last executing test programs: 4m59.715647633s ago: executing program 0 (id=10): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x2b06, 0x0, 0x0, &(0x7f0000ffe000)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r2, r2, 0x0, 0x40008) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000cbf96bfe59388880b5b7080c0832fa06c26c9b37dc70f0940900000099442e1121cf1186b59fba8e32dfcca153e76a82a1154ee6a635e21992c8934aa57f6b0cc3ad23a82eb11038d1d98d6c6ff6499d854752edbcec7b66bb988a697f4c76fa9f824749deac7abb00b2bb6fd7c57c9ba633179cb7a8c220c492dee2c9777318fec7dcc1aab10a8f1989c59f649cf83d49afc92afb6da09da573d8d77642bdbac22ead6c09c16a632b19ee73aa693cc5dc0179", @ANYRES16=r1, @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x4008c}, 0x4004000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) 4m53.286083273s ago: executing program 0 (id=18): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x0, 0x280, 0x280, 0x0, 0x280, 0x338, 0x365, 0x350, 0x338, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x248, 0x270, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, @common=@inet=@set4={{0x50}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'rose0\x00', 'veth0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000b80)={'wlan0\x00', &(0x7f0000000b40)=@ethtool_rxfh_indir={0x38}}) 4m51.314907692s ago: executing program 0 (id=21): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0xd) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2, 0x2}, {&(0x7f0000000900)=""/230, 0xe6}, &(0x7f0000000b80), 0x0, 0x40, 0xd}}], 0x48, 0x90}, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) 4m50.193974073s ago: executing program 0 (id=23): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x1, 0xfffffffc, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000240)=""/152, 0x98}], 0x1) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 4m43.256904854s ago: executing program 0 (id=32): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, 0x0, 0x0, 0xfffeffff) epoll_pwait(r0, 0x0, 0x0, 0xea5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="f1a0fa9090d465b080d9209c8845fdcaef275aaa15abcd5cd1153a72ef30f13819e7e8929f54ba0f61cab747ec572e7721478ce702eaa7b41015c3215e1643c7ec", 0x41}], 0x1}}], 0x1, 0x4000) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x500f}}, {@nodecompose}, {}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'cp949'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$eJzs3c9rHOcZB/DvrNay5YKzSewkLS0V9qElprZWmzg6FOqWUnQIJdBLLjkIex0Lr5UgbYoSSpH789r/IClFPvfUQ+nBkJ577VHQQw6F3nVzmdlZaW0rshQr2lXy+cC77zv7zrzzzOOZVzuzmA3wtbX4dk49SJHFy2+ul8tbm53e1mbn7rCd5HSSRtIcVClWkuLT5HoGJd8s36yHKz5vP+98/MbCZ+3795KiORirOVy/sd92B7NRl8wmmarroxrvxjOPV+wcYZmwS8PEwbg9fMLGYTZ/xusWmGSt5GySM/XngNSzQ2PMYT2zQ81yAAAAcEI9t53trOfcuOMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk6RIpgZVVRrD9myK4e//T9fvpW6faA/GHQAAAAAAAAAAHIHvbmc76zk3XH5YVN/5X6wWzlev38gHWUs3q7mS9Syln35W007SGhloen2p319tP3XLItl4NITBlvPHcLAAAAAAAAAA8NX1myzufv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACToEimBlVVzg/brTSaSc4kmS7X20j+MWyfZA/GHQAAAAAcg+e2s531nBsuPyyqe/6Xqvv+M/kgK+lnOf300s3N6lnA4K6/sbXZ6W1tdu6W5clxf/y/Q4VRjZjBs4e99zxXrXFhZ4vF/Cy/yOXM5q2sZjm/zFL66WY2P61aSynSqp9etIZx7h3v9UeW3nparK9UkczkVpar2K7kRt5LLzfTqI6hWmf/Pd4rs1P8qHbAHN2s6/KI/lTXk6FVZeTUTkbm6tyX2Xh+/0wc8jx5fE/tNHaeQZ3/99Hn/Gxdl7n+w0TnfH7k7Htp/5wnF//znb/d7q3cuX1r7fLkHNIX9HgmOiOZePlrlYnpOhuDWfRws+XFattzWc7P815uppvXs5DXM5/X8lrmspBrI3m9cID5rXG4a+3S9+vGTJI/1vVkKPP6/EheR2e6VtU3+s4gS+XJ9MLR/xVofqtulPv4bV1Phscz0R45X17cPxN/fli+rvVW7qzeXnr/gPv7Xl2Xmf79RM3N5fnyQvmPVS09enaUfS/u2deu+s7v9DWe6Luw0/e0K3W6/gz35EjzVd/Le/Z1qr5XRvr2+pQDwITa/U777Ktnp2f+O/OvmU9mfjdze+bNMz85vXD629M59c/m36f+2rjf+GHxaj7Jr3fv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC9u7cOP7iz1hj8D0Ot1VwfvfMUaf8lEhKFx0hrN+sqYlHiOrzHGSQk4Flf7d9+/uvbhRz9Yvrv0bvfd7kqn0742v3BtYf7a1VvLve7c4HXcYQJfgt0/+uOOBAAAAAAAAAAAADio4/jvBOM+RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBkW3w7px6kSHvuyly5vLXZ6ZVl2N5ds5mkkaT4VVJ8mlzPoKQ1Mlzxeft55+M3Fj5r37+3O1ZzuH5jv+0OZqMumU0yVddHNd6NZx6v2DnCMmGXhomDcft/AAAA//9Shwfb") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 4m40.851352749s ago: executing program 0 (id=35): sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0xe765d31487654569, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x20004040) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4m33.873482333s ago: executing program 3 (id=45): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f0000568400"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={r5, r6, r7, 0x0, 0x2006, 0x40, 0x0, 0x0, 0x3ffc, 0x9, 0x2, 0x1}) 4m32.243346855s ago: executing program 3 (id=47): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = shmget$private(0x0, 0x800000, 0x54000000, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3517, 0x93c7, 0x42, 0x0, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000002fc0)='1', 0x1) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 4m30.366760916s ago: executing program 3 (id=51): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000240)={r6, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x1}, &(0x7f0000000080)=0x90) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 4m28.3511937s ago: executing program 3 (id=54): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, &(0x7f0000000640)=""/90, 0x1b, 0x5a, 0x1, 0x401, 0x10000}, 0x28) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', 0x0}) sendfile(r4, r3, 0x0, 0x7ffff000) 4m25.659501817s ago: executing program 32 (id=35): sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0xe765d31487654569, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x20004040) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4m24.376401181s ago: executing program 3 (id=61): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x8000, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x1, 0x4, {@in6_addr=@mcast2}}}]}, 0x38}}, 0x20004810) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x0, @empty}, 'veth0_macvtap\x00'}) 4m20.55399652s ago: executing program 3 (id=65): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0x1, 0x27f, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) read$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) rename(0x0, 0x0) ftruncate(r2, 0x201f) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) 4m5.206379691s ago: executing program 33 (id=65): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0x1, 0x27f, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) read$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) rename(0x0, 0x0) ftruncate(r2, 0x201f) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) 39.295153122s ago: executing program 2 (id=371): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xc0083, &(0x7f0000000080)=ANY=[@ANYBLOB="04ff9b91c7a4caee3b4b65686bdb17ec4b00fdb6dc5aafeb5e5524bdaea5507f09a854e3845f031b03f5a1c71367da82a54eb42036fb170ea8b58db21904fc0dc2b81e2f6980171d9c4394201fe64cf3bbf6d4760bbeede68183a4be5af5a70bbc3b3031479d7e1483442db28087d12a13d5c23848f31ae070c07900d872029de8123649"], 0xfe, 0x2c6, &(0x7f0000000280)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) getpid() r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 37.672111753s ago: executing program 2 (id=375): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000001080)={[{@test_dummy_encryption_v1}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x46c, &(0x7f0000000b00)="$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") pipe2(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x407, 0xa0018ce0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="f75c", 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 27.924838401s ago: executing program 2 (id=398): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000480)) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40000) 26.969000489s ago: executing program 6 (id=400): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x2b4}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000300)={0x2, 0x3}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x50}, 0x1, 0xba01}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@generic={0x0}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) 23.315084344s ago: executing program 5 (id=407): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x3a7c8702, 0x0) sendfile(r3, r5, &(0x7f0000000180)=0xd, 0x7e) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000003c0)=0x3c49, 0x4) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 20.739581272s ago: executing program 5 (id=419): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x2d, 0xf9, 0x6}, 0x28) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r0, r0, 0x0, 0x800000009) lseek(r0, 0x8, 0x4) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd, 0x18}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 15.771502804s ago: executing program 6 (id=413): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000)={0xffffffff, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, 0x0, 0x4008800) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 14.887129696s ago: executing program 5 (id=414): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000400), 0x2000011a) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 14.71167539s ago: executing program 2 (id=416): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x8000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xeec30000) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r5, 0x0) 10.519474839s ago: executing program 1 (id=420): io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r2, 0x1) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, 0x0, 0x0) 10.519177009s ago: executing program 2 (id=421): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) pwrite64(r0, 0x0, 0x0, 0xb965) 10.434343496s ago: executing program 6 (id=422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 10.234536562s ago: executing program 4 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 9.51817009s ago: executing program 4 (id=424): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @random="0408fcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x0, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_init1(0x0) write$binfmt_elf64(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffff"], 0x78) close(r4) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c041}, 0x0) 9.497103602s ago: executing program 1 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.801092868s ago: executing program 6 (id=426): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000280)=0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, 0x0) sendfile(r1, r1, 0x0, 0xe0000000) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 7.255745623s ago: executing program 1 (id=427): socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 5.353456847s ago: executing program 5 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000013000100000000000002000002000000"], 0x14}], 0x1}, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = geteuid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r7) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 5.345623958s ago: executing program 4 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) getpgid(0x0) mkdir(0x0, 0x150) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 5.289385772s ago: executing program 6 (id=430): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) capget(&(0x7f0000002440)={0x399f1316}, &(0x7f0000002480)={0x0, 0x1, 0x3a47f83c, 0x3, 0x9, 0x1ff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) 4.161861174s ago: executing program 4 (id=431): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 4.160203523s ago: executing program 5 (id=441): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket(0x840000000002, 0x3, 0xfa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000800)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) 3.726861769s ago: executing program 1 (id=432): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000)={0xffffffff, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, 0x0, 0x4008800) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 3.081140741s ago: executing program 5 (id=433): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r2, r6, 0x0, 0x0, 0x4}) rt_sigqueueinfo(0x0, 0x13, &(0x7f00000002c0)={0x21, 0x3, 0x4ee3}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r2, r6, 0x1, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) 3.050528893s ago: executing program 4 (id=434): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xfa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) 2.051923044s ago: executing program 4 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r2 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') close(r2) umount2(&(0x7f0000000280)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, 0x0, 0xff2e) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x0) read(r4, &(0x7f0000000e00)=""/4096, 0x1000) 2.003642818s ago: executing program 1 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x60000010}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r7 = epoll_create1(0x0) fcntl$setflags(r7, 0x5, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 995.056809ms ago: executing program 2 (id=437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6363, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001, 0x7}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 572.054424ms ago: executing program 6 (id=438): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='nilfs2\x00', 0x1810410, 0x0) 0s ago: executing program 1 (id=439): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="d83d367c442b507ef905772a8a1a9dd301c73fd675224a6725c1cd9c384a521ec286ff049877a06de78617e5a113f58a2b052a9e7b3051b63cbffd73f7dda7b0b46e365602d3ba5a28317784778dda270a677043cdb0f8b3db3c171f13a625f16fef7e5d2630d9697944dd72b04ab7289fb0816cf8ac5f3669b8369ba88222dede00", 0x82}, {&(0x7f0000000180)="8209bca041c10503f6f9859a626cf690e30e662dde5b425d85e9f42c0533b6c0ab66ff1b86acc84c305fdf3a1810a0568b6f96e503f73beec59879d4d49432ddab8d2b", 0x43}], 0x2}}], 0x1, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000900"}, 0x28) kernel console output (not intermixed with test programs): 6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.599842][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.609570][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.616922][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.631387][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.646934][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.655829][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.675917][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.684147][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.692657][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.702464][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.706092][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 