last executing test programs: 9.662988313s ago: executing program 2 (id=108): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x18, 0x0, 0x3e, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='/dev/input/event#\x00', 0x4000, 0x0, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x7}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x4, 0x1}, {0x4f, 0x1}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r2, 0x0, 0x0) 9.035452607s ago: executing program 2 (id=110): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 9.020867857s ago: executing program 4 (id=111): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) 7.843168342s ago: executing program 0 (id=112): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$packet(0x11, 0x3, 0x300) listen(r1, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x7, 0x8, 0x8, 0x8}, {0x4, 0x7e, 0xff, 0x878}, {0x80, 0xc, 0x8a, 0x4e}, {0x8, 0x2, 0x3, 0x7f48}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') socket$l2tp(0x2, 0x2, 0x73) sendfile(r5, r5, 0x0, 0x8) r6 = fcntl$dupfd(r3, 0x0, r3) readv(r6, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r7, 0x6, 0x0) 7.777242494s ago: executing program 2 (id=113): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") 7.515051459s ago: executing program 2 (id=114): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) write$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 7.315386533s ago: executing program 1 (id=116): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket(0xa, 0x5, 0x0) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @mcast2, 0xc5f}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008011}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000080)) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) fcntl$notify(r0, 0x402, 0x80000003) 7.00401143s ago: executing program 3 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r3) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) 6.856728643s ago: executing program 0 (id=118): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 6.305151345s ago: executing program 4 (id=119): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002d80)={0x0, [{0x0, 0x0, 0xffff, 0x0}, {0x0, 0x448, 0x4, &(0x7f00000001c0)="17884546e6a3115d2326f59bb74c478ef78022b56690fdddcce8de5f566ef9595fe615d88061324c2ae266fe4ec5dd1284cb5a2053eb9febb91d5ba5eeb88a049d830060a3fd4f9e6612b1422e2e838f9b573b29a26b9744d36a1370327f8771a5b828a2e6631393b2e05fc4daf7eb32f9af6861cf9f8b2aa9937751fe42d289c2ecb42f4919e16b74"}, {0x3, 0x0, 0x4d, 0x0}, {0x1, 0x0, 0xd, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x401, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x4bfe, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x5, 0x0}]}) r0 = open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 5.758393537s ago: executing program 3 (id=120): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(0x0, 0x4, 0x1c3200) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0xe08, 0xfff, 0x0, 0x0, 0x7, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) 5.61537503s ago: executing program 1 (id=121): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x3c}}, 0x0) 5.61500555s ago: executing program 4 (id=122): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 5.582754211s ago: executing program 0 (id=123): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="14fd54ab72df87e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.13938994s ago: executing program 3 (id=124): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 4.599175702s ago: executing program 1 (id=125): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") 4.597730342s ago: executing program 2 (id=126): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000380), 0x0, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.570155752s ago: executing program 4 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000001800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f00000002c0)=ANY=[], 0x4, 0x341, &(0x7f00000005c0)="$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") r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) recvmmsg(0xffffffffffffffff, &(0x7f0000009680)=[{{0x0, 0x0, 0x0}, 0x80200000}], 0x1, 0x10103, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) 2.722938312s ago: executing program 4 (id=128): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x77ffffff, 0xa]}) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) 2.704773152s ago: executing program 3 (id=129): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000210dc6431450a41d40f157e3512b4b99c026e738de5993f365a0c450b77103ed4a4ce9645d5bda31f3c7059d42c252f8bf6429ca73047cf2160668940f50a78e03514b4a241ac903d9d349a649eb2abefc56cd1ad4da51bca4e370cad9401e0899238a3ce2fbe0aab556b9ba4341a9906debdb2646298351fb5b7ae6dbf1698f4eb5cd65fab44cdf71"], 0xfd, 0x6a5, &(0x7f0000000f00)="$eJzs3UtsHHcdB/DvrDdrO6DUaZO2IKRGjYigEYmdpSQIEAEhlEOFInHphYOVOI2VTVo5LnIrRFyeV4499FCEwqEn1ANSEYeKckZCQhy45B6Ju08smtnZ9Tp+xJvEXRs+H2l2/jP/129+npl9ydoA/7cuvZpDqyly6fQrK+X2vbvtzr277Zv9cpLJJI2k2VuluJUUnyQX01vyuXJnPVyx3Twv3//ovVPvftDubTXrpWrf2KnfJlu2XK2XnEgyUa8fw4bxrjz2eMUg7jJhJ/uJg3HrbrI6SvfdX7fAvlX0njc3mUkOJ5mqXwekvjs0Pt3onryR7nIAAABwQD21lrWs5Mi44wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICDpP79/6JeGv3yiRT93/9vVftaVfPWuON9XB+POwAAAAAAAAAAeAJeWMtaVnKkv90tqu/8X6w2jlWPn8mbuZ2FLOVMVjKf5SxnKXNJZqr6d6rH1sr88vLS3HY9u93une5E1fPcoGeGep7bFFqxc+Tdycc+eAAAAAAAAAA4YHb4svxnubT+/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwHRTLRW1XLsX55Jo1mkqkkrbLdavLnfvkg+3jcAQAAAMCn4Km1rGUlR4r/9La7RfWe/9nqff9U3sytLGcxy+lkIVerzwJ67/obf19td+7dbd8sl83jfuffI4VRjZjeZw9bzzxbtThet19N8v38MKdzIpezlMX8OPNZzkJO5HtVaT5FZqqx/vWtpI5zU7yT5cPFDaFcflisz1eRTOdaFqvYzuTK4GOQRr/N0Gx/bCUbMtTIO2V2im/XHpqdXtavDm39ZrB3P5ipDurQICOzde7LbBy9t13uK73zZHL0mZr1nsbgM6hjO800cs57DtfrMte/Gs75C7uNeK8M57yM6lwag7Pv2Z1znnz5H3+5fL1z68b1a7dP75/TaFvdbvfO9rUPnn3tQSam8tzuM7G6TSY+3Lg5sVWbqREPaI+06mz0Yly/WyaXhu+W3W6y6W75YtX3SBbzg7yeq1nI+cxmLhcym6/nXNobzrDjO+e1utYao11rJ79UF6aT/Lpe7w+tQ8nRobwO3+nKfB/dsGc9S0/vIksj3pGan68L5Rw/H3rGGb8HMzE3lIlnds7Eb8szMrc7t24sXZ9/Y5fznarX5WX7y43Ph797Esfz6Mrr8Onyj1VtbTw7yrpntqybq+qODeoam+qOD+oedqW26tdwm0fq1T23ZV27qns+/6yf9h54lZPX0xm8CgFgv+hu3nX4pcOt6fvTf5t+f/oX09enX5n67uSFyS+0cuivzT9N/KHx+8Y3i5fyfn6aI+MIGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/tfcfuvtG/OdzsLSPiykMVqv8nj2OLCpvZ9ijwqTSUbp1b3T7RbNJxvGh0keuXv/twL7e77YWchnd+jVHDrD13vti7/F4xe+8aM6GQ9p3BztMp+uB9w/Py4G7J2zyzffOHv7rbe/snhz/rWF1xZunbtw/sL59tfmvnr22mJnYbb3OO4ogb2w/uw/7kgAAAAAAAAAAACA3drLf1Qo6v/WGPcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfbpVdzaDVF5mbPzJbb9+62O+XSL6+3bCZpJCl+khSfJBfTWzIzNFyx3Twv3//ovVPvftBeH6vZb9/Yqd/urCYTq2XhRJKJev1Agy1M7jBeBuNdGR6v8SjhFYMjLBN2sp84GLf/BgAA///RGv9P") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x20) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 2.627448744s ago: executing program 0 (id=130): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000000c0)={{0x1, 0x2, 0x5, 0x3}, 0x51, 0x4}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8891}, 0x2000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffff}, {0x10, 0xffff}, {0xffff}}}, 0x24}}, 0xd4) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x2000084) pread64(r1, &(0x7f0000000200)=""/151, 0x97, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) 2.556569546s ago: executing program 1 (id=131): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket(0xa, 0x5, 0x0) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @mcast2, 0xc5f}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008011}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000080)) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) fcntl$notify(r0, 0x402, 0x80000003) 1.90133617s ago: executing program 0 (id=132): openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv(r1, &(0x7f00000002c0), 0x0, 0xfffffffd, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1085408, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.793018742s ago: executing program 4 (id=133): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8040f1, 0x0, 0x1, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) unlink(&(0x7f0000000080)='./file1\x00') 720.818925ms ago: executing program 3 (id=134): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)="b4", 0x1}], 0x1}, 0x240040f4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 651.349467ms ago: executing program 0 (id=135): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$eJzs3U1vG0UfAPD/Ok7f0udpKlUVcECReqCo1GkSXorEoRwRVFSCe7GSbVTFqavYqZpQifZAL1xQhYQQlRAfgDvHii/Ap+iBShWqIjhwMVpnnbqNnbiJ27j495M2mdkdZ3Y8O+MZj50NYGhNZD8KEa9GxLdJxJG2Y8XID06sp1t7dGM225JoND77M4kk39dKn+S/x/LIKxHx29cRpwqb862trC6UK5V0KY9P1hevTtZWVk9fXizPp/PplemZmbPvzEy//967fSvrmxf+/uHTex+d/ebE2ve/PDh6J4lzcTg/1l6OXbjZHpmIifw5GY1zTyWc6kNmgyTZ6xNgR0bydj4aWR9wJEbyVg/8930VEQ1gSCXaPwyp1jigNbfv0zz4pfHww/UJ0ObyF9ffG4kDzbnRobXkiZlRNt8d70P+WR6//nH3TrZF/96HANjWzVsRcaZY3Nz/JXn/t3NnekjzdB76P3hx7mXjn7c6jX8KG+Of6DD+GevQdndi+/ZfeNCHbLrKxn8fdBz/bixajY/ksf81x3yjyaXLlTTr2/4fESdjdH8W32o95+za/Ua3Y+3jv2zL8m+NBfPzeFDc/+Rj5sr18m7K3O7hrYjXOo5/k436TzrUf/Z8XOgxj+Pp3de7Hdu+/M9X4+eINzrW/+MVrWTr9cnJ5vUw2boqNvvr9vHfu+W/1+XP6v/Q1uUfT9rXa2vPnsdPB/5Jux3b6fW/L/m8Gd6X77terteXpiL2JZ9s3j/9+LGteCt9Vv6TJ7bu/zpd/wcj4osey3/72O2uSQeh/ueeqf6fPXD/4y9/7JZ/b/X/djN0Mt/TS//X6wnu5rkDAAAAAACAQVOIiMORFEob4UKhVFr/fMexOFSoVGv1U5eqy1fmovld2fEYLbRWusfaPg8xlX8ethWffio+ExFHI+K7kYPNeGm2Wpnb68IDAAAAAAAAAAAAAAAAAADAgBjr9P3/1v9bH9njkwOeP7f8huG1bfvvx52egIHk9R+Gl/YPw0v7h+Gl/cPwKq7fzxgYQl7/YXhp/zC8tH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqwvnz2dbY+3RjdksPndtZXmheu30XFpbKC0uz5Zmq0tXS/PV6nwlLc1WF7f7e5Vq9erUdCxfn6yntfpkbWX14mJ1+Ur94uXF8nx6MR19IaUCAAAAAAAAAAAAAAAAAACAl0ttZXWhXKmkSwICOwoUB+M0BPoc2OueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe+zcAAP//eIg3rQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000818}, 