.030163][ T5526] BTRFS info (device loop5): has skinny extents [ 176.186732][ T4272] BTRFS warning (device loop5): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 176.254539][ T5526] BTRFS warning (device loop5): couldn't read tree root [ 176.264069][ T4217] BTRFS warning (device loop5): checksum verify failed on 5324800 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 176.310592][ T5526] BTRFS warning (device loop5): couldn't read tree root [ 176.318190][ T4272] BTRFS warning (device loop5): checksum verify failed on 5255168 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 176.370521][ T5526] BTRFS warning (device loop5): couldn't read tree root [ 176.404930][ T5526] BTRFS info (device loop5): enabling ssd optimizations [ 176.412532][ T5526] BTRFS info (device loop5): clearing free space tree [ 176.419503][ T5526] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.429301][ T5526] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.446442][ T5526] BTRFS info (device loop5): creating free space tree [ 176.455050][ T5526] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.464759][ T5526] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.657222][ T5567] loop0: detected capacity change from 0 to 2048 [ 176.757563][ T5567] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.131539][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fa30400: rx timeout, send abort [ 177.140065][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fa30400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 179.459576][ T5585] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.410825][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 181.419892][ T5621] netlink: 'syz.0.319': attribute type 21 has an invalid length. [ 181.947942][ T5622] netlink: 64 bytes leftover after parsing attributes in process `syz.5.322'. [ 182.167985][ T5625] CUSE: unknown device info "" [ 182.173068][ T5625] CUSE: zero length info key specified [ 182.906404][ T5636] loop5: detected capacity change from 0 to 40427 [ 183.092212][ T5636] F2FS-fs (loop5): invalid crc value [ 183.153146][ T5636] F2FS-fs (loop5): Found nat_bits in checkpoint [ 183.180404][ T5636] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 183.269999][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 184.762191][ T5657] loop2: detected capacity change from 0 to 2048 [ 184.884107][ T5657] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.966170][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.333'. [ 185.985970][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.333'. [ 187.334336][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 187.360114][ T4864] Bluetooth: hci4: command 0x0406 tx timeout [ 187.366588][ T4864] Bluetooth: hci1: command 0x0406 tx timeout [ 187.385547][ T5678] netlink: 'syz.4.336': attribute type 6 has an invalid length. [ 187.405990][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 187.486429][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'. [ 188.089520][ T4864] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 188.380508][ T5692] CUSE: unknown device info "" [ 188.385454][ T5692] CUSE: zero length info key specified [ 188.689678][ T5705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.340'. [ 188.843468][ T4864] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 188.886121][ T4864] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 188.972994][ T4864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.073500][ T5707] loop5: detected capacity change from 0 to 40427 [ 189.142952][ T5707] F2FS-fs (loop5): invalid crc value [ 189.413508][ T5707] F2FS-fs (loop5): Found nat_bits in checkpoint [ 189.451195][ T5707] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 