74.712086][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.717048][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 74.726255][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.731244][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 74.738169][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.744340][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 74.752891][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 74.759398][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.773292][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.784051][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.791558][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.800955][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.810847][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.820030][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.827273][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.861864][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.877164][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.896879][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.918036][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.948031][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.966517][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.977963][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.988367][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.044154][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.056583][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.070812][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.080984][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.092253][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.103413][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.114640][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.124467][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.134758][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.145150][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.154456][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.164793][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.174077][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.184562][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.194374][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.204278][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.213520][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.222459][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.231555][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.240515][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.250618][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.259111][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.268652][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.281537][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.294050][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.307736][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.321310][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.330382][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.363971][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.386976][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.422811][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.683679][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.706453][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.720264][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.753428][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.766400][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.784182][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.844112][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.869026][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.931198][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.947208][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.969776][ T4270] device veth0_vlan entered promiscuous mode [ 75.985229][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.996089][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.013522][ T4270] device veth1_vlan entered promiscuous mode [ 76.083516][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.093514][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.130677][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.158151][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.201455][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.234870][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.263229][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.302797][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.316812][ T4270] device veth0_macvtap entered promiscuous mode [ 76.324586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.338595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.346671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.374197][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.384772][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.406532][ T4270] device veth1_macvtap entered promiscuous mode [ 76.436291][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.443700][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.453759][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.463514][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.482695][ T4274] device veth0_vlan entered promiscuous mode [ 76.538494][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.550306][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.560271][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.569483][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.579731][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.588923][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.604514][ T4274] device veth1_vlan entered promiscuous mode [ 76.621909][ T4266] device veth0_vlan entered promiscuous mode [ 76.638588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.648578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.657773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.671251][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.711124][ T4266] device veth1_vlan entered promiscuous mode [ 76.718845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.734546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.742694][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.750828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.759734][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.768739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.778228][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.787547][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 76.787563][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 76.787597][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 76.794647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.800650][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 76.806568][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 76.834210][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.870018][ T4277] device veth0_vlan entered promiscuous mode [ 76.880922][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.889562][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.901645][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.911246][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.921342][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.930783][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.939705][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.948964][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.956984][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.969246][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.978498][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.987418][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.996964][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.013391][ T4277] device veth1_vlan entered promiscuous mode [ 77.025203][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.034357][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.045258][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.077628][ T4266] device veth0_macvtap entered promiscuous mode [ 77.096487][ T4265] device veth0_vlan entered promiscuous mode [ 77.112515][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.121836][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.131244][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.139287][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.150153][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.159562][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.175006][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.187925][ T4266] device veth1_macvtap entered promiscuous mode [ 77.206608][ T4274] device veth0_macvtap entered promiscuous mode [ 77.217368][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.226530][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.246194][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.261007][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.273650][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.283678][ T4265] device veth1_vlan entered promiscuous mode [ 77.304090][ T4274] device veth1_macvtap entered promiscuous mode [ 77.316931][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.327414][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.339476][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.351541][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.364673][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.396008][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.404860][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.419411][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.429822][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.446867][ T4277] device veth0_macvtap entered promiscuous mode [ 77.460149][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.472058][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.487018][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.496199][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.528209][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.542079][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.552711][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.563915][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.578492][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.619228][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.627722][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.638747][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.649557][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.661039][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.673082][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.684012][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.698660][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.710070][ T4277] device veth1_macvtap entered promiscuous mode [ 77.737467][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.749949][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.752152][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.767754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.776572][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.786015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.794906][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.804878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.818144][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.828749][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.837657][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.846575][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.858892][ T4265] device veth0_macvtap entered promiscuous mode [ 77.874314][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.889041][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.901037][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.913502][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.923686][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.934652][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.949240][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.982378][ T4265] device veth1_macvtap entered promiscuous mode [ 77.992693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.003527][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.012420][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.022569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.033123][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.046626][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.052892][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.060283][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.076139][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.087108][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.097672][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.108971][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.120875][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.154418][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.169233][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.179687][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.190911][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.201127][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.212254][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.222353][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.233842][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.246210][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.253916][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.264028][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.273249][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.282926][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.295164][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.306613][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.315947][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.324859][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.333702][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.368333][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.384737][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.397356][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.408354][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.418897][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.430351][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.440806][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.451787][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.470893][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.494041][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.503659][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.531238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.541292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.551691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.565159][ T4265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.575976][ T4265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.584983][ T4265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.594282][ T4265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.729739][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.736074][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.739752][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.752566][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.785670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.793898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.868303][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 78.869892][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 78.886409][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 78.886672][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 78.886882][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 79.771381][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.792413][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.804990][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.862892][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.876171][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.964442][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.510293][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.519829][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.539705][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.769787][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.185388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 81.194276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 81.204548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 81.213045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.222751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.311180][ T4404] Bluetooth: MGMT ver 1.22 [ 81.928285][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.976900][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.986732][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.021752][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.091126][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.145980][ T4421] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 83.450454][ T4426] loop4: detected capacity change from 0 to 256 [ 83.828546][ T4426] ======================================================= [ 83.828546][ T4426] WARNING: The mand mount option has been deprecated and [ 83.828546][ T4426] and is ignored by this kernel. Remove the mand [ 83.828546][ T4426] option from the mount to silence this warning. [ 83.828546][ T4426] ======================================================= [ 84.063432][ T4349] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.313682][ T4426] FAT-fs (loop4): count of clusters too big (66845694) [ 84.321389][ T4426] FAT-fs (loop4): Can't find a valid FAT filesystem [ 84.641640][ T4349] usb 1-1: Using ep0 maxpacket: 16 [ 84.661484][ T4349] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 84.671317][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 84.680085][ T4349] usb 1-1: Product: syz [ 84.684729][ T4349] usb 1-1: Manufacturer: syz [ 84.694983][ T4349] usb 1-1: SerialNumber: syz [ 84.724247][ T4431] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.630728][ T4349] usb 1-1: config 0 descriptor?? [ 85.738663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.747122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 85.755686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 86.785578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.903621][ T14] cfg80211: failed to load regulatory.db [ 87.373841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.945661][ T4256] usb 1-1: USB disconnect, device number 2 [ 89.189830][ T4464] hugetlbfs: syz.3.16 (4464): Using mlock ulimits for SHM_HUGETLB is obsolete [ 92.129990][ T4486] Zero length message leads to an empty skb [ 94.606915][ T4497] loop3: detected capacity change from 0 to 2048 [ 94.795520][ T4497] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.105460][ T4279] Bluetooth: hci4: command 0x0407 tx timeout [ 95.265636][ T4497] NILFS (loop3): mounting unchecked fs [ 96.196286][ T4497] NILFS (loop3): recovery complete [ 96.221605][ T4504] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.967527][ T27] audit: type=1800 audit(1755039346.958:2): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.25" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 97.615535][ T27] audit: type=1800 audit(1755039347.068:3): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.25" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 100.391437][ T4526] loop0: detected capacity change from 0 to 1024 [ 102.420015][ T4525] kvm [4522]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4001 [ 102.692314][ T4525] kvm [4522]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4001 [ 102.710848][ T4543] loop1: detected capacity change from 0 to 512 [ 102.719692][ T4543] EXT4-fs: Ignoring removed nobh option [ 102.756669][ T4543] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.772517][ T4540] loop3: detected capacity change from 0 to 16 [ 103.149778][ T4533] device dummy0 entered promiscuous mode [ 103.166143][ T4540] erofs: (device loop3): mounted with root inode @ nid 36. [ 103.219559][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.232894][ T4538] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 103.244382][ T4538] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 103.260805][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.270879][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.280370][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 103.289722][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.299217][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 103.308529][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.318275][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 103.327541][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 103.336753][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 103.346710][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 103.356731][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.366191][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 103.375894][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 103.385150][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 103.394987][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 103.405400][ T4538] syz.3.37: attempt to access beyond end of device [ 103.405400][ T4538] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 103.419126][ T4538] syz.3.37: attempt to access beyond end of device [ 103.419126][ T4538] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 103.433769][ T4538] syz.3.37: attempt to access beyond end of device [ 103.433769][ T4538] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 103.449504][ T4538] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[2639] [ 103.463068][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 103.472494][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 103.482028][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.491609][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 103.501042][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.514787][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 103.524098][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 103.533840][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 103.543251][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.553896][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 103.563202][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.572902][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 103.582342][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 103.591815][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 103.601173][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 103.610503][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 103.620022][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 103.629240][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 103.638576][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.648183][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 103.658157][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.668148][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 103.677679][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 103.687959][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.697700][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 103.706845][ T4538] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 103.716318][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 103.725704][ T4536] sched: RT throttling activated [ 103.730906][ T4538] erofs: (device loop3): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 103.741431][ T4538] syz.3.37: attempt to access beyond end of device [ 103.741431][ T4538] loop3: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 103.755859][ T4538] syz.3.37: attempt to access beyond end of device [ 103.755859][ T4538] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 103.770484][ T4538] syz.3.37: attempt to access beyond end of device [ 103.770484][ T4538] loop3: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 103.785620][ T4538] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[5297] [ 103.815681][ T4533] device vlan2 entered promiscuous mode [ 104.020192][ T4543] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.36: iget: bad i_size value: 38620345925642 [ 104.277035][ T4543] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.36: couldn't read orphan inode 15 (err -117) [ 104.290482][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.898070][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 106.809453][ T4557] delete_channel: no stack [ 108.991214][ T4578] loop4: detected capacity change from 0 to 256 [ 109.011793][ T4578] exfat: Deprecated parameter 'namecase' [ 109.255781][ T4578] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 111.458161][ T4256] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.978339][ T4279] Bluetooth: hci4: command 0x0405 tx timeout [ 114.225281][ T4618] loop3: detected capacity change from 0 to 1024 [ 114.474050][ T4618] EXT4-fs: Ignoring removed orlov option [ 115.877866][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 116.689656][ T4618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.918261][ T27] audit: type=1804 audit(1755039366.908:4): pid=4618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.54" name="/newroot/13/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 118.232826][ T4279] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 118.241927][ T4279] Bluetooth: hci4: Injecting HCI hardware error event [ 118.250870][ T4285] Bluetooth: hci4: hardware error 0x00 [ 119.874483][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 121.682159][ T4279] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 121.964999][ T4662] loop3: detected capacity change from 0 to 64 [ 122.145876][ T4285] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 122.156651][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.170795][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.180158][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.192524][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.201809][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 122.879351][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.946491][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 125.594416][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 126.692118][ T4456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.633384][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 128.244869][ T4456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.395171][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 130.698279][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 130.797281][ T4707] Cannot find add_set index 4 as target [ 131.677851][ T4456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.838604][ T4712] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 131.838891][ T4644] bond0: (slave bond_slave_0): interface is now down [ 132.095901][ T4716] UBIFS error (pid: 4716): cannot open "./file0", error -22 [ 132.465695][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 132.494230][ T4644] bond0: (slave bond_slave_1): interface is now down [ 132.676881][ T4644] bond0: now running without any active interface! [ 132.696054][ T4664] chnl_net:caif_netlink_parms(): no params data found [ 132.960791][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.967539][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.049377][ T4456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.544482][ T4731] --map-set only usable from mangle table [ 134.194007][ T4734] loop4: detected capacity change from 0 to 1024 [ 134.440661][ T4664] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.503503][ T4664] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.512418][ T4664] device bridge_slave_0 entered promiscuous mode [ 134.522255][ T4664] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.529861][ T4664] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.540620][ T4664] device bridge_slave_1 entered promiscuous mode [ 134.792983][ T4740] QAT: Device 5 not found [ 135.237223][ T4365] hfsplus: b-tree write err: -5, ino 4 [ 135.736990][ T4664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.781787][ T4664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.290700][ T4664] team0: Port device team_slave_0 added [ 138.329347][ T4664] team0: Port device team_slave_1 added [ 139.599943][ T4664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.611966][ T4664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.720006][ T4664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.881763][ T4664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.922010][ T4664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.992277][ T4664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.123233][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.273631][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.283542][ T4769] lo speed is unknown, defaulting to 1000 [ 141.289750][ T4769] lo speed is unknown, defaulting to 1000 [ 141.297278][ T4769] lo speed is unknown, defaulting to 1000 [ 141.307603][ T4769] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.320189][ T4769] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 141.948433][ T4769] lo speed is