last executing test programs: 2m30.381673594s ago: executing program 1 (id=46): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 2m28.759289745s ago: executing program 1 (id=48): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r1, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) 2m28.264312933s ago: executing program 1 (id=51): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x2000000000006) 2m25.104813858s ago: executing program 1 (id=55): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@user_xattr}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$eJzs3d9rW1UcAPDvTdP91nUwBopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4h/gu4/Df8C/YqCDIaPogy+Vm96s3Zr0R5o1mfl84Gbn3Huyc78595ydm3NHAhhYo9lLIeKViPg2iTi67lgx8oOjq+WWH9+cyrYkVlY++yuJJN/XLJ/kfx5uZooRv30dcbrwVJUj2UttcWm2XKmk8/nOsfrctbHa4tKZK3PlmXQmvToxOXnuncmJ9997t2uxvnnxnx8+vf/RuW9OLn//y8Njd5M4H0fyY+vj2IVb6zOjMZp/JsNx/pmC412orJ8kvT4BOjKU9/PhyMaAozGU93rg/++riFgBBlSi/8OAas4Dmvf2XboPfmE8+nD1Bmhj/MXV70biQOPe6NBy8tSdUdL8ImOXsjp+/fPe3WyL7n0PAbClW7cj4myxuHH8S/Lxr3Nnt1Hm2TqMf7B37mfzn7dazX8KT+Y/0WL+c7hF3+3E1v2/8LAL1bSVzf8+aDn/zRetRmJkKM+91MgOJ5evVNJsbHs5Ik7F8P4sv9l6zrnlByvtjq2f/2VbVn9zLpifx8Pi/qffM12ul3cX9ZpHtyNebTn/TZ60f9Ki/bPP4+I26ziR3nu93bGt43++Vn6OeKNl+6+taCWbr0+ONa6HseZVsdHfd0783q7+Xseftf+hzeMfSdav19Z2XsdPB/5N2x3r9Prfl3zeSO/L990o1+vz4xH7kk827p9Ye28z3yyfxX/q5ObjX6vr/2BEfLHN+O8cv9O26K7avwuLrln80ztq/50nHnz85Y+dx5+1/9uN1Kl8z3bGv+2e4G4+OwAAAAAAAOg3hYg4Ekmh9CRdKJRKq893HI9DhUq1Vj99eahR9sjq8w+F5kr30XXPQ4znz8M28xPP5Ccj4lhEfDd0sJEvTVUr070OHgAAAAAAAAAAAAAAAAAAAPrE4Tb//z/zx1Cvzw547vzkNwyuLft/N37pCehL/v2HwaX/w+DS/2Fw6f8wuPR/GFz6Pwwu/R8Gl/4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXXxwoVsW1l+fHMqy09fX1yYrV4/M53WZktzC1Olqer8tdJMtTpTSUtT1bmt/r5KtXptfCIWbozV01p9rLa4dGmuunC1funKXHkmvZQO70lUAAAAAAAAAAAAAAAAAAAA8GKpLS7NliuVdH5nidc6epfEJokDnbZFjxPFPagriX6IdNuJiLjVB6exu0SvRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWPNfAAAA///mLTPX") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=mixed,utf8=1,sys_immutable,shortname=win95,rodir,dos1xfloppy,shortname=lower,shortname=lower,utf8=1,check=strict,utf8=0,utf8=0,gid=', @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="2c66756e63f341d9ffff2bb07961b83d46484c455f0000916d61636b66736465663d636865636b3f72656c617865642c7376fd01a2c592f2fac29b612dc0865b4c00000000d92e00"/85, @ANYRESDEC=0x0, @ANYBLOB=',_Zqobj_type=utf8=0,obj_user=]&],\x00'], 0x26, 0x2d3, &(0x7f0000000900)="$eJzs3cFrHFUYAPBvks3sqofNwZMIDtiDXmpT8ORlg7Qg5mTZg3rQYFuQ7CK0sNAqjjl59eLBg3+BIPiHePE/ELwK3lQoPJnZme6k2W66kq3Y/H6XfHnzfe+9efvYJAN5+/HL06ObRdw+/uLXGAyy2BrF6M3XI3ZjK1pfxQmjbwIA+D/7K6X4I82tU5dFxGBz0wIANqj5+X9GVm8R/rTpGQEAm3bj/Q/e3T84uPZeUQzi+vTr2bj6y776Or++fzs+jUnciisxjAcR9YOCnaifFlTh9ZRS2Ssqu3FpWs7GVeX0o5+b/vd/j6jr92IYu3XTw6cNdf07B9f2irm4NG1/0yireTzfjD+q6q/GMF58WHyi/uqivh2/jHEer73amf/lGMYvn8RnMYmb9SQW9V/uFcXb6ds/P/+wGrqqz8rZuF/nLaTtp/m6AAAAAAAAAAAAAAAAAAAAAADwbLvcnJ3Tj/r8nqqpPj9nNt5+UH2zE0Wre75P2Z4PlLUddc8HSimVKb5vz9e5UhRFahIX9b14qdc9WBAAAAAAAAAAAAAAAAAAAAAurrv37h8dTia37pxL0J4G0IuIv29E/Nt+Rp2WV2J1cr8Z83Ay2WrCkzm9bktstzlZxL37R28cRyzvubqJc1qWs4LnTs25CX74cd0OB2fn7Cwf6zyCfrNi7e46OsyWr2E/2pZBs0m+yyMWOfljXpRTQf64SynW2X750kvDtRchf6EOyhU5ka2a2Fu/zVeuackevYu8XtWl5TtN0Cl/ZG880X6Owbz89HtFSht8IwIAAAAAAAAAAAAAAAAAADr//7/k4vHK0q3U39i0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCpWnz+/xpB2RQ/QXIed+7+x7cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADABfBPAAAA///NLVS4") write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x4, 0x9}}, 0xa) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 2m23.04259199s ago: executing program 1 (id=60): r0 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001600)='usbip-vudc.0', 0xc) 2m19.609383719s ago: executing program 1 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) 2m18.324088548s ago: executing program 32 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) 1m56.017622669s ago: executing program 4 (id=102): open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) 1m54.176108156s ago: executing program 4 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}]}, 0x28}}, 0x0) 1m53.825482748s ago: executing program 4 (id=107): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000640)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0x2020) 1m52.486964936s ago: executing program 4 (id=108): timer_settime(0x0, 0x1, &(0x7f0000000640), 0x0) r0 = timerfd_create(0x0, 0x0) read(r0, 0x0, 0x0) timerfd_settime(r0, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc041) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 1m38.673211978s ago: executing program 4 (id=129): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1m34.95761644s ago: executing program 4 (id=134): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") 1m19.813196631s ago: executing program 33 (id=134): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") 15.216196191s ago: executing program 6 (id=330): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f00000000c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffffff, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x31) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='usbip-vudc.0', 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14.913482204s ago: executing program 3 (id=332): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13.89696039s ago: executing program 6 (id=334): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x0, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x1, 0x8000, 0x0, 0xfffffffc, 0x0, 0x0, 0x800000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x1, {[0x3, 0x0, 0xe, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 13.778675987s ago: executing program 3 (id=335): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = dup2(r2, r2) sendto$inet6(r3, 0x0, 0x0, 0x4080, 0x0, 0x0) write$hidraw(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000001400), 0xe8b3, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000001540)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x3}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x1, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x1, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0x6, 0x6a, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x8001, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0xb0a, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffc, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x1000, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x413, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x68, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x8, 0x4, 0x5, 0x200003, 0x2, 0x1, 0x80, 0x9, 0x8006, 0x10000, 0x2, 0x7, 0x400004, 0x3, 0x6d7c, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x402, 0x4, 0xea, 0x9, 0x3ff, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x4], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x32, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0xeb3, @mcast2}]}, &(0x7f0000000100)=0x10) r6 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000002c0), 0x4) 11.131970314s ago: executing program 6 (id=339): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = dup2(r2, r2) sendto$inet6(r3, 0x0, 0x0, 0x4080, 0x0, 0x0) write$hidraw(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000001400), 0xe8b3, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000001540)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x3}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x1, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x1, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0x6, 0x6a, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x8001, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0xb0a, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffc, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x1000, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x413, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x68, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x8, 0x4, 0x5, 0x200003, 0x2, 0x1, 0x80, 0x9, 0x8006, 0x10000, 0x2, 0x7, 0x400004, 0x3, 0x6d7c, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x402, 0x4, 0xea, 0x9, 0x3ff, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x4], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x32, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x5, 0x4, 0x5, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={r6, 0x48, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0xeb3, @mcast2}]}, &(0x7f0000000100)=0x10) r7 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0), 0x4) 11.002911911s ago: executing program 2 (id=340): ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = io_uring_setup(0x52f1, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, &(0x7f0000001bc0), 0x2) 10.908896789s ago: executing program 3 (id=342): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x8, 0xfff1}, {}, {0x8, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 10.694437854s ago: executing program 5 (id=344): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f00000000c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffffff, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x31) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='usbip-vudc.0', 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9.717383921s ago: executing program 2 (id=345): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = dup2(r2, r2) sendto$inet6(r3, 0x0, 0x0, 0x4080, 0x0, 0x0) write$hidraw(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000001400), 0xe8b3, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000001540)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x3}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x1, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x1, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0x6, 0x6a, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x8001, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0xb0a, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffc, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x1000, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x413, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x68, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x8, 0x4, 0x5, 0x200003, 0x2, 0x1, 0x80, 0x9, 0x8006, 0x10000, 0x2, 0x7, 0x400004, 0x3, 0x6d7c, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x402, 0x4, 0xea, 0x9, 0x3ff, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x4], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x32, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x5, 0x4, 0x5, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={r6, 0x48, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0xeb3, @mcast2}]}, &(0x7f0000000100)=0x10) r7 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0), 0x4) 7.666834862s ago: executing program 5 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x148, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x118, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xcc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @dev={0xac, 0x14, 0x14, 0xd}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.838020253s ago: executing program 3 (id=349): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) write(0xffffffffffffffff, &(0x7f0000000c00)='1', 0x1) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6.679589939s ago: executing program 2 (id=350): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, 0x0, &(0x7f0000000100)=0x0, 0x0) r5 = syz_ublk_add_dev(r3, 0x0, r4, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r8, 0x80000) lseek(r6, 0x851, 0x0) 6.598109647s ago: executing program 5 (id=351): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x0, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x1, 0x8000, 0x0, 0xfffffffc, 0x0, 0x0, 0x800000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x1, {[0x3, 0x0, 0xe, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 6.445270473s ago: executing program 0 (id=352): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = dup2(r2, r2) sendto$inet6(r3, 0x0, 0x0, 0x4080, 0x0, 0x0) write$hidraw(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000001400), 0xe8b3, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000001540)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x3}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x1, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x1, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0x6, 0x6a, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x8001, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0xb0a, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffc, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x1000, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x413, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x68, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x8, 0x4, 0x5, 0x200003, 0x2, 0x1, 0x80, 0x9, 0x8006, 0x10000, 0x2, 0x7, 0x400004, 0x3, 0x6d7c, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x402, 0x4, 0xea, 0x9, 0x3ff, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x4], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x32, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x5, 0x4, 0x5, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={r6, 0x48, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0xeb3, @mcast2}]}, &(0x7f0000000100)=0x10) r7 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0), 0x4) 5.693573955s ago: executing program 5 (id=353): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = dup2(r2, r2) sendto$inet6(r3, 0x0, 0x0, 0x4080, 0x0, 0x0) write$hidraw(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000001400), 0xe8b3, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000001540)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x3}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x1, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x1, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0x6, 0x6a, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x8001, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0xb0a, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffc, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x1000, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x413, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x68, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x8, 0x4, 0x5, 0x200003, 0x2, 0x1, 0x80, 0x9, 0x8006, 0x10000, 0x2, 0x7, 0x400004, 0x3, 0x6d7c, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x402, 0x4, 0xea, 0x9, 0x3ff, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x4], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x32, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0xeb3, @mcast2}]}, &(0x7f0000000100)=0x10) r6 