0x24004884) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) 486.15495ms ago: executing program 1 (id=136): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) 318.096494ms ago: executing program 1 (id=137): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f0000000180)=0x4c, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r1, r2, 0x0, 0xffffffff000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x364, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x330, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x304, 0x1, [@m_csum={0x84, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x55, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x40, 0x5, 0x0, 0x0, {{0xa}, {0x4}, {0x11, 0x6, "ad708099198a0ec1c38872c6b6"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x2c, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x30, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1e0, 0x15, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0x8, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x6, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}]}, {0xb3, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd442"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x364}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x24}}, 0x400c0c4) socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 203.493996ms ago: executing program 3 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000001800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f00000002c0)=ANY=[], 0x4, 0x341, &(0x7f00000005c0)="$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") r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) recvmmsg(0xffffffffffffffff, &(0x7f0000009680)=[{{0x0, 0x0, 0x0}, 0x80200000}], 0x1, 0x10103, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. syzkaller login: [ 62.109880][ T4260] cgroup: Unknown subsys name 'net' [ 62.208352][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.513435][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.343922][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.352847][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.361558][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.369369][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.377281][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.385102][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.390552][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.393823][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.400083][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.413640][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.414722][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.421636][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.429904][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.436064][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.442376][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.448997][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.456875][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.463026][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.470194][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.485248][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.485295][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.492867][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.508808][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.510556][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.524064][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.531582][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.552487][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.563791][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.572965][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.580475][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.842047][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 65.977010][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 66.015331][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 66.109783][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 66.120259][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.127606][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.137576][ T4274] device bridge_slave_0 entered promiscuous mode [ 66.149396][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.156641][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.164517][ T4274] device bridge_slave_1 entered promiscuous mode [ 66.204345][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 66.228175][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.235403][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.243376][ T4272] device bridge_slave_0 entered promiscuous mode [ 66.282467][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.289704][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.298293][ T4272] device bridge_slave_1 entered promiscuous mode [ 66.307435][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.323814][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.330912][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.338939][ T4278] device bridge_slave_0 entered promiscuous mode [ 66.352447][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.361640][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.369420][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.379600][ T4278] device bridge_slave_1 entered promiscuous mode [ 66.429205][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.444999][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.452410][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.460502][ T4273] device bridge_slave_0 entered promiscuous mode [ 66.479579][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.491525][ T4274] team0: Port device team_slave_0 added [ 66.498145][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.505642][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.516300][ T4273] device bridge_slave_1 entered promiscuous mode [ 66.524873][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.548534][ T4274] team0: Port device team_slave_1 added [ 66.561239][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.617662][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.624952][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.633490][ T4283] device bridge_slave_0 entered promiscuous mode [ 66.642780][ T4272] team0: Port device team_slave_0 added [ 66.649339][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.656793][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.682821][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.696710][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.708454][ T4278] team0: Port device team_slave_0 added [ 66.715257][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.723426][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.731152][ T4283] device bridge_slave_1 entered promiscuous mode [ 66.739626][ T4272] team0: Port device team_slave_1 added [ 66.748365][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.755575][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.781850][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.794811][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.805907][ T4278] team0: Port device team_slave_1 added [ 66.863336][ T4273] team0: Port device team_slave_0 added [ 66.878762][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.885782][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.912025][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.924388][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.931366][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.958055][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.970891][ T4273] team0: Port device team_slave_1 added [ 66.981405][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.999548][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.006644][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.039918][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.051623][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.059143][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.085844][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.111700][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.134561][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.141531][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.168220][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.196754][ T4274] device hsr_slave_0 entered promiscuous mode [ 67.204183][ T4274] device hsr_slave_1 entered promiscuous mode [ 67.212985][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.219959][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.246065][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.264133][ T4283] team0: Port device team_slave_0 added [ 67.305303][ T4283] team0: Port device team_slave_1 added [ 67.314479][ T4273] device hsr_slave_0 entered promiscuous mode [ 67.321128][ T4273] device hsr_slave_1 entered