unknown, defaulting to 1000 [ 142.036571][ T4769] lo speed is unknown, defaulting to 1000 [ 142.043849][ T4769] lo speed is unknown, defaulting to 1000 [ 142.050843][ T4769] lo speed is unknown, defaulting to 1000 [ 142.058093][ T4769] lo speed is unknown, defaulting to 1000 [ 142.066417][ T4769] lo speed is unknown, defaulting to 1000 [ 142.194096][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.216634][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.224243][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.237504][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.705500][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 144.986338][ T4664] device hsr_slave_0 entered promiscuous mode [ 145.706816][ T4664] device hsr_slave_1 entered promiscuous mode [ 145.873999][ T4664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.891435][ T4664] Cannot create hsr debugfs directory [ 146.793533][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 147.169462][ T4801] batman_adv: batadv0: Adding interface: gretap1 [ 147.176772][ T4801] batman_adv: batadv0: Interface activated: gretap1 [ 147.908010][ T4776] lo speed is unknown, defaulting to 1000 [ 149.265679][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 149.441297][ T4827] random: crng reseeded on system resumption [ 150.372929][ T4835] loop2: detected capacity change from 0 to 512 [ 151.188436][ T4835] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 151.214531][ T4835] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.225586][ T4835] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.97: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 151.250151][ T4835] EXT4-fs error (device loop2): ext4_quota_enable:7025: comm syz.2.97: Bad quota inode: 4, type: 1 [ 151.263428][ T4835] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.278633][ T4835] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 151.285672][ T4835] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.355957][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 151.632190][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 153.161882][ T4854] loop4: detected capacity change from 0 to 1024 [ 153.190103][ T4854] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 153.260074][ T4854] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 153.366814][ T4456] device hsr_slave_0 left promiscuous mode [ 153.397714][ T4854] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 153.420600][ T4456] device hsr_slave_1 left promiscuous mode [ 153.428081][ T4863] loop2: detected capacity change from 0 to 1024 [ 153.509559][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.530182][ T4854] EXT4-fs error (device loop4): ext4_get_journal_inode:5735: inode #17: comm syz.4.102: iget: bad i_size value: 4398046511204 [ 153.581699][ T4863] EXT4-fs: Ignoring removed orlov option [ 153.585465][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.616831][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.675389][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.704202][ T4863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.715708][ T4456] device bridge_slave_1 left promiscuous mode [ 153.731749][ T4854] EXT4-fs (loop4): no journal found [ 153.740402][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.806004][ T4456] device bridge_slave_0 left promiscuous mode [ 153.834145][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.507228][ T4456] device veth1_macvtap left promiscuous mode [ 154.534700][ T4456] device veth0_macvtap left promiscuous mode [ 154.586425][ T4456] device veth1_vlan left promiscuous mode [ 154.593077][ T4456] device veth0_vlan left promiscuous mode [ 154.968348][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 157.139885][ T4892] qnx6: unable to read the first superblock [ 157.500223][ T4456] team0 (unregistering): Port device team_slave_1 removed [ 157.607221][ T4456] team0 (unregistering): Port device team_slave_0 removed [ 157.713814][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.854729][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.595771][ T4896] UBIFS error (pid: 4896): cannot open "ubifs", error -22 [ 159.316352][ T4456] bond0 (unregistering): Released all slaves [ 159.609092][ T4664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.666022][ T4875] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 160.513991][ T4776] chnl_net:caif_netlink_parms(): no params data found [ 160.648349][ T4664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.717094][ T4913] loop1: detected capacity change from 0 to 512 [ 161.778264][ T4913] EXT4-fs (loop1): orphan cleanup on readonly fs [ 161.786713][ T4913] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.112: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 161.808574][ T4913] EXT4-fs error (device loop1): ext4_quota_enable:7025: comm syz.1.112: Bad quota inode: 4, type: 1 [ 161.828427][ T4913] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.844370][ T4913] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 161.851395][ T4913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 162.113548][ T4664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.128929][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 162.176118][ T4664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.847610][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.923659][ T4776] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.304553][ T4776] device bridge_slave_0 entered promiscuous mode [ 165.660346][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.669091][ T4776] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.696371][ T4776] device bridge_slave_1 entered promiscuous mode [ 165.870360][ T4776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.882488][ T4776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.995079][ T4776] team0: Port device team_slave_0 added [ 166.100366][ T4664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.143771][ T4776] team0: Port device team_slave_1 added [ 166.277697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.295761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.009106][ T4664] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.147189][ T4776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.164597][ T4776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.385893][ T4776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.722813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.842047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.976726][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.984219][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.178168][ T4776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.210916][ T4776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.396054][ T4776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.401783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.479481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.526250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.544476][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.551989][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.617397][ T4971] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 169.638423][ T4983] tipc: Enabling of bearer rejected, failed to enable media [ 169.769897][ T4776] device hsr_slave_0 entered promiscuous mode [ 169.792893][ T4776] device hsr_slave_1 entered promiscuous mode [ 169.826301][ T4776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.874082][ T4776] Cannot create hsr debugfs directory [ 170.147793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.917367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.983547][ T4983] device syzkaller0 entered promiscuous mode [ 171.213898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.104613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.134131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.177521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.198998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.214997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.233944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.461797][ T5010] xt_socket: unknown flags 0x8 [ 173.162962][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.206749][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.247060][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.401132][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.207396][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.468445][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.571373][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.009174][ T4664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.050552][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.068218][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.126673][ T4776] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.397974][ T4776] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 177.433822][ T4776] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 177.589110][ T4776] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 177.599283][ T5026] loop2: detected capacity change from 0 to 512 [ 177.688791][ T5026] EXT4-fs: Ignoring removed nobh option [ 177.796471][ T5026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.047440][ T5026] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.129: iget: bad i_size value: 38620345925642 [ 178.713700][ T5026] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.129: couldn't read orphan inode 15 (err -117) [ 178.787217][ T5026] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.948218][ T5054] loop1: detected capacity change from 0 to 16 [ 179.038147][ T5054] erofs: (device loop1): mounted with root inode @ nid 36. [ 179.050416][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.060825][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.071565][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.074818][ T5054] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 179.094831][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.104168][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 179.125386][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.163407][ T5054] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 179.254763][ T5054] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 179.292621][ T5026] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.129: bg 0: block 5: invalid block bitmap [ 179.320312][ T5026] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 12 with error 28 [ 179.354275][ T5026] EXT4-fs (loop2): This should not happen!! Data will be lost [ 179.354275][ T5026] [ 179.394199][ T5026] EXT4-fs (loop2): Total free blocks count 0 [ 179.409334][ T5057] lo speed is unknown, defaulting to 1000 [ 179.493978][ T5026] EXT4-fs (loop2): Free/Dirty block details [ 179.556076][ T5026] EXT4-fs (loop2): free_blocks=0 [ 179.683665][ T5026] EXT4-fs (loop2): dirty_blocks=824 [ 179.723960][ T5026] EXT4-fs (loop2): Block reservation details [ 179.759587][ T5026] EXT4-fs (loop2): i_reserved_data_blocks=824 [ 180.329915][ T4776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.501306][ T4450] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 808 with error 28 [ 180.527531][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.538796][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.686940][ T4776] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.859735][ T5076] device syzkaller0 entered promiscuous mode [ 181.022475][ T5085] loop2: detected capacity change from 0 to 764 [ 181.286453][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 181.851649][ T5082] rock: directory entry would overflow storage [ 181.858462][ T5082] rock: sig=0x5850, size=36, remaining=7 [ 181.960190][ T5057] chnl_net:caif_netlink_parms(): no params data found [ 183.393242][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 183.725640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.878039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.929154][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.936753][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.061911][ T5102] macvtap0: refused to change device tx_queue_len [ 184.245455][ T9] device hsr_slave_0 left promiscuous mode [ 184.272794][ T9] device hsr_slave_1 left promiscuous mode [ 184.288545][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.327100][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.344238][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.367380][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.393848][ T9] device bridge_slave_1 left promiscuous mode [ 184.410903][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.499607][ T9] device bridge_slave_0 left promiscuous mode [ 184.510834][ T5107] loop1: detected capacity change from 0 to 4096 [ 185.184526][ T5107] ntfs3: Unknown parameter 'windows_names' [ 185.214104][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.534511][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 186.095911][ T9] device veth1_macvtap left promiscuous mode [ 186.102127][ T9] device veth0_macvtap left promiscuous mode [ 186.144619][ T9] device veth1_vlan left promiscuous mode [ 186.152075][ T9] device veth0_vlan left promiscuous mode [ 187.585558][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 188.667091][ T5139] binder: 5137:5139 ioctl 4018620d 0 returned -22 [ 188.685049][ T5139] binder: 5137:5139 ioctl c0306201 0 returned -14 [ 188.734927][ T5140] loop1: detected capacity change from 0 to 2048 [ 189.084874][ T5140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.590258][ T5140] sd 0:0:1:0: device reset [ 189.605706][ T27] audit: type=1804 audit(1755039439.568:5): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.145" name="/newroot/38/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 189.650642][ T27] audit: type=1326 audit(1755039439.568:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599518ebe9 code=0x7ffc0000 [ 189.687330][ T27] audit: type=1326 audit(1755039439.568:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599518ebe9 code=0x7ffc0000 [ 189.727779][ T27] audit: type=1326 audit(1755039439.578:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f599518d550 code=0x7ffc0000 [ 189.843367][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 189.937668][ T27] audit: type=1326 audit(1755039439.578:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599518ebe9 code=0x7ffc0000 [ 189.974638][ T27] audit: type=1326 audit(1755039439.578:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599518ebe9 code=0x7ffc0000 [ 190.266143][ T27] audit: type=1326 audit(1755039439.578:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f599518ebe9 code=0x7ffc0000 [ 190.672442][ T27] audit: type=1326 audit(1755039439.638:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599518ebe9 code=0x7ffc0000 [ 190.753781][ T9] team0 (unregistering): Port device team_slave_1 removed [ 190.832804][ T27] audit: type=1326 audit(1755039439.638:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599518ebe9 code=0x7ffc0000 [ 190.948367][ T9] team0 (unregistering): Port device team_slave_0 removed [ 191.919670][ T5161] loop1: detected capacity change from 0 to 512 [ 191.993443][ T5161] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 192.010558][ T5161] EXT4-fs (loop1): orphan cleanup on readonly fs [ 192.043997][ T5161] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 192.054574][ T5161] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.149: Failed to acquire dquot type 1 [ 192.082217][ T5161] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.149: bg 0: block 40: padding at end of block bitmap is not set [ 192.109058][ T5161] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 192.126940][ T5161] EXT4-fs (loop1): 1 truncate cleaned up [ 192.411244][ T5161] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 192.719954][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 192.728626][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.876161][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.916763][ T5173] loop4: detected capacity change from 0 to 128 [ 194.388188][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394812][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.490895][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 196.731322][ T9] bond0 (unregistering): Released all slaves [ 196.808163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.818024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.827922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.837705][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.845139][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.853307][ T4320] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 196.853656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.878266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.910470][ T5143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.146'. [ 196.938047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.987075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.033476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.045067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.056151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.458968][ T4320] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 198.468350][ T4320] usb 5-1: config 0 has no interface number 0 [ 198.515599][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.524219][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.534143][ T4320] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 198.552227][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.565377][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.576407][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.599256][ T4320] usb 5-1: Product: syz [ 198.607970][ T4320] usb 5-1: Manufacturer: syz [ 198.754518][ T4320] usb 5-1: SerialNumber: syz [ 198.767828][ T4320] usb 5-1: config 0 descriptor?? [ 198.779832][ T4320] ftdi_sio 5-1:0.23: FTDI USB Serial Device converter detected [ 198.957374][ T4320] usb 5-1: Detected SIO [ 198.967461][ T4320] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 199.018657][ T4320] usb 5-1: USB disconnect, device number 3 [ 199.027032][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.029027][ T4320] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 199.034430][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.044690][ T4320] ftdi_sio 5-1:0.23: device disconnected [ 199.811386][ T5057] device bridge_slave_0 entered promiscuous mode [ 199.846360][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.866558][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.923192][ T5057] device bridge_slave_1 entered promiscuous mode [ 200.671976][ T5057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.923082][ T5057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.563929][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.575122][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.584557][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.595631][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.603804][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 202.609302][ T5057] team0: Port device team_slave_0 added [ 202.646471][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.987836][ T5057] team0: Port device team_slave_1 added [ 204.086713][ T5231] lo speed is unknown, defaulting to 1000 [ 204.927007][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 205.118072][ T5057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.201462][ T5057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.461411][ T5260] loop4: detected capacity change from 0 to 764 [ 205.833085][ T5260] rock: directory entry would overflow storage [ 205.839574][ T5260] rock: sig=0x5850, size=36, remaining=7 [ 205.913586][ T5057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.070194][ T5057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.162878][ T5057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.302207][ T5057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.338465][ T5267] syz.4.172[5267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.338590][ T5267] syz.4.172[5267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.435459][ T5263] tipc: Started in network mode [ 206.491281][ T5263] tipc: Node identity ac14140f, cluster identity 4711 [ 206.512708][ T5270] loop1: detected capacity change from 0 to 128 [ 206.521540][ T5263] tipc: New replicast peer: 255.255.255.255 [ 206.549038][ T5263] tipc: Enabled bearer , priority 10 [ 206.570501][ T5270] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 206.899670][ T5264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 206.927339][ T5264] tipc: Disabling bearer [ 206.945512][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 207.732059][ T5282] loop2: detected capacity change from 0 to 256 [ 207.956755][ T5284] loop4: detected capacity change from 0 to 128 [ 209.045536][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 209.993418][ T5057] device hsr_slave_0 entered promiscuous mode [ 210.063074][ T5057] device hsr_slave_1 entered promiscuous mode [ 210.174586][ T5057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.188595][ T5057] Cannot create hsr debugfs directory [ 210.285906][ T5303] loop1: detected capacity change from 0 to 4096 [ 210.319327][ T5303] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 210.371488][ T5305] loop2: detected capacity change from 0 to 256 [ 210.409409][ T5305] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.466234][ T5305] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 210.514420][ T5303] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 210.543903][ T5303] ntfs3: loop1: Failed to load $Extend. [ 210.546189][ T5305] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 211.477054][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 212.103245][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 213.572806][ T5331] device syzkaller0 entered promiscuous mode [ 213.581355][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.590546][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.599282][ T5231] device bridge_slave_0 entered promiscuous mode [ 214.068016][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.081940][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.123028][ T5231] device bridge_slave_1 entered promiscuous mode [ 219.005156][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.671275][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.834670][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 219.999184][ T5231] team0: Port device team_slave_0 added [ 220.507231][ T5231] team0: Port device team_slave_1 added [ 220.701817][ T5367] loop2: detected capacity change from 0 to 4096 [ 220.753815][ T5367] ntfs3: Unknown parameter 'windows_names' [ 220.896670][ T5057] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.913345][ T5057] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.698965][ T5388] loop4: detected capacity change from 0 to 128 [ 224.260817][ T5388] qnx6: superblock #1 checksum error [ 224.457869][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.485419][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.582817][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.596953][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.604278][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.641009][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.652925][ T5057] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.789780][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.798001][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.816777][ T5384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.109717][ T5057] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.256557][ T9] device hsr_slave_0 left promiscuous mode [ 225.287072][ T9] device hsr_slave_1 left promiscuous mode [ 225.296636][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.330534][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.346894][ T9] device bridge_slave_1 left promiscuous mode [ 225.518094][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.812346][ T9] device bridge_slave_0 left promiscuous mode [ 226.919634][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.093722][ T9] device hsr_slave_0 left promiscuous mode [ 227.105867][ T9] device hsr_slave_1 left promiscuous mode [ 227.114581][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.144255][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.154298][ T9] device bridge_slave_1 left promiscuous mode [ 227.175687][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.198461][ T9] device bridge_slave_0 left promiscuous mode [ 227.204933][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.469013][ T9] team0 (unregistering): Port device team_slave_1 removed [ 229.774727][ T9] team0 (unregistering): Port device team_slave_0 removed [ 230.129427][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.279732][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.565552][ T9] bond0 (unregistering): Released all slaves [ 231.820494][ T9] team0 (unregistering): Port device team_slave_1 removed [ 231.871839][ T9] team0 (unregistering): Port device team_slave_0 removed [ 231.920679][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.976098][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.483794][ T9] bond0 (unregistering): Released all slaves [ 232.564657][ T5231] device hsr_slave_0 entered promiscuous mode [ 232.571920][ T5231] device hsr_slave_1 entered promiscuous mode [ 232.579535][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.587688][ T5231] Cannot create hsr debugfs directory [ 232.610028][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 232.667958][ T5439] device macvtap1 entered promiscuous mode [ 234.802322][ T5450] netlink: 452 bytes leftover after parsing attributes in process `syz.1.208'. [ 234.907593][ T5460] loop2: detected capacity change from 0 to 128 [ 234.959194][ T5460] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.996426][ T5460] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.522933][ T5057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.844941][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.993665][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.083023][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 237.189666][ T5057] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.638269][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.837976][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.965784][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.973316][ T5540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.274788][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.398414][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.409235][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.417939][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.426031][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.434555][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 243.442665][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.627739][ T5231] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 243.718490][ T5569] lo speed is unknown, defaulting to 1000 [ 243.735442][ T5231] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 243.856805][ T5231] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 243.941048][ T5231] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.619975][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.808491][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.681721][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 245.749079][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.130426][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.205296][ T5613] loop2: detected capacity change from 0 to 512 [ 247.217573][ T5613] EXT4-fs: Ignoring removed nobh option [ 247.584730][ T5613] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 247.637866][ T5613] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.222: iget: bad i_size value: 38620345925642 [ 247.651979][ T5613] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.222: couldn't read orphan inode 15 (err -117) [ 247.800658][ T5613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.845941][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 248.845467][ T5615] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 249.249150][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.261541][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 249.317122][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.524189][ T5529] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.531711][ T5529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.905828][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 249.934646][ T5569] chnl_net:caif_netlink_parms(): no params data found [ 250.672455][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.905707][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.960166][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.006700][ T5529] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.014320][ T5529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.203158][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.269802][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.329053][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.401699][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.467454][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.595833][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.637584][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.673955][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.815065][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.985843][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 