189.532512][ T4864] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 189.566379][ T4864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.660977][ T4864] usb 5-1: config 0 descriptor?? [ 189.703702][ T4864] usb 5-1: can't set config #0, error -71 [ 189.736659][ T4864] usb 5-1: USB disconnect, device number 4 [ 190.666331][ T5728] loop4: detected capacity change from 0 to 16 [ 191.527834][ T5728] erofs: (device loop4): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 191.540955][ T5728] netlink: 'syz.4.347': attribute type 30 has an invalid length. [ 192.772953][ T5738] CUSE: unknown device info "" [ 192.777962][ T5738] CUSE: zero length info key specified [ 193.885291][ T5748] comedi comedi0: Minor 2 could not be opened [ 195.087837][ T5775] loop5: detected capacity change from 0 to 16 [ 195.193357][ T5779] autofs4:pid:5779:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 195.431206][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.437550][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.842218][ T5775] erofs: (device loop5): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 195.853865][ T5775] netlink: 'syz.5.360': attribute type 30 has an invalid length. [ 196.102520][ T5783] CUSE: unknown device info "" [ 196.107499][ T5783] CUSE: zero length info key specified [ 196.953640][ T5793] loop2: detected capacity change from 0 to 32768 [ 197.640865][ T5793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.365 (5793) [ 197.710601][ T5793] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 197.719592][ T5793] BTRFS info (device loop2): metadata ratio 7 [ 197.725920][ T5793] BTRFS info (device loop2): disabling tree log [ 197.732249][ T5793] BTRFS info (device loop2): turning off barriers [ 197.738949][ T5793] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 197.749891][ T5793] BTRFS info (device loop2): trying to use backup root at mount time [ 197.758124][ T5793] BTRFS info (device loop2): turning on flush-on-commit [ 197.765159][ T5793] BTRFS info (device loop2): using free space tree [ 197.771702][ T5793] BTRFS info (device loop2): has skinny extents [ 198.029737][ T5806] dlm: non-version read from control device 160 [ 198.379786][ T4217] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 198.692979][ T5793] BTRFS warning (device loop2): couldn't read tree root [ 198.705512][ T4217] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 198.717346][ T5793] BTRFS warning (device loop2): couldn't read tree root [ 198.756475][ T4217] BTRFS warning (device loop2): checksum verify failed on 5255168 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 198.914156][ T5793] BTRFS warning (device loop2): couldn't read tree root [ 200.492386][ T5895] loop5: detected capacity change from 0 to 16 [ 200.504277][ T5895] erofs: (device loop5): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 200.713116][ T5889] binder: BINDER_SET_CONTEXT_MGR already set [ 200.720151][ T5889] binder: 5888:5889 ioctl 4018620d 200000004a80 returned -16 [ 201.163866][ T5900] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 201.792042][ T5793] BTRFS error (device loop2): open_ctree failed: -22 [ 201.802334][ T4179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4179) [ 202.466580][ T5895] netlink: 'syz.5.374': attribute type 30 has an invalid length. [ 203.024714][ T5920] CUSE: unknown device info "" [ 203.029720][ T5920] CUSE: zero length info key specified [ 203.086975][ T5925] loop4: detected capacity change from 0 to 512 [ 203.145723][ T5925] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 203.175533][ T5925] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 203.275626][ T5925] EXT4-fs (loop4): 1 orphan inode