promiscuous mode [ 67.328302][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.336350][ T4273] Cannot create hsr debugfs directory [ 67.375717][ T4278] device hsr_slave_0 entered promiscuous mode [ 67.382660][ T4278] device hsr_slave_1 entered promiscuous mode [ 67.389194][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.396888][ T4278] Cannot create hsr debugfs directory [ 67.406172][ T4272] device hsr_slave_0 entered promiscuous mode [ 67.413064][ T4272] device hsr_slave_1 entered promiscuous mode [ 67.419539][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.427384][ T4272] Cannot create hsr debugfs directory [ 67.450979][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.458318][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.484426][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.514109][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.521090][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.547626][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.572566][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 67.581879][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 67.582684][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 67.651905][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 67.658194][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 67.708236][ T4283] device hsr_slave_0 entered promiscuous mode [ 67.715579][ T4283] device hsr_slave_1 entered promiscuous mode [ 67.722862][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.730442][ T4283] Cannot create hsr debugfs directory [ 67.917631][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.927615][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.952191][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.974678][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.001494][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.010981][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.040724][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.071412][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.100497][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.112471][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.146965][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.173642][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.230814][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.244592][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.267359][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.277341][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.288828][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.337353][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.348961][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.375313][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.386644][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.405395][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.414370][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.424641][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.431970][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.452939][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.463429][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.480062][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.487856][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.499125][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.507979][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.516799][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.523944][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.536921][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.547563][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.556239][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.568767][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.578358][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.608170][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.618172][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.627816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.636721][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.643847][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.652309][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.666239][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.678021][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.711309][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.720500][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.730249][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.738769][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.745902][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.754904][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.763850][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.772845][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.781593][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.791115][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.800177][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.808991][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.817596][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.826757][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.839901][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.858342][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.870640][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.894577][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.903446][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.913065][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.921683][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.930558][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.939199][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.949562][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.958139][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.966745][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.981463][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.999997][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.011717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.020066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.061101][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.073947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.093037][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.112744][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.119870][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.146766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.195624][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.210809][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.220781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.229487][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.239455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.250245][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.257424][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.299446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.312770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.329699][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.345588][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.352763][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.368147][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.378854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.387977][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.396669][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.403794][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.417735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.426464][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.436274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.445023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.454749][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.488775][ T4283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.503216][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.516346][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.524932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.535091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.543980][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.554062][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.563013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.570497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.578792][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.588217][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.597224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.606109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.625219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.633452][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.649470][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.652071][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 69.660183][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 69.666120][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 69.676901][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.693106][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.708098][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.718097][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.729017][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.737305][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 