252.002262][ T5231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.178475][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.232108][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.629093][ T5569] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.741006][ T5569] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.813000][ T5569] device bridge_slave_0 entered promiscuous mode [ 253.716438][ T5569] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.724454][ T5569] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.834816][ T5676] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 254.133998][ T5569] device bridge_slave_1 entered promiscuous mode [ 255.029708][ T5569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.083502][ T5569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.256122][ T5569] team0: Port device team_slave_0 added [ 255.904616][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.911391][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.945019][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.987025][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.011606][ T5569] team0: Port device team_slave_1 added [ 259.438124][ T5569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.482520][ T5569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.905167][ T5569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.152594][ T5569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.505721][ T5569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.755387][ T5569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.852011][ T5711] loop1: detected capacity change from 0 to 1024 [ 262.017308][ T5711] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 262.035502][ T5711] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.097345][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.108346][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.128261][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.278147][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.287755][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 262.296324][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.391492][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 263.159898][ T5569] device hsr_slave_0 entered promiscuous mode [ 263.238247][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 263.285776][ T5569] device hsr_slave_1 entered promiscuous mode [ 263.346432][ T5569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.354270][ T5569] Cannot create hsr debugfs directory [ 263.580675][ T5717] lo speed is unknown, defaulting to 1000 [ 263.937033][ T5735] kernel profiling enabled (shift: 9) [ 264.981948][ T5538] device hsr_slave_0 left promiscuous mode [ 264.998354][ T5538] device hsr_slave_1 left promiscuous mode [ 265.010528][ T5538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.022073][ T5538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.033941][ T5538] device bridge_slave_1 left promiscuous mode [ 265.046889][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.060159][ T5538] device bridge_slave_0 left promiscuous mode [ 265.071628][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.185834][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 266.411223][ T5762] sctp: [Deprecated]: syz.1.256 (pid 5762) Use of int in max_burst socket option. [ 266.411223][ T5762] Use struct sctp_assoc_value instead [ 266.546553][ T5538] team0 (unregistering): Port device team_slave_1 removed [ 266.786890][ T5538] team0 (unregistering): Port device team_slave_0 removed [ 266.833217][ T5538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.897824][ T5538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.283587][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 267.772462][ T5538] bond0 (unregistering): Released all slaves [ 269.426916][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 270.268163][ T5717] chnl_net:caif_netlink_parms(): no params data found [ 271.264044][ T5794] tipc: Enabled bearer , priority 0 [ 271.286495][ T5569] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.313987][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.356551][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.399666][ T5717] device bridge_slave_0 entered promiscuous mode [ 271.418052][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.426604][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.447515][ T5717] device bridge_slave_1 entered promiscuous mode [ 271.505420][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 271.512554][ T5569] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.544313][ T5807] tipc: Resetting bearer [ 271.676258][ T5793] tipc: Disabling bearer [ 271.709054][ T5569] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.762470][ T5717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.790990][ T5569] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.850526][ T5717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.964519][ T5825] loop2: detected capacity change from 0 to 1024 [ 272.031076][ T5825] EXT4-fs: Ignoring removed orlov option [ 272.052222][ T5825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.137618][ T5825] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 272.172953][ T5717] team0: Port device team_slave_0 added [ 272.186378][ T5717] team0: Port device team_slave_1 added [ 272.344584][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.358442][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.395718][ T5717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.417526][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.424767][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.452587][ T5717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.029431][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 273.109257][ T5717] device hsr_slave_0 entered promiscuous mode [ 273.130191][ T5717] device hsr_slave_1 entered promiscuous mode [ 273.141688][ T5717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.153687][ T5717] Cannot create hsr debugfs directory [ 274.160816][ T5569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.924191][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.932837][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.965094][ T5569] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.152455][ T5850] loop4: detected capacity change from 0 to 2048 [ 275.210029][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.227418][ T5850] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 275.256679][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.288836][ T5529] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.296254][ T5529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.369351][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.396233][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.423443][ T5529] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.431247][ T5529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.470930][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.686094][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.710820][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.767057][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.824872][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.876663][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.929203][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.051905][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.071380][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.135656][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.231752][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.256785][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.350908][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.287482][ T5538] device hsr_slave_0 left promiscuous mode [ 279.294729][ T5538] device hsr_slave_1 left promiscuous mode [ 279.319274][ T5538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.350864][ T5538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.388263][ T5538] device bridge_slave_1 left promiscuous mode [ 279.419092][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.478564][ T5538] device bridge_slave_0 left promiscuous mode [ 279.485213][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.478634][ T5899] loop4: detected capacity change from 0 to 128 [ 280.489711][ T5899] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.573749][ T5899] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 283.139666][ T5538] team0 (unregistering): Port device team_slave_1 removed [ 283.204951][ T5538] team0 (unregistering): Port device team_slave_0 removed [ 283.286978][ T5538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.374106][ T5538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.959891][ T5538] bond0 (unregistering): Released all slaves [ 284.073270][ T5569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.195930][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.204048][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.276671][ T5717] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 284.356530][ T5717] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 284.722094][ T5717] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 286.807563][ T5717] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 287.072539][ T5952] loop1: detected capacity change from 0 to 256 [ 287.178643][ T5952] FAT-fs (loop1): Directory bread(block 64) failed [ 287.185797][ T5952] FAT-fs (loop1): Directory bread(block 65) failed [ 287.192822][ T5952] FAT-fs (loop1): Directory bread(block 66) failed [ 287.199804][ T5952] FAT-fs (loop1): Directory bread(block 67) failed [ 287.206959][ T5952] FAT-fs (loop1): Directory bread(block 68) failed [ 287.213632][ T5952] FAT-fs (loop1): Directory bread(block 69) failed [ 287.221175][ T5952] FAT-fs (loop1): Directory bread(block 70) failed [ 287.227978][ T5952] FAT-fs (loop1): Directory bread(block 71) failed [ 287.241018][ T5952] FAT-fs (loop1): Directory bread(block 72) failed [ 287.248043][ T5952] FAT-fs (loop1): Directory bread(block 73) failed [ 289.024003][ T5717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.880818][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.913085][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.000538][ T5717] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.070497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.081394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.090583][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.098137][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.198067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.216960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.242803][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.250580][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.276452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.310743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.320648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.332959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.099443][ T6002] tipc: Enabled bearer , priority 0 [ 292.127867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.192620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.201289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.211588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.223607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.252013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.293232][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.331871][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.358159][ T5999] tipc: Resetting bearer [ 292.368149][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.593284][ T5996] tipc: Disabling bearer [ 292.770403][ T6018] loop4: detected capacity change from 0 to 512 [ 293.731703][ T6018] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 293.758713][ T6018] EXT4-fs (loop4): orphan cleanup on readonly fs [ 293.801837][ T6018] __quota_error: 1 callbacks suppressed [ 293.807927][ T6018] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 293.818002][ T6018] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 293.828665][ T6018] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.293: Failed to acquire dquot type 1 [ 293.865805][ T6018] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.293: bg 0: block 40: padding at end of block bitmap is not set [ 293.898667][ T6018] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 293.922923][ T6018] EXT4-fs (loop4): 1 truncate cleaned up [ 293.966040][ T4313] tipc: Node number set to 2886997007 [ 294.448201][ T6018] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 294.741814][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.767473][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 294.799153][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.871719][ T5569] device veth0_vlan entered promiscuous mode [ 294.899598][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.932087][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.979435][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.061073][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.614845][ T5569] device veth1_vlan entered promiscuous mode [ 296.623489][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.713139][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.748621][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.780111][ T5569] device veth0_macvtap entered promiscuous mode [ 296.802823][ T5569] device veth1_macvtap entered promiscuous mode [ 296.833020][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.892619][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.016363][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.200911][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.352855][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.582761][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.433503][ T5569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.471114][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.536367][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.685202][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.735153][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.746970][ T6037] sctp: failed to load transform for md5: -2 [ 299.192486][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.201757][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.252827][ T5717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.540971][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.662873][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.676898][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.692314][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.703337][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 