deleted [ 203.349204][ T5925] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,mblk_io_submit,auto_da_alloc=0x0000000000000002,quota,. Quota mode: writeback. [ 203.438068][ T5925] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.932848][ T5970] loop1: detected capacity change from 0 to 16 [ 205.110587][ T4855] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 205.119385][ T4855] Bluetooth: hci2: Injecting HCI hardware error event [ 205.135573][ T4193] Bluetooth: hci2: hardware error 0x00 [ 205.168447][ T5970] erofs: (device loop1): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 205.869431][ T5972] loop4: detected capacity change from 0 to 2048 [ 207.429988][ T5972] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 207.498339][ T5972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.001520][ T5967] netlink: 'syz.1.391': attribute type 30 has an invalid length. [ 209.289990][ T5954] [ 209.292464][ T5954] ====================================================== [ 209.299505][ T5954] WARNING: possible circular locking dependency detected [ 209.306534][ T5954] syzkaller #0 Not tainted [ 209.310967][ T5954] ------------------------------------------------------ [ 209.318004][ T5954] syz.5.386/5954 is trying to acquire lock: [ 209.323906][ T5954] ffff88807425cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 209.334987][ T5954] [ 209.334987][ T5954] but task is already holding lock: [ 209.342367][ T5954] ffffffff8d6c5da8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 209.352061][ T5954] [ 209.352061][ T5954] which lock already depends on the new lock. [ 209.352061][ T5954] [ 209.362550][ T5954] [ 209.362550][ T5954] the existing dependency chain (in reverse order) is: [ 209.371550][ T5954] [ 209.371550][ T5954] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 209.379615][ T5954] __mutex_lock_common+0x1e3/0x2400 [ 209.385330][ T5954] mutex_lock_nested+0x17/0x20 [ 209.390603][ T5954] rfkill_register+0x33/0x980 [ 209.395800][ T5954] hci_register_dev+0x452/0x970 [ 209.401156][ T5954] vhci_create_device+0x32c/0x5c0 [ 209.406688][ T5954] vhci_write+0x391/0x450 [ 209.411527][ T5954] vfs_write+0x745/0xd60 [ 209.416299][ T5954] ksys_write+0x152/0x260 [ 209.421253][ T5954] do_syscall_64+0x4c/0xa0 [ 209.426201][ T5954] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.432626][ T5954] [ 209.432626][ T5954] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 209.440443][ T5954] __mutex_lock_common+0x1e3/0x2400 [ 209.446176][ T5954] mutex_lock_nested+0x17/0x20 [ 209.451452][ T5954] vhci_send_frame+0x88/0x100 [ 209.456643][ T5954] hci_send_frame+0x1a9/0x2e0 [ 209.461829][ T5954] hci_tx_work+0x9f9/0x1710 [ 209.466840][ T5954] process_one_work+0x85f/0x1010 [ 209.472285][ T5954] worker_thread+0xaa6/0x1290 [ 209.477571][ T5954] kthread+0x436/0x520 [ 209.482149][ T5954] ret_from_fork+0x1f/0x30 [ 209.487080][ T5954] [ 209.487080][ T5954] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 209.496284][ T5954] __flush_work+0x116/0x210 [ 209.501432][ T5954] hci_dev_do_close+0x1e7/0x1030 [ 209.506893][ T5954] hci_unregister_dev+0x2d7/0x580 [ 209.512430][ T5954] vhci_release+0x73/0xc0 [ 209.517272][ T5954] __fput+0x234/0x930 [ 209.521781][ T5954] task_work_run+0x125/0x1a0 [ 209.526905][ T5954] do_exit+0x626/0x20c0 [ 209.531583][ T5954] do_group_exit+0x12e/0x300 [ 209.536694][ T5954] __x64_sys_exit_group+0x3b/0x40 [ 209.542265][ T5954] do_syscall_64+0x4c/0xa0 [ 209.547217][ T5954] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.553639][ T5954] [ 209.553639][ T5954] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 209.561280][ T5954] __mutex_lock_common+0x1e3/0x2400 [ 209.567003][ T5954] mutex_lock_nested+0x17/0x20 [ 209.572324][ T5954] bg_scan_update+0x44/0x3b0 [ 209.577434][ T5954] process_one_work+0x85f/0x1010 [ 209.583069][ T5954] worker_thread+0xaa6/0x1290 [ 209.588257][ T5954] kthread+0x436/0x520 [ 209.592831][ T5954] ret_from_fork+0x1f/0x30 [ 209.597845][ T5954] [ 209.597845][ T5954] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 209.607656][ T5954] __lock_acquire+0x2c42/0x7d10 [ 209.613015][ T5954] lock_acquire+0x19e/0x400 [ 209.618129][ T5954] __flush_work+0x116/0x210 [ 209.623157][ T5954] __cancel_work_timer+0x3f4/0x560 [ 209.628873][ T5954] hci_request_cancel_all+0xcc/0x300 [ 209.634668][ T5954] hci_dev_do_close+0x4e/0x1030 [ 209.640028][ T5954] hci_rfkill_set_block+0x10a/0x190 [ 209.645733][ T5954] rfkill_set_block+0x1c9/0x3d0 [ 209.651370][ T5954] rfkill_fop_write+0x452/0x560 [ 209.656733][ T5954] vfs_write+0x30b/0xd60 [ 209.661571][ T5954] ksys_write+0x152/0x260 [ 209.666417][ T5954] do_syscall_64+0x4c/0xa0 [ 209.671345][ T5954] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.677750][ T5954] [ 209.677750][ T5954] other info that might help us debug this: [ 209.677750][ T5954] [ 209.687979][ T5954] Chain exists of: [ 209.687979][ T5954] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 209.687979][ T5954] [ 209.703683][ T5954] Possible unsafe locking scenario: [ 209.703683][ T5954] [ 209.711305][ T5954] CPU0 CPU1 [ 209.716668][ T5954] ---- ---- [ 209.722107][ T5954] lock(rfkill_global_mutex); [ 209.726870][ T5954] lock(&data->open_mutex); [ 209.733962][ T5954] lock(rfkill_global_mutex); [ 209.741343][ T5954] lock((work_completion)(&hdev->bg_scan_update)); [ 209.747921][ T5954] [ 209.747921][ T5954] *** DEADLOCK *** [ 209.747921][ T5954] [ 209.756057][ T5954] 1 lock held by syz.5.386/5954: [ 209.760991][ T5954] #0: ffffffff8d6c5da8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 209.771083][ T5954] [ 209.771083][ T5954] stack backtrace: [ 209.777254][ T5954] CPU: 1 PID: 5954 Comm: syz.5.386 Not tainted syzkaller #0 [ 209.784546][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.794610][ T5954] Call Trace: [ 209.797899][ T5954] [ 209.800829][ T5954] dump_stack_lvl+0x188/0x250 [ 209.805510][ T5954] ? load_image+0x400/0x400 [ 209.810029][ T5954] ? show_regs_print_info+0x20/0x20 [ 209.815225][ T5954] ? print_circular_bug+0x12b/0x1a0 [ 209.820486][ T5954] check_noncircular+0x296/0x330 [ 209.825420][ T5954] ? look_up_lock_class+0x71/0x110 [ 209.830523][ T5954] ? add_chain_block+0x940/0x940 [ 209.835458][ T5954] ? lockdep_lock+0xf1/0x1f0 [ 209.840044][ T5954] ? __lock_acquire+0x12e8/0x7d10 [ 209.845056][ T5954] ? mark_lock+0x94/0x320 [ 209.849386][ T5954] __lock_acquire+0x2c42/0x7d10 [ 209.854246][ T5954] ? verify_lock_unused+0x140/0x140 [ 209.859445][ T5954] ? verify_lock_unused+0x140/0x140 [ 209.864632][ T5954] ? mark_lock+0x94/0x320 [ 209.868964][ T5954] lock_acquire+0x19e/0x400 [ 209.873472][ T5954] ? __flush_work+0xfa/0x210 [ 209.878048][ T5954] ? __lock_acquire+0x7d10/0x7d10 [ 209.883079][ T5954] ? read_lock_is_recursive+0x10/0x10 [ 209.888445][ T5954] ? start_flush_work+0x776/0x820 [ 209.893465][ T5954] __flush_work+0x116/0x210 [ 209.897963][ T5954] ? __flush_work+0xfa/0x210 [ 209.902553][ T5954] ? flush_work+0x20/0x20 [ 209.906873][ T5954] ? try_to_grab_pending+0xfa/0x7f0 [ 209.912056][ T5954] ? mark_lock+0x94/0x320 [ 209.916379][ T5954] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 209.922351][ T5954] ? lock_chain_count+0x20/0x20 [ 209.927192][ T5954] ? mark_lock+0x94/0x320 [ 209.931528][ T5954] ? __cancel_work_timer+0x36a/0x560 [ 209.936822][ T5954] __cancel_work_timer+0x3f4/0x560 [ 209.941926][ T5954] ? cancel_work_sync+0x20/0x20 [ 209.946917][ T5954] ? __cancel_work+0x1f9/0x2e0 [ 209.951700][ T5954] ? lockdep_hardirqs_on+0x94/0x140 [ 209.956908][ T5954] ? __cancel_work+0x27b/0x2e0 [ 209.961685][ T5954] ? cancel_work+0x20/0x20 [ 209.966178][ T5954] ? lock_chain_count+0x20/0x20 [ 209.971025][ T5954] hci_request_cancel_all+0xcc/0x300 [ 209.976312][ T5954] hci_dev_do_close+0x4e/0x1030 [ 209.981166][ T5954] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 209.987047][ T5954] ? _raw_spin_unlock+0x40/0x40 [ 209.991887][ T5954] hci_rfkill_set_block+0x10a/0x190 [ 209.997078][ T5954] ? rcu_lock_release+0x20/0x20 [ 210.001920][ T5954] rfkill_set_block+0x1c9/0x3d0 [ 210.006762][ T5954] rfkill_fop_write+0x452/0x560 [ 210.011601][ T5954] ? rfkill_fop_read+0x520/0x520 [ 210.016971][ T5954] ? common_file_perm+0x140/0x1c0 [ 210.022004][ T5954] ? fsnotify_perm+0x5d/0x560 [ 210.026672][ T5954] ? security_file_permission+0x75/0xa0 [ 210.032219][ T5954] ? rfkill_fop_read+0x520/0x520 [ 210.037145][ T5954] vfs_write+0x30b/0xd60 [ 210.041378][ T5954] ? file_end_write+0x250/0x250 [ 210.046219][ T5954] ? __fget_files+0x40f/0x480 [ 210.050886][ T5954] ? __fdget_pos+0x1e2/0x370 [ 210.055463][ T5954] ? ksys_write+0x71/0x260 [ 210.059877][ T5954] ksys_write+0x152/0x260 [ 210.064208][ T5954] ? __ia32_sys_read+0x80/0x80 [ 210.068960][ T5954] ? lockdep_hardirqs_on+0x94/0x140 [ 210.074164][ T5954] do_syscall_64+0x4c/0xa0 [ 210.078573][ T5954] ? clear_bhb_loop+0x30/0x80 [ 210.083240][ T5954] ? clear_bhb_loop+0x30/0x80 [ 210.087914][ T5954] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.093824][ T5954] RIP: 0033:0x7f02a536fdd9 [ 210.098254][ T5954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.117847][ T5954] RSP: 002b:00007f02a35c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.126439][ T5954] RAX: ffffffffffffffda RBX: 00007f02a55e8fa0 RCX: 00007f02a536fdd9 [ 210.134412][ T5954] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 210.142378][ T5954] RBP: 00007f02a5405d69 R08: 0000000000000000 R09: 0000000000000000 [ 210.150354][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.158336][ T5954] R13: 00007f02a55e9038 R14: 00007f02a55e8fa0 R15: 00007ffcf9dcdbe8 [ 210.166318][ T5954] [ 210.589666][ T5988] PM: hibernation: Basic memory bitmaps created [ 210.709593][ T5988] PM: hibernation: Basic memory bitmaps freed [ 210.948653][ T4512] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 211.205257][ T4512] usb 2-1: Using ep0 maxpacket: 8 [ 211.331624][ T4512] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 211.340714][ T4512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.386049][ T4512] pvrusb2: Hardware description: Terratec Grabster AV400 [ 211.393102][ T4512] pvrusb2: ********** [ 211.404804][ T4512] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 211.415329][ T4512] pvrusb2: Important functionality might not be entirely working. [ 211.423402][ T4512] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 211.435626][ T4512] pvrusb2: ********** [ 211.611176][ T2425] pvrusb2: Invalid write control endpoint [ 211.648494][ T2425] pvrusb2: Invalid write control endpoint [ 211.654982][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 211.666215][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 211.674363][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 211.687122][ T2425] pvrusb2: Device being rendered inoperable [ 211.693087][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 211.700453][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 211.717579][ T2425] pvrusb2: Attached sub-driver cx25840 [ 211.723125][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 211.735051][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 211.826425][ T6007] pvrusb2: Attempted to execute control transfer when device not ok [ 211.855346][ T4281] usb 2-1: USB disconnect, device number 6