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000002c0), 0x4) 5.530387242s ago: executing program 2 (id=354): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@norecovery}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80014) 5.284479136s ago: executing program 3 (id=355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0xffff, 0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x110}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 4.757216903s ago: executing program 0 (id=356): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0x10001, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.029521786s ago: executing program 5 (id=357): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000008404c05cc0900000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0) 3.565970245s ago: executing program 3 (id=358): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000d80)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x1cb) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) copy_file_range(r2, 0x0, r0, 0x0, 0x20000000008, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17f) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20fffe82) open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3df1, 0x0) 3.517404334s ago: executing program 2 (id=359): socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x40) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x180081c, &(0x7f0000000200)=ANY=[], 0x1, 0x1530, &(0x7f00000005c0)="$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") socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x8080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x406, r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[], 0x0) 3.436399792s ago: executing program 0 (id=360): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) memfd_secret(0x80000) 1.816411784s ago: executing program 6 (id=361): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r1 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x2000000000006) 1.67702294s ago: executing program 0 (id=362): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) 1.216856599s ago: executing program 6 (id=363): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x4080, 0x0, 0x0) write$hidraw(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001400), 0xe8b3, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000001540)={0x0, 0x0}) 1.019955265s ago: executing program 0 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x3c}}, 0x4008000) 144.214274ms ago: executing program 5 (id=365): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000240)='F', 0x45) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x181241) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$inet(0x2, 0x1, 0x6) bind(r5, 0x0, 0x0) listen(r5, 0x5) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r6 = socket$inet(0x2, 0x1, 0x6) connect(r6, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 57.444652ms ago: executing program 0 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 57.157402ms ago: executing program 2 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x10000}, 0x28) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4, 0x4002, @private0, 0x6}, 0x1c) 0s ago: executing program 6 (id=368): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) truncate(&(0x7f0000000a80)='./file2\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 74.460207][ T4258] cgroup: Unknown subsys name 'net' [ 74.589450][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.117772][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.615850][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.622347][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.712995][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.744219][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.749831][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.754363][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.761142][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.767663][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.780145][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.782023][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.789834][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.795117][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.806209][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.815608][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.817899][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.828044][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.832231][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.839543][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.846082][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.853094][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.866266][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.875000][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.875044][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.883285][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.890184][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.897608][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.908568][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.912191][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.918686][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.931657][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.933463][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.014897][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.395048][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 78.494924][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 78.560983][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 78.607933][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 78.632572][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.641759][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.650601][ T4278] device bridge_slave_0 entered promiscuous mode [ 78.674930][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 78.688458][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.695794][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.704564][ T4278] device bridge_slave_1 entered promiscuous mode [ 78.787716][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.806936][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.814437][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.822495][ T4271] device bridge_slave_0 entered promiscuous mode [ 78.838736][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.858997][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.867693][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.876071][ T4271] device bridge_slave_1 entered promiscuous mode [ 78.935398][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.942943][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.951652][ T4272] device bridge_slave_0 entered promiscuous mode [ 78.979592][ T4278] team0: Port device team_slave_0 added [ 78.988217][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.998965][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.007123][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.015655][ T4272] device bridge_slave_1 entered promiscuous mode [ 79.023695][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.030909][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.040018][ T4270] device bridge_slave_0 entered promiscuous mode [ 79.057242][ T4278] team0: Port device team_slave_1 added [ 79.072770][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.089667][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.096924][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.105372][ T4270] device bridge_slave_1 entered promiscuous mode [ 79.148664][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.156111][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.164627][ T4280] device bridge_slave_0 entered promiscuous mode [ 79.179897][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.187118][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.199098][ T4280] device bridge_slave_1 entered promiscuous mode [ 79.207338][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.214590][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.240741][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.262391][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.273811][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.300419][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.307775][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.334168][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.348068][ T4271] team0: Port device team_slave_0 added [ 79.355951][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.369697][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.381246][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.400925][ T4271] team0: Port device team_slave_1 added [ 79.445076][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.474698][ T4278] device hsr_slave_0 entered promiscuous mode [ 79.481969][ T4278] device hsr_slave_1 entered promiscuous mode [ 79.516443][ T4272] team0: Port device team_slave_0 added [ 79.524174][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.531503][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.557659][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.579985][ T4270] team0: Port device team_slave_0 added [ 79.586595][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.593952][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.620275][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.633767][ T4272] team0: Port device team_slave_1 added [ 79.652659][ T4280] team0: Port device team_slave_0 added [ 79.667900][ T4270] team0: Port device team_slave_1 added [ 79.689299][ T4280] team0: Port device team_slave_1 added [ 79.695926][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.706917][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.733244][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.774414][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.781446][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.811726][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.827411][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.834501][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.860964][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.899347][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.907940][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.937790][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.959002][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.966227][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.976438][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 80.000525][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.044740][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.051754][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.078267][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 80.078287][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 80.078621][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 80.084840][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 80.104707][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.142437][ T4272] device hsr_slave_0 entered promiscuous mode [ 80.150282][ T4272] device hsr_slave_1 entered promiscuous mode [ 80.157722][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.165934][ T4272] Cannot create hsr debugfs directory [ 80.174998][ T4271] device hsr_slave_0 entered promiscuous mode [ 80.183190][ T4271] device hsr_slave_1 entered promiscuous mode [ 80.190025][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.197963][ T4271] Cannot create hsr debugfs directory [ 80.269954][ T4270] device hsr_slave_0 entered promiscuous mode [ 80.276909][ T4270] device hsr_slave_1 entered promiscuous mode [ 80.283845][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.291460][ T4270] Cannot create hsr debugfs directory [ 80.354466][ T4280] device hsr_slave_0 entered promiscuous mode [ 80.362233][ T4280] device hsr_slave_1 entered promiscuous mode [ 80.369167][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.377221][ T4280] Cannot create hsr debugfs directory [ 80.629756][ T4278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.664222][ T4278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.676493][ T4278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.711721][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.721893][ T4278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.752532][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.780557][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.823013][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.884082][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.904115][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.924792][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.936468][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.028728][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.043334][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.053750][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.065008][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.126853][ T4270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.144291][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.171888][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.180988][ T4270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.210567][ T4270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.235713][ T4270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.253322][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.264616][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.280229][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.290761][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.305119][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.315574][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.349277][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.359728][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.373417][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.380764][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.391604][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.401040][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.411783][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.418949][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.431863][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.441322][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.455196][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.462335][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.471579][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.480833][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.490562][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.497757][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.507044][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.516316][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.524887][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.557417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.569013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.610016][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.619690][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.632876][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.641599][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.652124][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.661718][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.671001][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.679765][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.688689][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.701225][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.728014][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.739386][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.750167][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.762410][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.773380][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.785311][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.802091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.811226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.842189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.851624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.863665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.872129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.881965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.891923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.919393][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.930388][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.966007][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.985655][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.994877][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.003473][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.012444][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.022579][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.029808][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.045514][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.053758][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 82.061638][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.099451][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.106714][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.133807][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 82.133830][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 82.139958][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 82.152411][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 82.188670][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.201323][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.236728][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.257372][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.264800][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.294191][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.304023][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.312883][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.320170][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.328939][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.339136][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.367858][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.378500][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.391328][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.404947][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.415236][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.425044][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.434599][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.444324][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.464818][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.477554][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.493296][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.506260][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.517223][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.527829][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.538117][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.547652][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.557637][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.611489][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.625433][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.653788][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.664002][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.685589][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.713871][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.728584][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.757436][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.798611][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.807820][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.821452][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.863773][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.871541][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.882318][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.894489][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.904116][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.911268][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.926914][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.947780][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.964859][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.989543][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.009078][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.016423][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.068371][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.103319][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.110920][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.142201][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.162873][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.183478][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.220068][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.239342][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.279141][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.299419][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.347930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.365124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.397416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.424780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.475146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.485166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.509212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.533690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.547522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.564648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.578417][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.634727][ T4271] device veth0_vlan entered promiscuous mode [ 83.678675][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.689700][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.710984][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.774322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.783704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.792234][ T4271] device veth1_vlan entered promiscuous mode [ 83.805147][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.833843][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.849279][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.902452][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.919731][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.931466][ T4271] device veth0_macvtap entered promiscuous mode [ 83.958478][ T4271] device veth1_macvtap entered promiscuous mode [ 83.985361][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.004076][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.013324][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.022136][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.039661][ T4272] device veth0_vlan entered promiscuous mode [ 84.062064][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.077548][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.093859][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.110741][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.126792][ T4272] device veth1_vlan entered promiscuous mode [ 84.140597][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 84.152004][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.171079][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.181575][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.195504][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.213124][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 84.213492][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 84.219242][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 84.225522][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 84.261473][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.280471][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.299986][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.311368][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.347676][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.371083][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.381150][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.390378][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.406165][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.418684][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.427799][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.436396][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.446812][ T4280] device veth0_vlan entered promiscuous mode [ 84.484047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.494094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.520615][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.536567][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.545366][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.553400][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.562493][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.576214][ T4280] device veth1_vlan entered promiscuous mode [ 84.589293][ T4272] device veth0_macvtap entered promiscuous mode [ 84.631944][ T4272] device veth1_macvtap entered promiscuous mode [ 84.666613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.678395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.687327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.696850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.705798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.715319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.725229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.733923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.742170][ T4278] device veth0_vlan entered promiscuous mode [ 84.784552][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.796088][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.811446][ T4278] device veth1_vlan entered promiscuous mode [ 84.851919][ T4280] device veth0_macvtap entered promiscuous mode [ 84.866923][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.880296][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.892459][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.905213][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.914964][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.926148][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.939547][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.950136][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.962187][ T4280] device veth1_macvtap entered promiscuous mode [ 84.973851][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.985677][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.997682][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.018562][ T4270] device veth0_vlan entered promiscuous mode [ 85.026950][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.035531][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.044959][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.053453][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.062265][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.083906][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.096861][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.110550][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.129043][ T4270] device veth1_vlan entered promiscuous mode [ 85.143657][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.158030][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.170045][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.181864][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.193863][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.201322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.211257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.221061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.230349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.239747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.252018][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.261805][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.270100][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.279496][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.287149][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.296136][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.320647][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.333206][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.348257][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.359587][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.371014][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.381420][ T4278] device veth0_macvtap entered promiscuous mode [ 85.406596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.418005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.429024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.439094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.450355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.459430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.469677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.483285][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.492043][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.510283][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.519494][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.543913][ T4278] device veth1_macvtap entered promiscuous mode [ 85.588515][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.605732][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.616277][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.675028][ T4270] device veth0_macvtap entered promiscuous mode [ 85.687689][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.699456][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.712843][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.727112][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.737954][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.749093][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.760880][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.776383][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.787449][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.799862][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.811027][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.830082][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.849970][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.866915][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.883195][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.891738][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.914048][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.923511][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.936926][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.951758][ T4270] device veth1_macvtap entered promiscuous mode [ 85.994368][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.016167][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.025270][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.034874][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.085847][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.099610][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.111588][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.122912][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.125173][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.141891][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.152303][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.163651][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.173825][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.184677][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.201973][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.212969][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 86.238433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.252561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.273076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.298522][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 86.299298][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 86.304672][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 86.304737][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 86.336206][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.351463][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.380948][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.400417][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.412342][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.428846][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.439224][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.459475][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.472175][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.489827][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.502484][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.528810][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.549557][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.560743][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.591467][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.604454][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.620195][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.630158][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.632395][ T4357] loop1: detected capacity change from 0 to 32768 [ 86.658131][ T4357] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4357) [ 86.676857][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.699763][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.723318][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.739004][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.764217][ T4357] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 86.776768][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.795667][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.811293][ T4357] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 86.829054][ T4357] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 86.861477][ T4357] BTRFS info (device loop1): use lzo compression, level 0 [ 86.927785][ T4357] BTRFS info (device loop1): using free space tree [ 86.948498][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.985849][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.102120][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.253582][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.261572][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.345468][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.403567][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.411479][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.504566][ T4357] BTRFS info (device loop1): enabling ssd optimizations [ 87.507205][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.560669][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.588953][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.681064][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.785442][ T26] audit: type=1800 audit(1786535994.552:2): pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 87.836768][ T4388] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.199088][ T4366] loop0: detected capacity change from 0 to 32768 [ 88.261160][ T4366] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4366) [ 88.288218][ T4271] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 88.387147][ T4366] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.439087][ T4366] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 88.458698][ T4366] BTRFS info (device loop0): setting nodatacow, compression disabled [ 88.478981][ T4366] BTRFS info (device loop0): enabling auto defrag [ 88.502758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.512753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 88.522749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 88.532748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 88.542728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 88.552735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 88.562752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 88.572739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 88.582731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 88.592744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 90.323334][ T4366] BTRFS info (device loop0): max_inline at 0 [ 90.329532][ T4366] BTRFS info (device loop0): using free space tree [ 91.357652][ T4366] BTRFS error (device loop0): open_ctree failed: -12 [ 91.406321][ T4353] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (4353) [ 91.645704][ T4361] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4361) [ 91.985154][ T130] cfg80211: failed to load regulatory.db [ 93.055016][ T4448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.151958][ T4448] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.535698][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.600422][ T4458] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 95.750185][ T4448] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 95.770223][ T4448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.789699][ T4448] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.839657][ T4448] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 95.867843][ T4448] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.884805][ T4448] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.959728][ T4448] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 95.992402][ T4448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.010801][ T4448] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.037643][ T4448] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 96.052446][ T4448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.070638][ T4448] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.290760][ T4448] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 97.425533][ T4468] sched: RT throttling activated [ 97.446497][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 97.870498][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.893210][ T130] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.915390][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.030313][ T4477] loop1: detected capacity change from 0 to 2048 [ 98.053048][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout [ 98.059524][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.092851][ T130] usb 1-1: Using ep0 maxpacket: 32 [ 98.320902][ T4482] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.370539][ T4481] loop3: detected capacity change from 0 to 32768 [ 98.389202][ T4481] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.17 (4481) [ 98.403686][ T130] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 98.413069][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.452328][ T130] usb 1-1: config 0 descriptor?? [ 98.458835][ T4481] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.469896][ T4481] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 98.478724][ T4481] BTRFS info (device loop3): use zlib compression, level 3 [ 98.486050][ T4481] BTRFS info (device loop3): turning on sync discard [ 98.492854][ T4481] BTRFS info (device loop3): using free space tree [ 98.538349][ T130] as10x_usb: device has been detected [ 98.546134][ T130] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 98.569029][ T130] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 98.665150][ T130] as10x_usb: error during firmware upload part1 [ 98.694521][ T4477] NILFS (loop1): error -2 truncating bmap (ino=16) [ 98.722833][ T4481] BTRFS info (device loop3): enabling ssd optimizations [ 98.762442][ T130] Registered device nBox DVB-T Dongle [ 98.798292][ T130] usb 1-1: USB disconnect, device number 2 [ 99.302493][ T130] Unregistered device nBox DVB-T Dongle [ 99.306504][ T130] as10x_usb: device has been disconnected [ 99.765268][ T26] audit: type=1800 audit(1786536006.522:3): pid=4509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 100.090376][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 100.096600][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 100.315214][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 100.321315][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 100.396396][ T4272] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.505344][ T4353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (4353) [ 100.534282][ T4474] loop2: detected capacity change from 0 to 32768 [ 100.641925][ T4482] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 100.664449][ T4482] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 100.719358][ T4482] Remounting filesystem read-only [ 100.728483][ T4474] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.750826][ T4271] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 100.773623][ T4474] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 100.852411][ T4474] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 100.903858][ T4474] BTRFS info (device loop2): trying to use backup root at mount time [ 100.969513][ T4474] BTRFS info (device loop2): disabling free space tree [ 101.001865][ T4474] BTRFS info (device loop2): use no compression [ 101.029785][ T4474] BTRFS info (device loop2): turning off barriers [ 101.037020][ T4474] BTRFS info (device loop2): disabling tree log [ 101.052900][ T4474] BTRFS error (device loop2): cannot disable free space tree [ 101.074152][ T4474] BTRFS error (device loop2): open_ctree failed: -22 [ 101.108968][ T4395] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4395) [ 101.126074][ T4507] loop4: detected capacity change from 0 to 32768 [ 101.204218][ T4507] (syz.4.18,4507,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.255492][ T4507] (syz.4.18,4507,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.269483][ T4319] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.366799][ T4507] JBD2: Ignoring recovery information on journal [ 101.467604][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.486828][ T4507] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 101.676860][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.687519][ T4319] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.700530][ T4319] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 101.710064][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.741513][ T4319] usb 2-1: config 0 descriptor?? [ 102.512065][ T26] audit: type=1800 audit(1786536009.272:4): pid=4526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18" name="file1" dev="loop4" ino=16979 res=0 errno=0 [ 102.539825][ T4319] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 102.563114][ T4319] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 102.594515][ T4319] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 102.629828][ T4319] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 102.647160][ T4319] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 102.692764][ T4319] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 