299.715187][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.261558][ T6072] lo speed is unknown, defaulting to 1000 [ 300.427026][ T6078] capability: warning: `syz.2.302' uses deprecated v2 capabilities in a way that may be insecure [ 302.431295][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 303.399661][ T6072] chnl_net:caif_netlink_parms(): no params data found [ 304.083801][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.227583][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.394175][ T6072] device bridge_slave_0 entered promiscuous mode [ 304.442283][ T6105] device syzkaller0 entered promiscuous mode [ 304.465650][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 304.571600][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.606739][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.623494][ T6072] device bridge_slave_1 entered promiscuous mode [ 304.651935][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.679625][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.302568][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.383254][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.649840][ T5717] device veth0_vlan entered promiscuous mode [ 305.661228][ T6072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.737457][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.774902][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.951777][ T5717] device veth1_vlan entered promiscuous mode [ 306.005822][ T6072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.746503][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 307.177296][ T6072] team0: Port device team_slave_0 added [ 307.229219][ T6141] loop4: detected capacity change from 0 to 128 [ 307.244698][ T6072] team0: Port device team_slave_1 added [ 308.339174][ T6147] syz.4.313: attempt to access beyond end of device [ 308.339174][ T6147] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 308.968968][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 308.977318][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.984625][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.310184][ T6072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.322679][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.322719][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.322767][ T6072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.469061][ T6072] device hsr_slave_0 entered promiscuous mode [ 309.473131][ T6072] device hsr_slave_1 entered promiscuous mode [ 309.474888][ T6072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.475047][ T6072] Cannot create hsr debugfs directory [ 309.850905][ T6151] tty tty4: ldisc open failed (-12), clearing slot 3 [ 310.074074][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.097843][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.256834][ T5717] device veth0_macvtap entered promiscuous mode [ 310.624022][ T5717] device veth1_macvtap entered promiscuous mode [ 310.964771][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.015947][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.048729][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.063401][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.074756][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.089528][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.103499][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.127871][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.153877][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.310538][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.333831][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.361562][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.414236][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.441361][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.479476][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.499913][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.511472][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.536610][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.570340][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.673367][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.692401][ T6176] xt_CT: No such helper "pptp" [ 311.703815][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.754299][ T6177] tipc: Started in network mode [ 311.759691][ T6177] tipc: Node identity 2661788e282c, cluster identity 4711 [ 311.775658][ T6177] tipc: Enabled bearer , priority 0 [ 311.811028][ T5717] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.831645][ T5717] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.866156][ T5717] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.889590][ T5717] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.978825][ T6177] tipc: Resetting bearer [ 312.077896][ T6168] tipc: Disabling bearer [ 312.991730][ T5545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.010666][ T5545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.064896][ T6072] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.117311][ T6072] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.312444][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.437472][ T6072] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.709836][ T5522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.848733][ T6207] loop2: detected capacity change from 0 to 512 [ 314.605356][ T5522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.646998][ T6207] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 314.656039][ T6207] EXT4-fs (loop2): orphan cleanup on readonly fs [ 314.715343][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 314.756009][ T6072] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.831522][ T6207] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 314.846089][ T6207] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 314.856329][ T6207] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.323: Failed to acquire dquot type 1 [ 314.888585][ T6207] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.323: bg 0: block 40: padding at end of block bitmap is not set [ 314.907670][ T6207] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 314.918046][ T6207] EXT4-fs (loop2): 1 truncate cleaned up [ 314.927075][ T6207] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 315.222105][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 315.286718][ T5523] device hsr_slave_0 left promiscuous mode [ 315.513432][ T5523] device hsr_slave_1 left promiscuous mode [ 316.394639][ T6232] vivid-000: disconnect [ 316.414189][ T6232] vivid-000: reconnect [ 316.941039][ T5523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.975334][ T5523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.006178][ T5523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.030362][ T5523] device bridge_slave_1 left promiscuous mode [ 317.186520][ T6223] CUSE: unknown device info "ÿ" [ 317.191508][ T6223] CUSE: zero length info key specified [ 317.204201][ T5523] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.598876][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.605482][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.630437][ T6226] ALSA: mixer_oss: invalid OSS volume 'u' [ 317.638300][ T5523] device bridge_slave_0 left promiscuous mode [ 317.645126][ T5523] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.771280][ T5523] device veth1_macvtap left promiscuous mode [ 317.786785][ T5523] device veth0_macvtap left promiscuous mode [ 317.800239][ T6237] can: request_module (can-proto-0) failed. [ 317.813021][ T5523] device veth1_vlan left promiscuous mode [ 317.839175][ T5523] device veth0_vlan left promiscuous mode [ 321.959983][ T5523] team0 (unregistering): Port device team_slave_1 removed [ 322.018319][ T5523] team0 (unregistering): Port device team_slave_0 removed [ 322.068460][ T5523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.123287][ T5523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.683004][ T5523] bond0 (unregistering): Released all slaves [ 322.829954][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.854828][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.871635][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.902087][ T6072] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.970893][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.980979][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.993227][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.000731][ T5532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.019787][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.029844][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.039894][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.049300][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.056558][ T5532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.067683][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.087717][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.124375][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.146734][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.156280][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.166734][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.184452][ T6072] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.196348][ T6072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.210803][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.220276][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.230110][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.241087][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.250793][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.288151][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.711567][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.721153][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.741807][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.199827][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.211717][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.243568][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.258406][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.272430][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.284649][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.302368][ T6072] device veth0_vlan entered promiscuous mode [ 324.330393][ T6072] device veth1_vlan entered promiscuous mode [ 324.382765][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.392658][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.401784][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.412046][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.425779][ T6072] device veth0_macvtap entered promiscuous mode [ 324.438628][ T6072] device veth1_macvtap entered promiscuous mode [ 324.467975][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.480250][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.490937][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.502600][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.513237][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.530101][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.542936][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.554279][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.568378][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.578560][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.596125][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.611280][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.621339][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.652400][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.663931][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.674707][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.685912][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.696193][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.707329][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.718601][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.730638][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.745009][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.759967][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.770156][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.782551][ T6072] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.793555][ T6072] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.806504][ T6072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.815746][ T6072] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.638816][ T6321] loop6: detected capacity change from 0 to 512 [ 325.972010][ T4453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.055519][ T4453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.119720][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.148676][ T6321] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 326.158286][ T6321] EXT4-fs (loop6): orphan cleanup on readonly fs [ 326.167313][ T6321] Quota error (device loop6): dq_insert_tree: Quota tree root isn't allocated! [ 326.177196][ T6321] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 326.187384][ T6321] EXT4-fs error (device loop6): ext4_acquire_dquot:6814: comm syz.6.335: Failed to acquire dquot type 1 [ 326.203371][ T6321] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.335: bg 0: block 40: padding at end of block bitmap is not set [ 326.219676][ T6321] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 326.251002][ T6321] EXT4-fs (loop6): 1 truncate cleaned up [ 326.258106][ T6321] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 326.338451][ T6327] process 'syz.4.338' launched '/dev/fd/6' with NULL argv: empty string added [ 326.919655][ T5717] EXT4-fs (loop6): unmounting filesystem. [ 327.006220][ T5523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.014636][ T5523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.070874][ T6328] tipc: Enabling of bearer rejected, failed to enable media [ 327.144008][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.446323][ T6342] fuse: Unknown parameter 'fd0x0000000000000003' [ 333.090657][ T6377] loop1: detected capacity change from 0 to 2048 [ 333.215335][ T6391] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.788269][ T6392] loop6: detected capacity change from 0 to 256 [ 333.835318][ T6392] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.897904][ T6392] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 333.992587][ T6392] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 334.665531][ T4349] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 334.912466][ T4349] usb 3-1: not running at top speed; connect to a high speed hub [ 334.953915][ T4349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.047562][ T4349] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 335.127020][ T4349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.155353][ T4349] usb 3-1: Product: syz [ 335.170459][ T4349] usb 3-1: Manufacturer: syz [ 335.175140][ T4349] usb 3-1: SerialNumber: syz [ 335.195079][ T6408] tipc: Enabling of bearer rejected, failed to enable media [ 337.455686][ T4349] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 337.560315][ T2309] pvrusb2: Invalid write control endpoint [ 337.770364][ T4349] usb 3-1: USB disconnect, device number 2 [ 339.961251][ T2309] pvrusb2: Invalid write control endpoint [ 339.975771][ T2309] pvrusb2: Invalid write control endpoint [ 339.981862][ T2309] pvrusb2: Invalid write control endpoint [ 340.013645][ T2309] pvrusb2: Invalid write control endpoint [ 340.056518][ T2309] pvrusb2: Invalid write control endpoint [ 340.067953][ T2309] pvrusb2: Invalid write control endpoint [ 340.080282][ T2309] pvrusb2: Invalid write control endpoint [ 340.103184][ T2309] pvrusb2: Invalid write control endpoint [ 340.685438][ T2309] pvrusb2: Invalid write control endpoint [ 340.691450][ T2309] pvrusb2: Invalid write control endpoint [ 340.978878][ T2309] pvrusb2: Invalid write control endpoint [ 340.985591][ T2309] pvrusb2: Invalid write control endpoint [ 340.991462][ T2309] pvrusb2: Invalid write control endpoint [ 341.021649][ T2309] pvrusb2: Invalid write control endpoint [ 341.050276][ T2309] pvrusb2: Invalid write control endpoint [ 341.075393][ T2309] pvrusb2: Invalid write control endpoint [ 341.081580][ T2309] pvrusb2: Invalid write control endpoint [ 341.101009][ T2309] pvrusb2: Invalid write control endpoint [ 341.126205][ T2309] pvrusb2: Invalid write control endpoint [ 341.132187][ T2309] pvrusb2: Invalid write control endpoint [ 341.184694][ T2309] pvrusb2: Invalid write control endpoint [ 341.205033][ T2309] pvrusb2: Invalid write control endpoint [ 341.233499][ T2309] pvrusb2: Invalid write control endpoint [ 341.275369][ T2309] pvrusb2: Invalid write control endpoint [ 341.281363][ T2309] pvrusb2: Invalid write control endpoint [ 341.313352][ T2309] pvrusb2: Invalid write control endpoint [ 341.320867][ T2309] pvrusb2: Invalid write control endpoint [ 341.341709][ T2309] pvrusb2: Invalid write control endpoint [ 341.375491][ T2309] pvrusb2: Invalid write control endpoint [ 341.395160][ T2309] pvrusb2: Invalid write control endpoint [ 342.026375][ T2309] pvrusb2: Invalid write control endpoint [ 342.032369][ T2309] pvrusb2: Invalid write control endpoint [ 342.084903][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 342.442886][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 343.077383][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 343.094316][ T2309] pvrusb2: Invalid write control endpoint [ 343.100596][ T2309] pvrusb2: Invalid write control endpoint [ 343.115283][ T2309] pvrusb2: Invalid write control endpoint [ 343.158785][ T2309] pvrusb2: Invalid write control endpoint [ 343.165045][ T2309] pvrusb2: Invalid write control endpoint [ 343.217511][ T2309] pvrusb2: Invalid write control endpoint [ 343.223900][ T2309] pvrusb2: Invalid write control endpoint [ 343.244952][ T2309] pvrusb2: Invalid write control endpoint [ 343.291745][ T2309] pvrusb2: Invalid write control endpoint [ 343.318307][ T6490] loop2: detected capacity change from 0 to 256 [ 343.336141][ T2309] pvrusb2: Invalid write control endpoint [ 343.361486][ T2309] pvrusb2: Invalid write control endpoint [ 343.388993][ T2309] pvrusb2: Invalid write control endpoint [ 343.473097][ T2309] pvrusb2: Invalid write control endpoint [ 343.501553][ T2309] pvrusb2: Invalid write control endpoint [ 343.520181][ T2309] pvrusb2: Invalid write control endpoint [ 344.921803][ T2309] pvrusb2: Invalid write control endpoint [ 344.943288][ T2309] pvrusb2: Invalid write control endpoint [ 344.983506][ T2309] pvrusb2: Invalid write control endpoint [ 345.012917][ T2309] pvrusb2: Invalid write control endpoint [ 345.025100][ T6510] loop2: detected capacity change from 0 to 512 [ 345.040878][ T2309] pvrusb2: Invalid write control endpoint [ 345.064282][ T2309] pvrusb2: Invalid write control endpoint [ 345.194447][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 346.444101][ T6534] overlayfs: failed to clone upperpath [ 346.489715][ T2309] pvrusb2: Invalid write control endpoint [ 346.507890][ T2309] pvrusb2: Invalid write control endpoint [ 346.538348][ T2309] pvrusb2: Invalid write control endpoint [ 346.544252][ T2309] pvrusb2: Invalid write control endpoint [ 346.580207][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 346.656976][ T6511] kvm [6508]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8000f7ac [ 346.677005][ T2309] pvrusb2: Device being rendered inoperable [ 346.690443][ T6511] kvm [6508]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8000f7ac [ 346.702059][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 346.715174][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 346.746401][ T6511] kvm [6508]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8000f7ac [ 346.812369][ T6511] kvm [6508]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8000f7ac [ 346.863730][ T6510] EXT4-fs: Conflicting test_dummy_encryption options [ 346.872961][ T6511] kvm [6508]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8000f7ac [ 347.683872][ T6560] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 350.646350][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 354.368785][ T6614] tipc: Enabling of bearer rejected, failed to enable media [ 356.690558][ T6641] fuse: Unknown parameter 'fd0x0000000000000003' [ 356.694441][ T6643] device hsr0 entered promiscuous mode [ 356.885585][ T6643] device hsr0 left promiscuous mode [ 356.954841][ T6653] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 356.982826][ T6653] CIFS mount error: No usable UNC path provided in device string! [ 356.982826][ T6653] [ 356.993763][ T6653] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 357.217043][ T6653] loop5: detected capacity change from 0 to 4096 [ 357.233764][ T6653] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 357.285268][ T6653] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 357.299466][ T6653] ntfs: (device loop5): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 357.309091][ T6653] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 357.321454][ T6653] ntfs: (device loop5): read_ntfs_boot_sector(): Using backup boot sector. [ 357.597087][ T6653] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 357.606091][ T6653] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 357.627367][ T6653] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 357.636550][ T6653] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 357.658284][ T6653] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 357.683034][ T6653] ntfs: volume version 3.1. [ 360.707021][ T4279] Bluetooth: hci1: link tx timeout [ 360.714979][ T4279] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 360.726585][ T4279] Bluetooth: hci1: link tx timeout [ 360.732441][ T4279] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 360.741507][ T4279] Bluetooth: hci1: link tx timeout [ 360.747359][ T4279] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 360.756142][ T4279] Bluetooth: hci1: link tx timeout [ 360.761732][ T4279] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 360.778506][ T4279] Bluetooth: hci1: link tx timeout [ 360.784272][ T4279] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 361.912342][ T6687] Cannot find add_set index 0 as target [ 362.235454][ T4642] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 362.785351][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 363.710180][ T4642] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.951178][ T4642] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.106235][ T4642] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 364.239016][ T4642] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.347544][ T4642] usb 6-1: SerialNumber: syz [ 366.526291][ T4642] usb 6-1: skipping empty audio interface (v1) [ 366.617787][ T4642] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 366.700149][ T6698] tipc: Enabling of bearer rejected, failed to enable media [ 366.721879][ T4642] usb 6-1: USB disconnect, device number 2 [ 366.987830][ T5373] udevd[5373]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.685439][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 370.901608][ T6732] loop4: detected capacity change from 0 to 512 [ 371.500989][ T6732] EXT4-fs (loop4): Test dummy encryption mode enabled [ 371.508303][ T6732] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 371.946046][ T6732] EXT4-fs (loop4): 1 truncate cleaned up [ 371.951942][ T6732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 372.176682][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 372.679144][ T6747] o2cb: This node has not been configured. [ 372.685953][ T6747] o2cb: Cluster check failed. Fix errors before retrying. [ 372.693507][ T6747] (syz.6.422,6747,0):user_dlm_register:674 ERROR: status = -22 [ 372.701773][ T6747] (syz.6.422,6747,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 377.754946][ T6780] ip6t_srh: unknown srh invflags 7D00 [ 379.282375][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.288963][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.393329][ T6824] xt_TPROXY: Can be used only with -p tcp or -p udp [ 382.503867][ T5523] [ 382.506422][ T5523] ============================================ [ 382.512594][ T5523] WARNING: possible recursive locking detected [ 382.518945][ T5523] 6.1.147-syzkaller #0 Not tainted [ 382.520807][ T6830] NILFS (loop6): device size too small [ 382.524351][ T5523] -------------------------------------------- [ 382.524361][ T5523] kworker/u4:27/5523 is trying to acquire lock: [ 382.542467][ T5523] ffff888077050218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x208f/0x3760 [ 382.554705][ T5523] [ 382.554705][ T5523] but task is already holding lock: [ 382.562184][ T5523] ffff888055534258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x129a/0x3760 [ 382.574321][ T5523] [ 382.574321][ T5523] other info that might help us debug this: [ 382.582792][ T5523] Possible unsafe locking scenario: [ 382.582792][ T5523] [ 382.590409][ T5523] CPU0 [ 382.593862][ T5523] ---- [ 382.597398][ T5523] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 382.604607][ T5523] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 382.611796][ T5523] [ 382.611796][ T5523] *** DEADLOCK *** [ 382.611796][ T5523] [ 382.620192][ T5523] May be due to missing lock nesting notation [ 382.620192][ T5523] [ 382.629022][ T5523] 6 locks held by kworker/u4:27/5523: [ 382.634399][ T5523] #0: ffff88814d38c138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 382.645357][ T5523] #1: ffffc90004b6fd00 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 382.659018][ T5523] #2: ffffffff8cb2ae80 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x26f/0x3760 [ 382.669110][ T5523] #3: ffff888055534258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x129a/0x3760 [ 382.681740][ T5523] #4: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: ip_finish_output2+0x3e8/0x11b0 [ 382.691768][ T5523] #5: ffffffff8cb2ae80 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x26f/0x3760 [ 382.702035][ T5523] [ 382.702035][ T5523] stack backtrace: [ 382.708017][ T5523] CPU: 1 PID: 5523 Comm: kworker/u4:27 Not tainted 6.1.147-syzkaller #0 [ 382.716432][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.726573][ T5523] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 382.734664][ T5523] Call Trace: [ 382.738063][ T5523] [ 382.740995][ T5523] dump_stack_lvl+0x168/0x22e [ 382.745778][ T5523] ? show_regs_print_info+0x12/0x12 [ 382.751082][ T5523] ? load_image+0x3b0/0x3b0 [ 382.755605][ T5523] __lock_acquire+0x122f/0x7c50 [ 382.760475][ T5523] ? verify_lock_unused+0x140/0x140 [ 382.765682][ T5523] ? verify_lock_unused+0x140/0x140 [ 382.771069][ T5523] ? mark_lock+0x94/0x320 [ 382.775593][ T5523] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 382.781572][ T5523] ? mark_lock+0x94/0x320 [ 382.786008][ T5523] ? mark_lock+0x94/0x320 [ 382.790350][ T5523] ? mark_lock+0x94/0x320 [ 382.794700][ T5523] lock_acquire+0x1b4/0x490 [ 382.799323][ T5523] ? __dev_queue_xmit+0x208f/0x3760 [ 382.804697][ T5523] ? read_lock_is_recursive+0x10/0x10 [ 382.810129][ T5523] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 382.816640][ T5523] ? rcu_read_lock_bh_held+0x76/0xe0 [ 382.822182][ T5523] ? rcu_read_lock_held+0x40/0x40 [ 382.827289][ T5523] _raw_spin_lock+0x2a/0x40 [ 382.831875][ T5523] ? __dev_queue_xmit+0x208f/0x3760 [ 382.837072][ T5523] __dev_queue_xmit+0x208f/0x3760 [ 382.842183][ T5523] ? __dev_queue_xmit+0x26f/0x3760 [ 382.847316][ T5523] ? netdev_core_pick_tx+0x340/0x340 [ 382.852702][ T5523] ? mark_lock+0x94/0x320 [ 382.857032][ T5523] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 382.863021][ T5523] ? lock_chain_count+0x20/0x20 [ 382.867874][ T5523] ? ip_finish_output2+0x3e8/0x11b0 [ 382.873254][ T5523] ip_finish_output2+0xbe8/0x11b0 [ 382.878282][ T5523] ? ip_finish_output2+0x3e8/0x11b0 [ 382.884092][ T5523] ? ip_fragment+0x210/0x210 [ 382.888683][ T5523] ? ip_skb_dst_mtu+0x587/0x9c0 [ 382.894046][ T5523] ? ip_finish_output+0x3eb/0x4c0 [ 382.899073][ T5523] iptunnel_xmit+0x525/0x930 [ 382.903937][ T5523] ip_tunnel_xmit+0x1c39/0x2360 [ 382.909226][ T5523] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 382.914422][ T5523] ? gre_build_header+0x25b/0x9a0 [ 382.919542][ T5523] gre_tap_xmit+0x50b/0x700 [ 382.924137][ T5523] dev_hard_start_xmit+0x262/0x870 [ 382.929444][ T5523] sch_direct_xmit+0x24e/0x4a0 [ 382.934484][ T5523] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 382.940635][ T5523] __dev_queue_xmit+0x18cd/0x3760 [ 382.945661][ T5523] ? __dev_queue_xmit+0x26f/0x3760 [ 382.950958][ T5523] ? netdev_core_pick_tx+0x340/0x340 [ 382.956331][ T5523] ? pskb_expand_head+0xcd1/0x12a0 [ 382.961445][ T5523] ? batadv_nc_skb_store_for_decoding+0x436/0x6a0 [ 382.968124][ T5523] batadv_send_skb_packet+0x3f5/0x650 [ 382.973504][ T5523] batadv_iv_send_outstanding_bat_ogm_packet+0x696/0x840 [ 382.981182][ T5523] ? process_one_work+0x7a1/0x1160 [ 382.986705][ T5523] process_one_work+0x898/0x1160 [ 382.991932][ T5523] ? worker_detach_from_pool+0x240/0x240 [ 382.997736][ T5523] ? _raw_spin_lock_irq+0xab/0xe0 [ 383.002862][ T5523] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 383.008250][ T5523] ? kthread_data+0x4b/0xc0 [ 383.013022][ T5523] worker_thread+0xaa2/0x1250 [ 383.017723][ T5523] kthread+0x29d/0x330 [ 383.021884][ T5523] ? worker_clr_flags+0x1a0/0x1a0 [ 383.027206][ T5523] ? kthread_blkcg+0xd0/0xd0 [ 383.031810][ T5523] ret_from_fork+0x1f/0x30 [ 383.036234][ T5523] [ 383.055877][ T6833] tipc: Enabled bearer , priority 0 [ 383.068011][ T4348] Process accounting resumed [ 383.191547][ T6826] tipc: Disabling bearer [ 385.905357][ T4283] Bluetooth: hci5: command 0x0406 tx timeout