69.737314][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 69.757847][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.768860][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.781144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.808425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.840418][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.853697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.861523][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.869958][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.879219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.894832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.908963][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.932216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.941053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.977890][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.985094][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.014500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.032738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.046891][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.054058][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.066471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.090390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.100080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.109643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.127307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.147897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.168940][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.206341][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.215299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.225641][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.243142][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.250675][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.283142][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.304432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.315915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.338039][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.350351][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.381068][ T4274] device veth0_vlan entered promiscuous mode [ 70.402203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.410612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.419300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.429109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.437959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.447150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.455893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.465144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.474600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.482501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.496508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.510639][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.539897][ T4274] device veth1_vlan entered promiscuous mode [ 70.565781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.583785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.611216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.641599][ T4272] device veth0_vlan entered promiscuous mode [ 70.690470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.699838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.708233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.730265][ T4272] device veth1_vlan entered promiscuous mode [ 70.749135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.760124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.770330][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.788005][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.799649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.814183][ T4274] device veth0_macvtap entered promiscuous mode [ 70.881451][ T4274] device veth1_macvtap entered promiscuous mode [ 70.895916][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.910619][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.926170][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.948569][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.957758][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.967588][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.976311][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.993125][ T4273] device veth0_vlan entered promiscuous mode [ 71.011212][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.025235][ T4272] device veth0_macvtap entered promiscuous mode [ 71.033482][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.044264][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.054647][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.064418][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.073434][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.089467][ T4273] device veth1_vlan entered promiscuous mode [ 71.101421][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.114042][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.123482][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.132372][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.141081][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.163981][ T4272] device veth1_macvtap entered promiscuous mode [ 71.181194][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.189242][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.198543][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.207422][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.214897][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.245291][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.255287][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.266873][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.273382][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.287263][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.328998][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.341051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.354532][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.363802][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.398583][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.414577][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.426128][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.438828][ T4273] device veth0_macvtap entered promiscuous mode [ 71.455304][ T4273] device veth1_macvtap entered promiscuous mode [ 71.471218][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.480303][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.488814][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.498058][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.506452][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.515562][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.526019][ T4283] device veth0_vlan entered promiscuous mode [ 71.577114][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.589443][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.604898][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.613670][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.623020][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.632435][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.641156][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.662117][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.672962][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.683248][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.693722][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.704908][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.726479][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.735268][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 71.735287][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 71.741268][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 71.754795][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.764086][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.773344][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.782716][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.791420][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.803116][ T4283] device veth1_vlan entered promiscuous mode [ 71.811469][ T4278] device veth0_vlan entered promiscuous mode [ 71.817714][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 71.824233][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 71.830663][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.839635][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.848661][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.857590][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.866156][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.875269][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.885053][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.897744][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.928567][ T4278] device veth1_vlan entered promiscuous mode [ 