102.718778][ T4507] syz.4.18 (4507) used greatest stack depth: 17264 bytes left [ 102.762528][ T4319] sony 0003:054C:09CC.0001: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 102.804492][ T4319] sony 0003:054C:09CC.0001: failed to claim input [ 102.875021][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 102.902958][ T4319] usb 2-1: USB disconnect, device number 2 [ 103.205087][ T4533] fido_id[4533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 103.364859][ T4512] loop3: detected capacity change from 0 to 65536 [ 103.442269][ T4524] loop2: detected capacity change from 0 to 32768 [ 103.520558][ T4512] XFS (loop3): Mounting V5 Filesystem [ 103.559514][ T4524] (syz.2.23,4524,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.607091][ T4524] (syz.2.23,4524,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.638123][ T4544] loop4: detected capacity change from 0 to 128 [ 103.696931][ T4524] JBD2: Ignoring recovery information on journal [ 103.737047][ T4512] XFS (loop3): Ending clean mount [ 103.768727][ T4512] XFS (loop3): Quotacheck needed: Please wait. [ 103.854276][ T4544] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.916360][ T4512] XFS (loop3): Quotacheck: Done. [ 103.922240][ T4524] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.983739][ T4544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.024898][ T4544] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.173184][ T4272] XFS (loop3): Unmounting Filesystem [ 104.305242][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 104.792649][ T4564] loop2: detected capacity change from 0 to 256 [ 105.221233][ T4567] binder: 4566:4567 ioctl c0306201 0 returned -14 [ 105.259302][ T4544] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 105.527382][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 105.708620][ T4579] loop1: detected capacity change from 0 to 512 [ 105.775078][ T4579] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 105.851847][ T4583] xt_nat: multiple ranges no longer supported [ 105.880550][ T4579] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 106.024172][ T4579] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.31: bad orphan inode 4 [ 106.078065][ T4579] EXT4-fs (loop1): 1 orphan inode deleted [ 106.114367][ T4579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.755195][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 106.856564][ T4592] loop3: detected capacity change from 0 to 512 [ 106.873831][ T4592] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.998337][ T4638] loop1: detected capacity change from 0 to 512 [ 113.049213][ T4638] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.124689][ T4638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.189306][ T4641] capability: warning: `syz.4.52' uses deprecated v2 capabilities in a way that may be insecure [ 113.226098][ T4641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.52'. [ 113.937168][ T4638] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 113.978899][ T4638] EXT4-fs (loop1): 1 truncate cleaned up [ 113.985415][ T4638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.052852][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 115.228044][ T4648] loop4: detected capacity change from 0 to 2048 [ 115.295600][ T4652] loop1: detected capacity change from 0 to 1024 [ 115.539180][ T4655] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.091302][ T4648] NILFS (loop4): error -2 truncating bmap (ino=16) [ 116.202771][ T4655] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 116.224436][ T4652] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.278966][ T4655] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 116.333638][ T4655] Remounting filesystem read-only [ 116.352778][ T4278] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 116.465002][ T4652] loop1: detected capacity change from 1024 to 64 [ 116.572509][ T4660] syz.1.55: attempt to access beyond end of device [ 116.572509][ T4660] loop1: rw=2049, sector=224, nr_sectors = 2 limit=64 [ 116.702426][ T4660] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 116.763351][ T4660] Buffer I/O error on device loop1, logical block 112 [ 117.128658][ T4668] loop0: detected capacity change from 0 to 32768 [ 117.139515][ T4668] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 117.279201][ T4395] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.761152][ T4677] loop0: detected capacity change from 0 to 256 [ 117.773196][ T4677] exfat: Deprecated parameter 'namecase' [ 117.779206][ T4677] exfat: Deprecated parameter 'namecase' [ 117.785140][ T4677] exfat: Deprecated parameter 'namecase' [ 117.791181][ T4677] exfat: Unknown parameter 'zero_size_dir' [ 118.452645][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 119.964271][ T4657] kmmpd-loop1: attempt to access beyond end of device [ 119.964271][ T4657] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 120.125540][ T4657] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 120.668851][ T4671] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.768937][ T4428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.065712][ T4428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.384810][ T4695] netlink: 104 bytes leftover after parsing attributes in process `syz.2.64'. [ 121.503623][ T4428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.635717][ T4428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.122636][ T4707] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.027134][ T4722] loop3: detected capacity change from 0 to 512 [ 124.154333][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.164968][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.173408][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.184272][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.192604][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 124.206211][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.216018][ T4722] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.316025][ T4722] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.755456][ T4739] xt_nat: multiple ranges no longer supported [ 126.362839][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 126.663981][ T4726] chnl_net:caif_netlink_parms(): no params data found [ 126.821537][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 128.020469][ T4428] device hsr_slave_0 left promiscuous mode [ 128.033068][ T4428] device hsr_slave_1 left promiscuous mode [ 128.075797][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.092871][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.114642][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.122251][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.184162][ T4428] device bridge_slave_1 left promiscuous mode [ 128.192103][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.233347][ T4428] device bridge_slave_0 left promiscuous mode [ 128.239705][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.307808][ T4748] loop2: detected capacity change from 0 to 32768 [ 128.372858][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 128.410747][ T4748] JBD2: Ignoring recovery information on journal [ 128.495812][ T4428] device veth1_macvtap left promiscuous mode [ 128.513177][ T4428] device veth0_macvtap left promiscuous mode [ 128.519391][ T4428] device veth1_vlan left promiscuous mode [ 128.533266][ T4428] device veth0_vlan left promiscuous mode [ 128.575460][ T4769] loop0: detected capacity change from 0 to 512 [ 128.598986][ T4748] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.637449][ T4769] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.871261][ T4774] Zero length message leads to an empty skb [ 128.913561][ T4772] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 128.986137][ T4772] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 129.022840][ T4772] OCFS2: File system is now read-only. [ 129.028437][ T4772] (syz.2.77,4772,0):ocfs2_find_entry_id:407 ERROR: status = -30 [ 129.054954][ T26] audit: type=1326 audit(1786536035.822:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.2.77" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b9fb9e0d9 code=0x0 [ 129.163057][ T4772] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 129.273278][ T4772] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 129.312827][ T4772] (syz.2.77,4772,1):ocfs2_assign_bh:2414 ERROR: status = -30 [ 129.361291][ T4772] (syz.2.77,4772,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -30 [ 129.382965][ T4772] (syz.2.77,4772,0):ocfs2_mknod:272 ERROR: status = -30 [ 129.390046][ T4772] (syz.2.77,4772,0):ocfs2_create:676 ERROR: status = -30 [ 129.448687][ T4773] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 129.487226][ T4773] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 129.540769][ T4773] (syz.2.77,4773,0):ocfs2_find_entry_id:407 ERROR: status = -30 [ 129.625009][ T4748] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 129.679001][ T4748] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 129.722939][ T4748] (syz.2.77,4748,0):ocfs2_find_entry_id:407 ERROR: status = -30 [ 129.902980][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 130.463902][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 131.113345][ T4785] input: syz0 as /devices/virtual/input/input5 [ 132.353669][ T4428] team0 (unregistering): Port device team_slave_1 removed [ 132.532844][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 132.632929][ T4794] ======================================================= [ 132.632929][ T4794] WARNING: The mand mount option has been deprecated and [ 132.632929][ T4794] and is ignored by this kernel. Remove the mand [ 132.632929][ T4794] option from the mount to silence this warning. [ 132.632929][ T4794] ======================================================= [ 132.667894][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.228589][ T4796] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 135.203833][ T4428] team0 (unregistering): Port device team_slave_0 removed [ 135.364272][ T4428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.543869][ T4428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.741878][ T4810] loop4: detected capacity change from 0 to 1024 [ 136.179777][ T4810] hfsplus: request for non-existent node 33423360 in B*Tree [ 136.187560][ T4810] hfsplus: request for non-existent node 33423360 in B*Tree [ 138.399932][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.406384][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.831527][ T4428] bond0 (unregistering): Released all slaves [ 139.231488][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.282418][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.334338][ T4726] device bridge_slave_0 entered promiscuous mode [ 139.354239][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.367894][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.389613][ T4726] device bridge_slave_1 entered promiscuous mode [ 139.620637][ T4829] device syzkaller0 entered promiscuous mode [ 139.656669][ T4726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.696319][ T4726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.914071][ T4837] loop0: detected capacity change from 0 to 32768 [ 140.994643][ T4837] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.025246][ T4837] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 141.058346][ T4837] BTRFS info (device loop0): using free space tree [ 141.317459][ T4837] BTRFS info (device loop0): enabling ssd optimizations [ 141.421480][ T4837] BTRFS info (device loop0: state M): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.454683][ T4837] BTRFS info (device loop0: state M): use zstd compression, level 15 [ 141.639519][ T4280] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.781381][ T4849] loop2: detected capacity change from 0 to 32768 [ 141.834029][ T4849] (syz.2.97,4849,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.888449][ T4849] (syz.2.97,4849,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.926729][ T4849] JBD2: Ignoring recovery information on journal [ 142.036579][ T4849] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 142.382131][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 143.513096][ T4317] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.706889][ T4317] usb 3-1: Using ep0 maxpacket: 16 [ 143.726948][ T4317] usb 3-1: config 0 has no interfaces? [ 143.746917][ T4317] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 143.768361][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.781532][ T4317] usb 3-1: Product: syz [ 143.786655][ T4317] usb 3-1: Manufacturer: syz [ 143.791428][ T4317] usb 3-1: SerialNumber: syz [ 143.819987][ T4317] usb 3-1: config 0 descriptor?? [ 144.073801][ T4317] usb 3-1: USB disconnect, device number 2 [ 144.970370][ T4891] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 146.142009][ T4898] loop2: detected capacity change from 0 to 512 [ 146.250343][ T4898] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.106: bad orphan inode 11862016 [ 146.297030][ T4898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.310560][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.316923][ T4898] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.622772][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 146.647495][ T27] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 146.656729][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.668892][ T27] usb 1-1: config 0 descriptor?? [ 146.721839][ T27] as10x_usb: device has been detected [ 146.777351][ T27] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 147.322517][ T27] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 147.366954][ T27] as10x_usb: error during firmware upload part1 [ 147.404239][ T27] Registered device nBox DVB-T Dongle [ 147.434071][ T27] usb 1-1: USB disconnect, device number 3 [ 147.590298][ T27] Unregistered device nBox DVB-T Dongle [ 147.599403][ T27] as10x_usb: device has been disconnected [ 148.718084][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 148.726152][ T4923] xt_nat: multiple ranges no longer supported [ 151.382605][ T4726] team0: Port device team_slave_0 added [ 151.498107][ T4726] team0: Port device team_slave_1 added [ 151.566447][ T4935] loop3: detected capacity change from 0 to 512 [ 151.585291][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.592483][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.632738][ T4935] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.688344][ T4935] EXT4-fs (loop3): 1 truncate cleaned up [ 151.707954][ T4935] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.712956][ T4726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.783391][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.790523][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.817368][ T4726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.053646][ T4726] device hsr_slave_0 entered promiscuous mode [ 152.074637][ T4726] device hsr_slave_1 entered promiscuous mode [ 152.087278][ T4726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.095435][ T4726] Cannot create hsr debugfs directory [ 152.719334][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 152.974038][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 153.183384][ T4936] loop2: detected capacity change from 0 to 32768 [ 153.205059][ T4726] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.256810][ T4726] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.289072][ T4726] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.290219][ T4936] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 153.334733][ T4726] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.351965][ T4936] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 153.548636][ T4936] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 153.610009][ T4400] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 153.621676][ T4400] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 153.702186][ T4726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.773848][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.792875][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.810680][ T4400] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 189ms [ 153.830833][ T4726] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.855842][ T4400] gfs2: fsid=syz:syz.0: jid=0: Done [ 153.879110][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.893092][ T4936] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 153.900395][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.941514][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.948764][ T4696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.126449][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.156559][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.184463][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.193777][ T4957] loop3: detected capacity change from 0 to 256 [ 154.206157][ T4696] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.213367][ T4696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.383078][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.418310][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.580716][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.709032][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.961584][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.001890][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.073862][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.113216][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.160547][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.199789][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.231833][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.301447][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.861160][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.903067][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.916873][ T4726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.362773][ T4317] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 158.602815][ T4317] usb 3-1: Using ep0 maxpacket: 32 [ 158.615882][ T4317] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 158.653823][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.721853][ T4317] usb 3-1: config 0 descriptor?? [ 158.792501][ T4317] as10x_usb: device has been detected [ 158.829152][ T4317] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 158.910197][ T4317] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 159.018925][ T4317] as10x_usb: error during firmware upload part1 [ 159.058521][ T4317] Registered device nBox DVB-T Dongle [ 159.079893][ T4317] usb 3-1: USB disconnect, device number 3 [ 159.186658][ T4317] Unregistered device nBox DVB-T Dongle [ 159.197803][ T4317] as10x_usb: device has been disconnected [ 159.550526][ T4991] loop3: detected capacity change from 0 to 40427 [ 159.596631][ T4991] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 159.636231][ T4991] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 159.740029][ T4991] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.759732][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.794595][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.915517][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.935654][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.998217][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.050496][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.088924][ T4726] device veth0_vlan entered promiscuous mode [ 160.174213][ T4726] device veth1_vlan entered promiscuous mode [ 160.286962][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.319498][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.369806][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.404025][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.534258][ T5029] input: syz0 as /devices/virtual/input/input6 [ 160.911353][ T4726] device veth0_macvtap entered promiscuous mode [ 161.321480][ T4726] device veth1_macvtap entered promiscuous mode [ 161.460759][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.521569][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.577871][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.619376][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.652046][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.688186][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.749251][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.790091][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.823159][ T4350] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 161.855298][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.092825][ T4350] usb 5-1: device descriptor read/64, error -71 [ 162.679091][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.691065][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.730200][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.781848][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.812835][ T4350] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.833237][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.875229][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.913158][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.951124][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.982819][ T4350] usb 5-1: device descriptor read/64, error -71 [ 163.008015][ T4726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.049477][ T4726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.094790][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.103081][ T4350] usb usb5-port1: attempt power cycle [ 163.155458][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.186707][ T5040] loop3: detected capacity change from 0 to 32768 [ 163.194682][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.227700][ T4726] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.243296][ T4726] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.268743][ T5053] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 163.280444][ T4726] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.290228][ T5040] (syz.3.128,5040,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.312952][ T4726] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.346741][ T5040] (syz.3.128,5040,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.431929][ T5040] JBD2: Ignoring recovery information on journal [ 163.533020][ T4350] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.580921][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.605391][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.623485][ T4350] usb 5-1: device descriptor read/8, error -71 [ 163.751896][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.771439][ T5040] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.369868][ T4350] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.433137][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.006510][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.048080][ T4350] usb 5-1: device descriptor read/8, error -71 [ 165.060067][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.173548][ T4350] usb usb5-port1: unable to enumerate USB device [ 165.371633][ T5076] loop4: detected capacity change from 0 to 512 [ 165.412206][ T5076] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.910174][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 166.143067][ T5091] input: syz0 as /devices/virtual/input/input7 [ 167.312896][ T5096] se_dev->se_dev_ptr already set for storage object [ 167.395601][ T5100] loop3: detected capacity change from 0 to 512 [ 167.429840][ T5100] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.151264][ T5100] EXT4-fs (loop3): 1 truncate cleaned up [ 168.172844][ T5100] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.548655][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 170.340162][ T5119] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 172.005527][ T5139] input: syz0 as /devices/virtual/input/input8 [ 172.099950][ T5142] se_dev->se_dev_ptr already set for storage object [ 175.643919][ T5165] loop2: detected capacity change from 0 to 32768 [ 175.702795][ T5165] (syz.2.159,5165,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.771996][ T5165] (syz.2.159,5165,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.856985][ T5165] JBD2: Ignoring recovery information on journal [ 175.892901][ T4350] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 175.928335][ T5169] loop3: detected capacity change from 0 to 32768 [ 176.050266][ T5169] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 176.089710][ T5165] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 176.095297][ T4350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.159702][ T4350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.211350][ T4350] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 176.256125][ T4350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.314247][ T4350] usb 6-1: config 0 descriptor?? [ 176.416017][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 176.601414][ T4811] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 176.966139][ T4350] usb 6-1: string descriptor 0 read error: -22 [ 177.262108][ T4350] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 177.289924][ T4350] usb 6-1: USB disconnect, device number 2 [ 178.406977][ T26] audit: type=1800 audit(1786536085.172:6): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.169" name="enable" dev="configfs" ino=37098 res=0 errno=0 [ 180.545759][ T5226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'. [ 182.229402][ T5223] loop3: detected capacity change from 0 to 32768 [ 182.273909][ T5223] (syz.3.176,5223,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 182.367244][ T5223] (syz.3.176,5223,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 182.480448][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.499117][ T5223] JBD2: Ignoring recovery information on journal [ 182.511025][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.521215][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.530917][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.543304][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 182.550860][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.701556][ T5223] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 183.174426][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 184.613077][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 185.559054][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 186.693279][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 187.004243][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.331807][ T5309] syz.0.190 uses obsolete (PF_INET,SOCK_PACKET) [ 187.395634][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.502580][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.563030][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.571730][ T5248] device bridge_slave_0 entered promiscuous mode [ 187.676449][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.748526][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.763267][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.771759][ T5248] device bridge_slave_1 entered promiscuous mode [ 187.867930][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.031951][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.385894][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 189.507904][ T5305] loop2: detected capacity change from 0 to 32768 [ 189.547469][ T5305] (syz.2.191,5305,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 189.571887][ T5305] (syz.2.191,5305,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 189.675124][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.713347][ T5335] loop3: detected capacity change from 0 to 512 [ 189.756987][ T5305] JBD2: Ignoring recovery information on journal [ 189.812360][ T5335] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.838163][ T5248] team0: Port device team_slave_0 added [ 189.919017][ T5248] team0: Port device team_slave_1 added [ 190.052740][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.061876][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.099983][ T5341] input: syz0 as /devices/virtual/input/input9 [ 190.124926][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.749991][ T5305] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 190.806673][ T5335] EXT4-fs (loop3): 1 truncate cleaned up [ 190.844848][ T5335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.981352][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.998813][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.082015][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 191.182773][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.412947][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 191.696907][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 191.964794][ T5355] binder: 5353:5355 ioctl c0306201 0 returned -14 [ 192.004099][ T5355] netlink: 48 bytes leftover after parsing attributes in process `syz.0.200'. [ 192.124952][ T5355] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 192.249107][ T5248] device hsr_slave_0 entered promiscuous mode [ 192.279291][ T5248] device hsr_slave_1 entered promiscuous mode [ 192.333039][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.357044][ T5365] loop3: detected capacity change from 0 to 1024 [ 192.373229][ T5248] Cannot create hsr debugfs directory [ 192.494979][ T5365] hfsplus: request for non-existent node 16777217 in B*Tree [ 192.522028][ T5365] hfsplus: request for non-existent node 16777217 in B*Tree [ 192.552274][ T5365] hfsplus: xattr searching failed [ 195.948768][ T26] audit: type=1800 audit(1786536102.712:7): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.205" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 195.975621][ T5248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 195.995149][ T5399] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 196.051882][ T5401] loop2: detected capacity change from 0 to 512 [ 196.076141][ T5399] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 196.093081][ T5401] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.101405][ T5248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.126214][ T5399] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 196.184937][ T5401] EXT4-fs (loop2): 1 truncate cleaned up [ 196.207467][ T5401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 196.584000][ T5407] input: syz0 as /devices/virtual/input/input10 [ 197.651469][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 197.827679][ T5248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.895670][ T5248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.312112][ T41] device hsr_slave_0 left promiscuous mode [ 198.329826][ T41] device hsr_slave_1 left promiscuous mode [ 198.351633][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.379690][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.412373][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.433696][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.468446][ T41] device bridge_slave_1 left promiscuous mode [ 198.482988][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.518708][ T41] device bridge_slave_0 left promiscuous mode [ 198.527115][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.602158][ T41] device veth1_macvtap left promiscuous mode [ 198.613709][ T41] device veth0_macvtap left promiscuous mode [ 198.623291][ T41] device veth1_vlan left promiscuous mode [ 198.629186][ T41] device veth0_vlan left promiscuous mode [ 198.696361][ T5432] loop3: detected capacity change from 0 to 512 [ 198.745789][ T5432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.771545][ T5432] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.228966][ T5432] overlayfs: conflicting lowerdir path [ 199.428222][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 199.506932][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.514526][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.392976][ T41] team0 (unregistering): Port device team_slave_1 removed [ 201.442431][ T41] team0 (unregistering): Port device team_slave_0 removed [ 201.493823][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.546962][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.582994][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 201.589598][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 201.595815][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 201.944337][ T41] bond0 (unregistering): Released all slaves [ 202.412878][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.465948][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.483926][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.556262][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.719329][ T5457] input: syz0 as /devices/virtual/input/input11 [ 202.962837][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.109174][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.287299][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.294566][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.453463][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.462601][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.471353][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.478689][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.487893][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.497237][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.506513][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.516124][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.525540][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.534931][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.546719][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.555228][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.577414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.623648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.688213][ T5248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.755835][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.778303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.793801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.369599][ T5454] loop2: detected capacity change from 0 to 32768 [ 204.433075][ T5454] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 205.640121][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.665534][ T4798] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 205.717894][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.337073][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.702292][ T5506] input: syz0 as /devices/virtual/input/input12 [ 209.378697][ T5531] loop3: detected capacity change from 0 to 512 [ 209.463302][ T5531] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.569576][ T5537] loop2: detected capacity change from 0 to 512 [ 209.623093][ T5531] EXT4-fs (loop3): 1 truncate cleaned up [ 209.628847][ T5531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 209.707594][ T5537] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.860339][ T5537] EXT4-fs (loop2): 1 truncate cleaned up [ 209.879857][ T5537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 210.013384][ T4401] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 210.102319][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.121396][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.153881][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 210.212843][ T4401] usb 6-1: Using ep0 maxpacket: 16 [ 210.219910][ T4401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.231934][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.241839][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.303342][ T4401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.332141][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.342125][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.353105][ T5248] device veth0_vlan entered promiscuous mode [ 210.368631][ T4401] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.400120][ T5248] device veth1_vlan entered promiscuous mode [ 210.420517][ T4401] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 210.453274][ T4401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.459462][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.479159][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.490420][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.495803][ T4401] usb 6-1: config 0 descriptor?? [ 210.530836][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.550874][ T5248] device veth0_macvtap entered promiscuous mode [ 210.569557][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 210.580520][ T5248] device veth1_macvtap entered promiscuous mode [ 210.667181][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.742558][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.778910][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.826178][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.848194][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 210.856005][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.867789][ T5553] binder: 5551:5553 ioctl 4018620d 2000000002c0 returned -16 [ 210.901411][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.917670][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.929665][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.934460][ T4401] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 210.955443][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 210.974854][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 210.986570][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.004513][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.015891][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.024139][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.040201][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.044452][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.079299][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.088816][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.108158][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.118064][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.146772][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.177898][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.193014][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.210625][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.231163][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.240418][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.252797][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.260448][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.277364][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.295085][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.326471][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.336609][ T4401] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.338936][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.365908][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.385825][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.412441][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.443008][ T4401] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 211.451565][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.525769][ T4401] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 211.540168][ T5248] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.557986][ T4401] microsoft 0003:045E:07DA.0003: no inputs found [ 211.565858][ T4401] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 211.580373][ T5248] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.606724][ T4401] usb 6-1: USB disconnect, device number 3 [ 211.615523][ T5248] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.683389][ T5248] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.797903][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.898663][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.908468][ T5567] fido_id[5567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 213.983238][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.060260][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.094455][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.183497][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.505370][ T5582] input: syz0 as /devices/virtual/input/input13 [ 215.417334][ T5592] loop0: detected capacity change from 0 to 512 [ 215.598444][ T5592] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 215.665485][ T5592] EXT4-fs (loop0): 1 truncate cleaned up [ 215.675098][ T5592] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 215.881445][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 216.746860][ T5617] xt_nat: multiple ranges no longer supported [ 219.255487][ T5632] input: syz0 as /devices/virtual/input/input14 [ 220.060923][ T5653] loop5: detected capacity change from 0 to 512 [ 220.149907][ T5653] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 220.203971][ T4317] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 220.234955][ T5653] EXT4-fs (loop5): 1 truncate cleaned up [ 220.259647][ T5653] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 220.426198][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.447835][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.458817][ T4317] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 220.477179][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.513325][ T4317] usb 1-1: config 0 descriptor?? [ 220.849481][ T4726] EXT4-fs (loop5): unmounting filesystem. [ 221.227549][ T4317] usb 1-1: string descriptor 0 read error: -22 [ 221.306574][ T5665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.340347][ T5670] bond1: (slave geneve2): making interface the new active one [ 221.363486][ T5670] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 221.373279][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 221.425652][ T5672] binder: BINDER_SET_CONTEXT_MGR already set [ 221.432332][ T5672] binder: 5671:5672 ioctl 4018620d 2000000002c0 returned -16 [ 221.439032][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 221.447983][ T4317] uclogic 0003:256C:006D.0004: interface is invalid, ignoring [ 221.467563][ T4317] usb 1-1: USB disconnect, device number 4 [ 221.918202][ T4418] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 221.974036][ T5684] loop3: detected capacity change from 0 to 512 [ 221.998115][ T5684] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 222.096154][ T5684] EXT4-fs (loop3): 1 truncate cleaned up [ 222.112946][ T5684] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 222.126902][ T4418] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.355736][ T4418] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.887628][ T4418] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 223.020941][ T4418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.082295][ T4418] usb 6-1: config 0 descriptor?? [ 223.100497][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 223.291629][ T5699] loop6: detected capacity change from 0 to 512 [ 224.291338][ T5699] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 224.386559][ T5699] EXT4-fs (loop6): 1 truncate cleaned up [ 224.402698][ T5699] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 224.633623][ T5248] EXT4-fs (loop6): unmounting filesystem. [ 225.109568][ T5716] loop6: detected capacity change from 0 to 256 [ 225.506554][ T4401] usb 6-1: USB disconnect, device number 4 [ 225.976666][ T5734] loop2: detected capacity change from 0 to 512 [ 226.001314][ T5734] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 226.335433][ T5734] EXT4-fs (loop2): 1 truncate cleaned up [ 226.415271][ T5734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 