71.936641][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.947729][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.957884][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.968402][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.981721][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.013110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.027024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.036154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.045762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.059065][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.070645][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.079655][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.089090][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.101481][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.116434][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.141150][ T4283] device veth0_macvtap entered promiscuous mode [ 72.151006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.159528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.170143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.180962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.190549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.199456][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.246872][ T4283] device veth1_macvtap entered promiscuous mode [ 72.270134][ T4278] device veth0_macvtap entered promiscuous mode [ 72.315921][ T4278] device veth1_macvtap entered promiscuous mode [ 72.358776][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.372176][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.383828][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.402729][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.414303][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.418330][ T4360] overlayfs: missing 'lowerdir' [ 72.429425][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.440831][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.453723][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.466058][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.487711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.504675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.533387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.543074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.560022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.591628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.605356][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.617988][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.628520][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.640559][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.650750][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.661404][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.674556][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.683405][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.703122][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.732749][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.766867][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.810988][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.860271][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.898875][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.945119][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.048290][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.113996][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.199597][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.247827][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.338349][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.380354][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.434900][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.471888][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.480685][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.495068][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.511895][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.539447][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.557231][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.567263][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.578285][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.588188][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.598756][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.609016][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.623217][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.658801][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.679599][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.689032][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.703485][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.724235][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.748525][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.798015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.844734][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.851822][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 73.853679][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 73.859425][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 73.874271][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.883449][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.893776][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.902046][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 73.902615][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 74.005303][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.046843][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.104568][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.118097][ T4375] loop2: detected capacity change from 0 to 16 [ 74.231617][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.270832][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.337449][ T4375] erofs: (device loop2): mounted with root inode @ nid 36. [ 74.518527][ T4381] loop1: detected capacity change from 0 to 16 [ 74.619413][ T4381] erofs: (device loop1): mounted with root inode @ nid 36. [ 74.653553][ T4288] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 74.664811][ T4289] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 74.695112][ T4381] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 74.722239][ T27] audit: type=1800 audit(1782814143.866:2): pid=4381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 74.788079][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.829124][ T4374] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 75.026585][ T4381] syz.1.8 (4381) used greatest stack depth: 19120 bytes left [ 75.076089][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.084894][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.121784][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.225639][ T27] audit: type=1800 audit(1782814144.376:3): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 75.471757][ C0] sched: RT throttling activated [ 75.486952][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.495677][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.544288][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.658851][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.687118][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.728725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.373378][ T4390] loop4: detected capacity change from 0 to 7 [ 76.383626][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.409187][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.418489][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 76.459097][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.468323][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 76.481769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 76.512617][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.521842][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 76.530951][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.540191][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 76.551782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 76.559373][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.569224][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 76.571772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 76.591765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #392!!! [ 76.641763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.750660][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.751785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 76.759926][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 76.771763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 76.896482][ T4398] lo speed is unknown, defaulting to 1000 [ 76.971760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39a!!! [ 77.132768][ T4398] lo speed is unknown, defaulting to 1000 [ 77.153905][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.163127][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.172257][ T4356] ldm_validate_partition_table(): Disk read failed. [ 77.221074][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.230343][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.244287][ T4398] lo speed is unknown, defaulting to 1000 [ 77.251783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!! [ 77.265963][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.275224][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.298276][ T4398] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.313099][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.322348][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.331512][ T4356] Dev loop4: unable to read RDB block 0 [ 77.346474][ T4356] loop4: unable to read partition table [ 77.356275][ T4398] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 77.370360][ T4356] loop4: partition table beyond EOD, truncated [ 77.471931][ T4398] lo speed is unknown, defaulting to 1000 [ 77.494118][ T4398] lo speed is unknown, defaulting to 1000 [ 77.530407][ T4398] lo speed is unknown, defaulting to 1000 [ 77.545714][ T4406] overlayfs: missing 'lowerdir' [ 77.553737][ T4398] lo speed is unknown, defaulting to 1000 [ 77.613333][ T4398] lo speed is unknown, defaulting to 1000 [ 78.172124][ T4320] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.245703][ T4320] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.301816][ T4320] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 79.327277][ T4320] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 79.338116][ T4320] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.357487][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.859054][ T4320] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 79.890700][ T4356] udevd[4356]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.939206][ T4320] usb 5-1: USB disconnect, device number 2 [ 80.113537][ T4424] binder: 4422:4424 ioctl c0306201 0 returned -14 [ 81.316799][ T4433] loop1: detected capacity change from 0 to 1024 [ 81.501796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 82.193530][ T7] cfg80211: failed to load regulatory.db [ 82.252628][ T4433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 82.298188][ T4443] loop4: detected capacity change from 0 to 7 [ 82.305721][ C1] blk_print_req_error: 11 callbacks suppressed [ 82.305736][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.321135][ C1] buffer_io_error: 10 callbacks suppressed [ 82.321143][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 82.338433][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.347683][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 82.505357][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.514635][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 82.904963][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.914211][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 82.938704][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.947952][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.006998][ T4451] overlayfs: missing 'lowerdir' [ 83.020277][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.029523][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.044373][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 83.146785][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.155979][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.167133][ T4379] ldm_validate_partition_table(): Disk read failed. [ 83.182171][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.191305][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.333139][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.342335][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.359835][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.369041][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.489567][ T4379] Dev loop4: unable to read RDB block 0 [ 84.628239][ T4464] loop3: detected capacity change from 0 to 32768 [ 84.679040][ T4379] loop4: unable to read partition table [ 84.685175][ T4379] loop4: partition table beyond EOD, truncated [ 84.779219][ T4464] XFS (loop3): Mounting V5 Filesystem [ 84.790888][ T4475] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.831981][ T4464] XFS (loop3): Ending clean mount [ 85.031954][ T4323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.314234][ T4323] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.379127][ T4323] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 85.447535][ T4323] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 85.458155][ T4323] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.472425][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.512708][ T4278] XFS (loop3): Unmounting Filesystem [ 85.715947][ T4323] snd-usb-audio: probe of 2-1:27.0 failed with error -12 [ 85.763533][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.793714][ T4323] usb 2-1: USB disconnect, device number 2 [ 88.003202][ T4511] loop1: detected capacity change from 0 to 64 [ 88.058716][ T4511] hfs: bad catalog namelength [ 88.063802][ T4511] hfs: get root inode failed [ 88.580832][ T4509] loop2: detected capacity change from 0 to 1024 [ 88.619284][ T4356] blk_print_req_error: 11 callbacks suppressed [ 88.619300][ T4356] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.892193][ T4509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.022851][ T4515] loop4: detected capacity change from 0 to 16 [ 89.084425][ T4515] erofs: (device loop4): mounted with root inode @ nid 36. [ 89.099234][ T4288] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 89.112607][ T4513] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 89.572981][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 89.621807][ T27] audit: type=1800 audit(1782814158.766:4): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.37" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 91.098228][ T4544] trusted_key: encrypted_key: insufficient parameters specified [ 93.356307][ T4558] loop0: detected capacity change from 0 to 32768 [ 94.745555][ T4558] XFS (loop0): Mounting V5 Filesystem [ 94.793801][ T4567] loop2: detected capacity change from 0 to 1024 [ 94.955835][ T4558] XFS (loop0): Ending clean mount [ 96.258675][ T4273] XFS (loop0): Unmounting Filesystem [ 97.990714][ T4588] loop3: detected capacity change from 0 to 32768 [ 98.067245][ T4588] ======================================================= [ 98.067245][ T4588] WARNING: The mand mount option has been deprecated and [ 98.067245][ T4588] and is ignored by this kernel. Remove the mand [ 98.067245][ T4588] option from the mount to silence this warning. [ 98.067245][ T4588] ======================================================= [ 98.524874][ T4601] loop0: detected capacity change from 0 to 64 [ 99.304109][ T4588] (syz.3.52,4588,0):ocfs2_initialize_super:2286 ERROR: status = -12 [ 99.322856][ T4588] (syz.3.52,4588,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 100.141168][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 100.319652][ T4288] Bluetooth: Wrong link type (-22) [ 101.782504][ T4321] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 101.979055][ T4321] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.997798][ T4321] usb 5-1: config 8 has an invalid interface number: 109 but max is 0 [ 102.008928][ T4321] usb 5-1: config 8 has no interface number 0 [ 102.048210][ T4321] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 102.091603][ T4321] usb 5-1: config 8 interface 109 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 102.185589][ T4321] usb 5-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.231620][ T4321] usb 5-1: string descriptor 0 read error: -22 [ 102.258739][ T4321] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 102.297849][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.553285][ T4648] xt_hashlimit: max too large, truncated to 1048576 [ 105.047387][ T4321] metro_usb 5-1:8.109: required endpoints missing [ 105.709482][ T4321] usb 5-1: USB disconnect, device number 3 [ 105.758659][ T4654] loop0: detected capacity change from 0 to 8 [ 105.960798][ T4654] SQUASHFS error: xz decompression failed, data probably corrupt [ 106.082377][ T4654] SQUASHFS error: Failed to read block 0x108: -5 [ 106.121955][ T4654] SQUASHFS error: Unable to read metadata cache entry [106] [ 106.180541][ T4661] loop3: detected capacity change from 0 to 16 [ 107.476815][ T4661] erofs: (device loop3): mounted with root inode @ nid 36. [ 107.492840][ T4288] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 107.505218][ T4654] SQUASHFS error: Unable to read inode 0x11f [ 107.524430][ T4661] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 107.536977][ T27] audit: type=1800 audit(1782814176.696:5): pid=4661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 108.462193][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 108.621473][ T4674] lo speed is unknown, defaulting to 1000 [ 108.645442][ T4674] lo speed is unknown, defaulting to 1000 [ 108.654966][ T4674] lo speed is unknown, defaulting to 1000 [ 108.668868][ T4674] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 108.795709][ T4674] lo speed is unknown, defaulting to 1000 [ 108.847878][ T4674] lo speed is unknown, defaulting to 1000 [ 108.856464][ T4674] lo speed is unknown, defaulting to 1000 [ 108.863717][ T4674] lo speed is unknown, defaulting to 1000 [ 108.870674][ T4674] lo speed is unknown, defaulting to 1000 [ 111.440970][ T4707] loop3: detected capacity change from 0 to 16 [ 112.516369][ T4707] erofs: (device loop3): mounted with root inode @ nid 36. [ 113.173701][ T27] audit: type=1800 audit(1782814181.936:6): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.83" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 113.300791][ T4288] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 113.383667][ T7] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 113.540026][ T4711] loop1: detected capacity change from 0 to 64 [ 113.597520][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.252531][ T7] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 115.281884][ T7] usb 1-1: can't read configurations, error -71 [ 115.381869][ T4715] loop3: detected capacity change from 0 to 8 [ 115.425851][ T4715] SQUASHFS error: xz decompression failed, data probably corrupt [ 115.472193][ T4715] SQUASHFS error: Failed to read block 0x108: -5 [ 115.478553][ T4715] SQUASHFS error: Unable to read metadata cache entry [106] [ 115.504907][ T4715] SQUASHFS error: Unable to read inode 0x11f [ 116.253118][ T4730] loop1: detected capacity change from 0 to 1024 [ 116.310433][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 116.752874][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056b04000: rx timeout, send abort [ 116.838231][ T4733] siw: device registration error -23 [ 118.049948][ T4747] Zero length message leads to an empty skb [ 118.241691][ T4752] loop4: detected capacity change from 0 to 64 [ 118.898310][ T4765] loop0: detected capacity change from 0 to 1024 [ 119.170990][ T4762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.179319][ T4762] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.205540][ T4762] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 119.280884][ T4762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.383955][ T4762] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.413316][ T4762] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 119.429056][ T4762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.446929][ T4762] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.485293][ T4762] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 119.524287][ T4762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.534712][ T4762] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.548381][ T4762] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 119.561888][ T4762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 119.568465][ T4762] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 119.706740][ T4773] loop1: detected capacity change from 0 to 32768 [ 119.723355][ T4762] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 119.774792][ T4773] XFS (loop1): Mounting V5 Filesystem [ 119.910127][ T4773] XFS (loop1): Ending clean mount [ 120.457977][ T4272] XFS (loop1): Unmounting Filesystem [ 120.701822][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.812500][ T4793] binder: 4790:4793 ioctl c0306201 0 returned -14 [ 121.331960][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.491803][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.571934][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 121.578132][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.907384][ T4800] loop2: detected capacity change from 0 to 64 [ 122.361078][ T4806] loop3: detected capacity change from 0 to 1024 [ 122.391832][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.591975][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 122.600133][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.750525][ T26] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.771959][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 122.846688][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.891370][ T26] usb 3-1: config 0 descriptor?? [ 123.200379][ T26] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 123.421915][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 123.571818][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 123.592235][ T4813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.600461][ T4813] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.619191][ T4813] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 123.626754][ T4813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.641443][ T4813] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.653003][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 123.659772][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 123.672943][ T4813] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 123.688620][ T4813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.695931][ T4813] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.716504][ T4813] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 123.742047][ T7] usb 3-1: USB disconnect, device number 2 [ 123.746291][ T4813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.791112][ T4813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.811639][ T4813] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 123.820352][ T4813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.830395][ T4813] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.854448][ T4813] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 124.084880][ T4827] loop4: detected capacity change from 0 to 1024 [ 124.099971][ T4827] EXT4-fs: Ignoring removed orlov option [ 124.205657][ T4827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.014225][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 125.091852][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.129016][ T4836] binder: 4833:4836 ioctl c0306201 0 returned -14 [ 125.662447][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.731915][ T4289] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.811779][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.891845][ T4289] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.043580][ T4843] loop1: detected capacity change from 0 to 64 [ 126.120560][ T4844] loop4: detected capacity change from 0 to 64 [ 126.142871][ T4844] hfs: bad catalog namelength [ 126.147614][ T4844] hfs: get root inode failed [ 127.182014][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 127.626995][ T4854] loop3: detected capacity change from 0 to 1024 [ 127.741838][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 127.821853][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 127.892012][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 127.971849][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 127.998037][ T4863] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 129.028687][ T4868] loop0: detected capacity change from 0 to 1024 [ 129.137587][ T4868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.374895][ T4860] loop4: detected capacity change from 0 to 32768 [ 129.616726][ T4860] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 129.671124][ T4860] [ 129.673503][ T4860] ====================================================== [ 129.680532][ T4860] WARNING: possible circular locking dependency detected [ 129.687573][ T4860] syzkaller #0 Not tainted [ 129.692000][ T4860] ------------------------------------------------------ [ 129.699025][ T4860] syz.4.133/4860 is trying to acquire lock: [ 129.704925][ T4860] ffff888072edd488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1a2/0x820 [ 129.715920][ T4860] [ 129.715920][ T4860] but task is already holding lock: [ 129.723295][ T4860] ffff888074348660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x6b7/0x4c40 [ 129.733859][ T4860] [ 129.733859][ T4860] which lock already depends on the new lock. [ 129.733859][ T4860] [ 129.744276][ T4860] [ 129.744276][ T4860] the existing dependency chain (in reverse order) is: [ 129.753303][ T4860] [ 129.753303][ T4860] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 129.762089][ T4860] down_read+0x42/0x2d0 [ 129.766779][ T4860] ocfs2_read_virt_blocks+0x266/0x980 [ 129.772698][ T4860] ocfs2_find_entry+0x3a8/0x2080 [ 129.778173][ T4860] ocfs2_find_files_on_disk+0x102/0x390 [ 129.784249][ T4860] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 129.790321][ T4860] ocfs2_get_system_file_inode+0x34d/0x820 [ 129.796745][ T4860] ocfs2_init_global_system_inodes+0x315/0x6e0 [ 129.803423][ T4860] ocfs2_fill_super+0x2b5a/0x5020 [ 129.808967][ T4860] mount_bdev+0x28a/0x3c0 [ 129.813816][ T4860] legacy_get_tree+0xe6/0x180 [ 129.819012][ T4860] vfs_get_tree+0x88/0x270 [ 129.823946][ T4860] do_new_mount+0x247/0xa40 [ 129.828963][ T4860] __se_sys_mount+0x2e3/0x3d0 [ 129.834163][ T4860] do_syscall_64+0x4c/0xa0 [ 129.839097][ T4860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.845515][ T4860] [ 129.845515][ T4860] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 129.853860][ T4860] __lock_acquire+0x2c92/0x7bd0 [ 129.859238][ T4860] lock_acquire+0x1bb/0x4a0 [ 129.864265][ T4860] __mutex_lock+0x12d/0xae0 [ 129.869284][ T4860] ocfs2_get_system_file_inode+0x1a2/0x820 [ 129.875605][ T4860] ocfs2_reserve_suballoc_bits+0x12e/0x4810 [ 129.882040][ T4860] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 129.888887][ T4860] ocfs2_extend_dir+0xd70/0x4c40 [ 129.894345][ T4860] ocfs2_prepare_dir_for_insert+0x3217/0x5600 [ 129.900932][ T4860] ocfs2_mknod+0xb46/0x2580 [ 129.905954][ T4860] ocfs2_mkdir+0x1b6/0x4b0 [ 129.910888][ T4860] vfs_mkdir+0x386/0x570 [ 129.915649][ T4860] do_mkdirat+0x1d8/0x440 [ 129.920492][ T4860] __x64_sys_mkdirat+0x85/0x90 [ 129.925773][ T4860] do_syscall_64+0x4c/0xa0 [ 129.930710][ T4860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.937133][ T4860] [ 129.937133][ T4860] other info that might help us debug this: [ 129.937133][ T4860] [ 129.947354][ T4860] Possible unsafe locking scenario: [ 129.947354][ T4860] [ 129.954796][ T4860] CPU0 CPU1 [ 129.960152][ T4860] ---- ---- [ 129.965510][ T4860] lock(&ocfs2_file_ip_alloc_sem_key); [ 129.971051][ T4860] lock(&osb->system_file_mutex); [ 129.978674][ T4860] lock(&ocfs2_file_ip_alloc_sem_key); [ 129.986734][ T4860] lock(&osb->system_file_mutex); [ 129.991841][ T4860] [ 129.991841][ T4860] *** DEADLOCK *** [ 129.991841][ T4860] [ 130.000004][ T4860] 3 locks held by syz.4.133/4860: [ 130.005019][ T4860] #0: ffff8880546b0460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 130.014250][ T4860] #1: ffff8880743489c8 (&type->i_mutex_dir_key#10/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 130.024967][ T4860] #2: ffff888074348660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x6b7/0x4c40 [ 130.035927][ T4860] [ 130.035927][ T4860] stack backtrace: [ 130.041823][ T4860] CPU: 1 PID: 4860 Comm: syz.4.133 Not tainted syzkaller #0 [ 130.049105][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.059165][ T4860] Call Trace: [ 130.062445][ T4860] [ 130.065372][ T4860] dump_stack_lvl+0x188/0x24e [ 130.070051][ T4860] ? load_image+0x410/0x410 [ 130.074557][ T4860] ? show_regs_print_info+0x12/0x12 [ 130.079774][ T4860] ? print_circular_bug+0x12b/0x1a0 [ 130.084988][ T4860] check_noncircular+0x296/0x330 [ 130.089941][ T4860] ? add_chain_block+0x9b0/0x9b0 [ 130.094901][ T4860] ? lockdep_lock+0xf1/0x1f0 [ 130.099496][ T4860] ? _find_first_zero_bit+0xd2/0x100 [ 130.104778][ T4860] __lock_acquire+0x2c92/0x7bd0 [ 130.109635][ T4860] ? mark_lock+0x94/0x320 [ 130.113964][ T4860] ? verify_lock_unused+0x140/0x140 [ 130.119247][ T4860] ? __lock_acquire+0x13e3/0x7bd0 [ 130.124281][ T4860] lock_acquire+0x1bb/0x4a0 [ 130.128785][ T4860] ? ocfs2_get_system_file_inode+0x1a2/0x820 [ 130.134763][ T4860] ? __might_sleep+0xd0/0xd0 [ 130.139347][ T4860] ? read_lock_is_recursive+0x10/0x10 [ 130.144747][ T4860] ? check_path+0x40/0x40 [ 130.149078][ T4860] ? check_path+0x21/0x40 [ 130.153411][ T4860] ? check_noncircular+0x189/0x330 [ 130.158525][ T4860] __mutex_lock+0x12d/0xae0 [ 130.163025][ T4860] ? ocfs2_get_system_file_inode+0x1a2/0x820 [ 130.169001][ T4860] ? ocfs2_get_system_file_inode+0x14f/0x820 [ 130.174976][ T4860] ? ocfs2_get_system_file_inode+0x1a2/0x820 [ 130.180976][ T4860] ? mutex_lock_nested+0x10/0x10 [ 130.185907][ T4860] ? do_raw_spin_lock+0x128/0x2f0 [ 130.190933][ T4860] ? __rwlock_init+0x140/0x140 [ 130.195689][ T4860] ? __lock_acquire+0x2854/0x7bd0 [ 130.200713][ T4860] ? do_raw_spin_unlock+0x11d/0x230 [ 130.205908][ T4860] ocfs2_get_system_file_inode+0x1a2/0x820 [ 130.211717][ T4860] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 130.217866][ T4860] ? verify_lock_unused+0x140/0x140 [ 130.223068][ T4860] ocfs2_reserve_suballoc_bits+0x12e/0x4810 [ 130.228958][ T4860] ? mark_lock+0x94/0x320 [ 130.233292][ T4860] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.239271][ T4860] ? __lock_acquire+0x7bd0/0x7bd0 [ 130.244291][ T4860] ? lock_chain_count+0x20/0x20 [ 130.249139][ T4860] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 130.255036][ T4860] ? lockdep_hardirqs_on+0x94/0x140 [ 130.260231][ T4860] ? ocfs2_block_group_search+0x4f0/0x4f0 [ 130.265946][ T4860] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 130.271852][ T4860] ? _raw_spin_unlock+0x40/0x40 [ 130.276725][ T4860] ? stack_trace_save+0xa6/0xf0 [ 130.281585][ T4860] ? __stack_depot_save+0x439/0x480 [ 130.286792][ T4860] ? kasan_set_track+0x60/0x70 [ 130.291558][ T4860] ? kasan_set_track+0x4b/0x70 [ 130.296322][ T4860] ? __kasan_kmalloc+0x8e/0xa0 [ 130.301089][ T4860] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 130.307584][ T4860] ? ocfs2_extend_dir+0xd70/0x4c40 [ 130.312692][ T4860] ? ocfs2_prepare_dir_for_insert+0x3217/0x5600 [ 130.318924][ T4860] ? ocfs2_mknod+0xb46/0x2580 [ 130.323598][ T4860] ? ocfs2_mkdir+0x1b6/0x4b0 [ 130.328184][ T4860] ? vfs_mkdir+0x386/0x570 [ 130.332594][ T4860] ? do_mkdirat+0x1d8/0x440 [ 130.337093][ T4860] ? __x64_sys_mkdirat+0x85/0x90 [ 130.342026][ T4860] ? do_syscall_64+0x4c/0xa0 [ 130.346608][ T4860] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.352693][ T4860] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 130.359018][ T4860] ? ocfs2_init_steal_slots+0x150/0x150 [ 130.364556][ T4860] ? rwsem_write_trylock+0x135/0x1c0 [ 130.369839][ T4860] ? clear_nonspinnable+0x60/0x60 [ 130.374868][ T4860] ocfs2_extend_dir+0xd70/0x4c40 [ 130.379810][ T4860] ? ocfs2_dx_dir_name_hash+0xbd0/0xbd0 [ 130.385359][ T4860] ? __lock_acquire+0x13e3/0x7bd0 [ 130.390381][ T4860] ? ocfs2_allocate_extend_trans+0x670/0x670 [ 130.396359][ T4860] ? verify_lock_unused+0x140/0x140 [ 130.401560][ T4860] ? __lock_acquire+0x13e3/0x7bd0 [ 130.406585][ T4860] ? verify_lock_unused+0x140/0x140 [ 130.411786][ T4860] ? ocfs2_buffer_cached+0x34d/0x8d0 [ 130.417071][ T4860] ? __lock_acquire+0x7bd0/0x7bd0 [ 130.422094][ T4860] ? do_raw_spin_lock+0x128/0x2f0 [ 130.427117][ T4860] ? ocfs2_read_blocks+0x11d9/0x1690 [ 130.432400][ T4860] ? ocfs2_set_buffer_uptodate+0xac/0x1360 [ 130.438203][ T4860] ? ocfs2_dx_dir_name_hash+0xa02/0xbd0 [ 130.443744][ T4860] ? ocfs2_prepare_dir_for_insert+0x5600/0x5600 [ 130.449982][ T4860] ? ocfs2_buffer_cached+0x3ef/0x8d0 [ 130.455261][ T4860] ocfs2_prepare_dir_for_insert+0x3217/0x5600 [ 130.461331][ T4860] ? ocfs2_set_buffer_uptodate+0xac/0x1360 [ 130.467137][ T4860] ? ocfs2_fill_new_dir_el+0xad0/0xad0 [ 130.472592][ T4860] ? rcu_is_watching+0x11/0xa0 [ 130.477361][ T4860] ? ocfs2_search_dirblock+0x33a/0x860 [ 130.482815][ T4860] ? ocfs2_read_dir_block_direct+0x4b0/0x4b0 [ 130.488793][ T4860] ? rcu_is_watching+0x11/0xa0 [ 130.493560][ T4860] ? ocfs2_buffer_cached+0x3ef/0x8d0 [ 130.498842][ T4860] ? __brelse+0x55/0x90 [ 130.502998][ T4860] ? ocfs2_find_entry+0x13dd/0x2080 [ 130.508195][ T4860] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 130.514257][ T4860] ? ocfs2_read_blocks_sync+0xc60/0xc60 [ 130.519798][ T4860] ? ocfs2_inode_lock_full_nested+0x149/0x1b10 [ 130.525956][ T4860] ? ocfs2_read_inode_block+0x120/0x190 [ 130.531495][ T4860] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 130.537470][ T4860] ? do_raw_spin_unlock+0x11d/0x230 [ 130.542666][ T4860] ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10 [ 130.548817][ T4860] ? __kernel_text_address+0x9/0x30 [ 130.554023][ T4860] ? unwind_get_return_address+0x49/0x80 [ 130.559656][ T4860] ? ocfs2_downconvert_lock+0x500/0x500 [ 130.565201][ T4860] ? ocfs2_check_dir_for_entry+0x25d/0x450 [ 130.571009][ T4860] ? ocfs2_lookup_ino_from_name+0xf0/0xf0 [ 130.576724][ T4860] ? mark_lock+0x94/0x320 [ 130.581056][ T4860] ocfs2_mknod+0xb46/0x2580 [ 130.585559][ T4860] ? ocfs2_mkdir+0x4b0/0x4b0 [ 130.590147][ T4860] ? __lock_acquire+0x13e3/0x7bd0 [ 130.595174][ T4860] ? verify_lock_unused+0x140/0x140 [ 130.600370][ T4860] ? _raw_spin_unlock+0x24/0x40 [ 130.605226][ T4860] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 130.610942][ T4860] ? __kmem_cache_free+0xb6/0x200 [ 130.615972][ T4860] ? __lock_acquire+0x7bd0/0x7bd0 [ 130.620995][ T4860] ? do_raw_spin_lock+0x128/0x2f0 [ 130.626017][ T4860] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 130.631911][ T4860] ? __lock_acquire+0x7bd0/0x7bd0 [ 130.636935][ T4860] ? __rwlock_init+0x140/0x140 [ 130.641689][ T4860] ? ocfs2_lookup+0x51c/0xae0 [ 130.646368][ T4860] ? do_raw_spin_unlock+0x11d/0x230 [ 130.651561][ T4860] ? put_pid+0xda/0x120 [ 130.655721][ T4860] ocfs2_mkdir+0x1b6/0x4b0 [ 130.660138][ T4860] ? make_kgid+0x650/0x650 [ 130.664549][ T4860] ? ocfs2_symlink+0x2810/0x2810 [ 130.669480][ T4860] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 130.674410][ T4860] ? ocfs2_getattr+0x360/0x360 [ 130.679173][ T4860] ? inode_permission+0xef/0x480 [ 130.684102][ T4860] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 130.689125][ T4860] ? security_inode_mkdir+0xb3/0x100 [ 130.694409][ T4860] vfs_mkdir+0x386/0x570 [ 130.698648][ T4860] do_mkdirat+0x1d8/0x440 [ 130.702973][ T4860] ? vfs_mkdir+0x570/0x570 [ 130.707383][ T4860] __x64_sys_mkdirat+0x85/0x90 [ 130.712141][ T4860] do_syscall_64+0x4c/0xa0 [ 130.716561][ T4860] ? clear_bhb_loop+0x60/0xb0 [ 130.721230][ T4860] ? clear_bhb_loop+0x60/0xb0 [ 130.725899][ T4860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.731805][ T4860] RIP: 0033:0x7fa9df39bcc7 [ 130.736218][ T4860] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.755816][ T4860] RSP: 002b:00007fa9e029fe58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 130.764232][ T4860] RAX: ffffffffffffffda RBX: 00007fa9e029fee0 RCX: 00007fa9df39bcc7 [ 130.773783][ T4860] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c [ 130.781756][ T4860] RBP: 0000200000000200 R08: 0000200000000000 R09: 0000000000000000 [ 130.789724][ T4860] R10: 0000200000000200 R11: 0000000000000246 R12: 00002000000000c0 [ 130.797693][ T4860] R13: 00007fa9e029fea0 R14: 0000000000000000 R15: 0000000000000000 [ 130.805664][ T4860] [ 130.841545][ T27] audit: type=1800 audit(1782814199.986:7): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.133" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 130.871664][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 131.002367][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 131.094904][ T4888] loop2: detected capacity change from 0 to 64 [ 131.105826][ T4888] hfs: bad catalog namelength [ 131.110548][ T4888] hfs: get root inode failed [ 131.162191][ T4495] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.703566][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.709879][ T1269] ieee802154 phy1 wpan1: encryption failed: -22