227.210763][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 227.384868][ T5755] dummy_hcd dummy_hcd.0: remove, state 1 [ 227.391432][ T5755] usb usb1: USB disconnect, device number 1 [ 227.723314][ T5755] dummy_hcd dummy_hcd.0: stopped [ 227.768913][ T5755] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 227.785550][ T5764] input: syz0 as /devices/virtual/input/input15 [ 228.610871][ T5768] loop2: detected capacity change from 0 to 512 [ 228.633455][ T5768] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.776975][ T5768] EXT4-fs (loop2): 1 truncate cleaned up [ 228.797762][ T5768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.059160][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 229.844334][ T5794] loop3: detected capacity change from 0 to 2048 [ 230.250070][ T5803] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.900215][ T5794] NILFS (loop3): error -2 truncating bmap (ino=16) [ 232.019646][ T5803] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 232.086232][ T5803] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 232.135757][ T5803] Remounting filesystem read-only [ 232.149207][ T5808] loop6: detected capacity change from 0 to 512 [ 232.163701][ T4272] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 232.228567][ T5808] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 232.412844][ T5808] EXT4-fs (loop6): 1 truncate cleaned up [ 232.418603][ T5808] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 232.443423][ T5815] input: syz0 as /devices/virtual/input/input16 [ 233.850661][ T5248] EXT4-fs (loop6): unmounting filesystem. [ 233.957993][ T5828] input: syz0 as /devices/virtual/input/input17 [ 234.915223][ T5834] input: syz0 as /devices/virtual/input/input18 [ 235.952334][ T4284] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 236.151260][ T5852] loop3: detected capacity change from 0 to 2048 [ 236.176271][ T5854] binder: 5853:5854 ioctl 4018620d 0 returned -22 [ 236.193054][ T5847] loop6: detected capacity change from 0 to 512 [ 236.300279][ T5847] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 236.318452][ T5857] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.851091][ T5858] NILFS (loop3): error -2 truncating bmap (ino=16) [ 236.900185][ T5856] binder_alloc: 5855: binder_alloc_buf, no vma [ 236.985367][ T5847] EXT4-fs (loop6): 1 truncate cleaned up [ 236.991266][ T5847] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 237.073020][ T5857] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 237.092694][ T5857] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 237.120940][ T5857] Remounting filesystem read-only [ 237.152408][ T4272] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 237.930718][ T5248] EXT4-fs (loop6): unmounting filesystem. [ 239.970160][ T5896] input: syz0 as /devices/virtual/input/input19 [ 239.984720][ T4284] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 239.993968][ T4284] Bluetooth: hci4: Injecting HCI hardware error event [ 240.024363][ T4285] Bluetooth: hci4: hardware error 0x00 [ 240.405459][ T5904] input: syz0 as /devices/virtual/input/input20 [ 242.571372][ T5912] device syzkaller0 entered promiscuous mode [ 242.599258][ T5908] binder: 5907:5908 ioctl 4018620d 0 returned -22 [ 242.780217][ T5918] input: syz0 as /devices/virtual/input/input21 [ 243.092937][ T4285] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 247.020004][ T5950] input: syz0 as /devices/virtual/input/input22 [ 247.321544][ T5952] input: syz0 as /devices/virtual/input/input23 [ 248.906170][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 248.942831][ T5959] binder: 5951:5959 ioctl 4018620d 0 returned -22 [ 251.468709][ T5973] device syzkaller0 entered promiscuous mode [ 251.688205][ T5987] input: syz0 as /devices/virtual/input/input24 [ 254.385522][ T6008] binder: 6005:6008 ioctl 4018620d 0 returned -22 [ 254.528363][ T6015] input: syz0 as /devices/virtual/input/input25 [ 255.280036][ T6021] input: syz0 as /devices/virtual/input/input26 [ 255.950489][ T6024] loop2: detected capacity change from 0 to 512 [ 255.983474][ T6024] EXT4-fs: inline encryption not supported [ 256.003842][ T6024] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 256.168613][ T6024] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.354: corrupted in-inode xattr [ 256.283814][ T6024] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.354: couldn't read orphan inode 15 (err -117) [ 256.317116][ T6024] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 256.332888][ T4418] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 256.513105][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 256.535123][ T4418] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.574495][ T4418] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 256.623039][ T4418] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 256.632254][ T4418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.709426][ T4418] usb 6-1: config 0 descriptor?? [ 256.737029][ T6045] loop2: detected capacity change from 0 to 256 [ 256.851638][ T6045] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 257.233031][ T4400] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 257.290421][ T6059] input: syz0 as /devices/virtual/input/input27 [ 258.192709][ T4400] usb 3-1: device descriptor read/64, error -71 [ 258.329912][ T6067] loop6: detected capacity change from 0 to 512 [ 258.373576][ T6067] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 258.444762][ T6044] loop3: detected capacity change from 0 to 32768 [ 258.451317][ T6067] EXT4-fs (loop6): 1 truncate cleaned up [ 258.462892][ T4400] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 258.480170][ T6067] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 258.622739][ T4400] usb 3-1: device descriptor read/64, error -71 [ 258.672570][ T6044] JBD2: Ignoring recovery information on journal [ 258.744870][ T4400] usb usb3-port1: attempt power cycle [ 258.848459][ T5248] EXT4-fs (loop6): unmounting filesystem. [ 258.871657][ T6044] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 259.043771][ T26] audit: type=1804 audit(1786536165.802:8): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.358" name="/newroot/79/file1/file1" dev="loop3" ino=17059 res=1 errno=0 [ 259.163005][ T4400] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 259.856250][ T4418] usb 6-1: USB disconnect, device number 5 [ 259.928984][ T4400] usb 3-1: device descriptor read/8, error -71 [ 260.006344][ T26] audit: type=1804 audit(1786536166.772:9): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.358" name="/newroot/79/file1/file1" dev="loop3" ino=17059 res=1 errno=0 [ 260.027431][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.081969][ T6087] [ 260.084527][ T6087] ====================================================== [ 260.091597][ T6087] WARNING: possible circular locking dependency detected [ 260.098668][ T6087] syzkaller #0 Not tainted [ 260.103124][ T6087] ------------------------------------------------------ [ 260.110191][ T6087] syz.3.358/6087 is trying to acquire lock: [ 260.116137][ T6087] ffff88807273a2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb3/0x360 [ 260.127830][ T6087] [ 260.127830][ T6087] but task is already holding lock: [ 260.135248][ T6087] ffff88807273a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x360 [ 260.145944][ T6087] [ 260.145944][ T6087] which lock already depends on the new lock. [ 260.145944][ T6087] [ 260.156477][ T6087] [ 260.156477][ T6087] the existing dependency chain (in reverse order) is: [ 260.160228][ T26] audit: type=1804 audit(1786536166.832:10): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.358" name="/newroot/79/file1/file1" dev="loop3" ino=17059 res=1 errno=0 [ 260.165521][ T6087] [ 260.165521][ T6087] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 260.165560][ T6087] down_read+0x42/0x2d0 [ 260.199239][ T6087] ocfs2_init_acl+0x307/0x770 [ 260.204500][ T6087] ocfs2_mknod+0x18e0/0x2580 [ 260.209666][ T6087] ocfs2_create+0x1b6/0x4b0 [ 260.214744][ T6087] vfs_create+0x2db/0x460 [ 260.219668][ T6087] do_mknodat+0x3a1/0x4d0 [ 260.224616][ T6087] __x64_sys_mknod+0x8a/0xa0 [ 260.229834][ T6087] do_syscall_64+0x4c/0xa0 [ 260.234840][ T6087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.241420][ T6087] [ 260.241420][ T6087] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 260.250178][ T6087] down_read+0x42/0x2d0 [ 260.254920][ T6087] ocfs2_start_trans+0x3a4/0x6f0 [ 260.260440][ T6087] ocfs2_modify_bh+0xe0/0x4c0 [ 260.265709][ T6087] ocfs2_local_read_info+0x1499/0x1820 [ 260.271862][ T6087] dquot_load_quota_sb+0x72f/0xa80 [ 260.277657][ T6087] dquot_load_quota_inode+0x2d3/0x5c0 [ 260.283706][ T6087] ocfs2_enable_quotas+0x1c0/0x4a0 [ 260.289448][ T6087] ocfs2_fill_super+0x40fe/0x5010 [ 260.295055][ T6087] mount_bdev+0x28a/0x3c0 [ 260.300049][ T6087] legacy_get_tree+0xe6/0x180 [ 260.307129][ T6087] vfs_get_tree+0x88/0x270 [ 260.312145][ T6087] do_new_mount+0x247/0xa40 [ 260.317244][ T6087] __se_sys_mount+0x2e3/0x3d0 [ 260.322911][ T6087] do_syscall_64+0x4c/0xa0 [ 260.328100][ T6087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.334882][ T6087] [ 260.334882][ T6087] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 260.343051][ T6087] ocfs2_start_trans+0x2a5/0x6f0 [ 260.349884][ T6087] ocfs2_truncate_file+0x67b/0x1660 [ 260.356011][ T6087] ocfs2_setattr+0x16f8/0x1d90 [ 260.361495][ T6087] notify_change+0xca0/0xf90 [ 260.366699][ T6087] do_truncate+0x1ac/0x240 [ 260.371737][ T6087] path_openat+0x2897/0x2f10 [ 260.376916][ T6087] do_filp_open+0x1ee/0x420 [ 260.382011][ T6087] do_sys_openat2+0x14b/0x4f0 [ 260.387276][ T6087] __x64_sys_open+0x11b/0x140 [ 260.392635][ T6087] do_syscall_64+0x4c/0xa0 [ 260.397822][ T6087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.404478][ T6087] [ 260.404478][ T6087] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 260.413435][ T6087] __lock_acquire+0x2d18/0x7c40 [ 260.418868][ T6087] lock_acquire+0x1bb/0x4a0 [ 260.423954][ T6087] down_write+0x36/0x60 [ 260.428685][ T6087] ocfs2_try_remove_refcount_tree+0xb3/0x360 [ 260.435503][ T6087] ocfs2_truncate_file+0xef5/0x1660 [ 260.441284][ T6087] ocfs2_setattr+0x16f8/0x1d90 [ 260.447339][ T6087] notify_change+0xca0/0xf90 [ 260.453363][ T6087] do_truncate+0x1ac/0x240 [ 260.458363][ T6087] path_openat+0x2897/0x2f10 [ 260.463590][ T6087] do_filp_open+0x1ee/0x420 [ 260.468856][ T6087] do_sys_openat2+0x14b/0x4f0 [ 260.474604][ T6087] __x64_sys_open+0x11b/0x140 [ 260.480013][ T6087] do_syscall_64+0x4c/0xa0 [ 260.485262][ T6087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.492206][ T6087] [ 260.492206][ T6087] other info that might help us debug this: [ 260.492206][ T6087] [ 260.502802][ T6087] Chain exists of: [ 260.502802][ T6087] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 260.502802][ T6087] [ 260.518081][ T6087] Possible unsafe locking scenario: [ 260.518081][ T6087] [ 260.525817][ T6087] CPU0 CPU1 [ 260.531243][ T6087] ---- ---- [ 260.536659][ T6087] lock(&oi->ip_xattr_sem); [ 260.541318][ T6087] lock(&journal->j_trans_barrier); [ 260.549248][ T6087] lock(&oi->ip_xattr_sem); [ 260.556410][ T6087] lock(&ocfs2_file_ip_alloc_sem_key); [ 260.562019][ T6087] [ 260.562019][ T6087] *** DEADLOCK *** [ 260.562019][ T6087] [ 260.570205][ T6087] 3 locks held by syz.3.358/6087: [ 260.575272][ T6087] #0: ffff888027696460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 260.584731][ T6087] #1: ffff88807273a648 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 260.595291][ T6087] #2: ffff88807273a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x360 [ 260.606512][ T6087] [ 260.606512][ T6087] stack backtrace: [ 260.612507][ T6087] CPU: 1 PID: 6087 Comm: syz.3.358 Not tainted syzkaller #0 [ 260.619842][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.629994][ T6087] Call Trace: [ 260.633319][ T6087] [ 260.636295][ T6087] dump_stack_lvl+0x188/0x24e [ 260.641068][ T6087] ? load_image+0x410/0x410 [ 260.645632][ T6087] ? show_regs_print_info+0x12/0x12 [ 260.650900][ T6087] ? print_circular_bug+0x12b/0x1a0 [ 260.656158][ T6087] check_noncircular+0x296/0x330 [ 260.661166][ T6087] ? add_chain_block+0x9b0/0x9b0 [ 260.666299][ T6087] ? lockdep_lock+0xf1/0x1f0 [ 260.671050][ T6087] ? lockdep_unlock+0x142/0x2e0 [ 260.676160][ T6087] ? _find_first_zero_bit+0xd2/0x100 [ 260.681607][ T6087] __lock_acquire+0x2d18/0x7c40 [ 260.686528][ T6087] ? ocfs2_commit_truncate+0x1822/0x1e00 [ 260.692228][ T6087] ? verify_lock_unused+0x140/0x140 [ 260.697504][ T6087] lock_acquire+0x1bb/0x4a0 [ 260.702242][ T6087] ? ocfs2_try_remove_refcount_tree+0xb3/0x360 [ 260.708458][ T6087] ? __might_sleep+0xd0/0xd0 [ 260.713105][ T6087] ? read_lock_is_recursive+0x10/0x10 [ 260.718543][ T6087] ? rwsem_write_trylock+0x135/0x1c0 [ 260.723934][ T6087] ? clear_nonspinnable+0x60/0x60 [ 260.729022][ T6087] ? ocfs2_truncate_file+0xe14/0x1660 [ 260.734465][ T6087] down_write+0x36/0x60 [ 260.738752][ T6087] ? ocfs2_try_remove_refcount_tree+0xb3/0x360 [ 260.745087][ T6087] ocfs2_try_remove_refcount_tree+0xb3/0x360 [ 260.751404][ T6087] ? ocfs2_remove_refcount_tree+0xe40/0xe40 [ 260.757465][ T6087] ? up_write+0x1b6/0x410 [ 260.762066][ T6087] ocfs2_truncate_file+0xef5/0x1660 [ 260.767421][ T6087] ? __lock_acquire+0x7c40/0x7c40 [ 260.772511][ T6087] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 260.778315][ T6087] ? do_raw_spin_unlock+0x11d/0x230 [ 260.783582][ T6087] ? _raw_spin_unlock+0x24/0x40 [ 260.788497][ T6087] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 260.794292][ T6087] ? ocfs2_inode_lock_atime+0x530/0x530 [ 260.799898][ T6087] ? ocfs2_rw_lock+0x134/0x250 [ 260.804730][ T6087] ? dquot_initialize+0x20/0x20 [ 260.809639][ T6087] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 260.815766][ T6087] ? jbd2_journal_begin_ordered_truncate+0xb7/0x150 [ 260.822970][ T6087] ocfs2_setattr+0x16f8/0x1d90 [ 260.827973][ T6087] ? ocfs2_extend_allocation+0x1940/0x1940 [ 260.833850][ T6087] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 260.839911][ T6087] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 260.846491][ T6087] ? rwsem_down_write_slowpath+0xee3/0x1160 [ 260.852471][ T6087] ? ktime_get_coarse_real_ts64+0x106/0x120 [ 260.858516][ T6087] ? current_time+0x19b/0x2c0 [ 260.863270][ T6087] ? atime_needs_update+0x770/0x770 [ 260.868529][ T6087] ? security_inode_setattr+0xd8/0x140 [ 260.874047][ T6087] ? try_break_deleg+0x79/0x120 [ 260.878962][ T6087] ? ocfs2_extend_allocation+0x1940/0x1940 [ 260.884837][ T6087] notify_change+0xca0/0xf90 [ 260.889494][ T6087] do_truncate+0x1ac/0x240 [ 260.893980][ T6087] ? put_page_bootmem+0x2b0/0x2b0 [ 260.899185][ T6087] ? ima_bprm_check+0x200/0x200 [ 260.904112][ T6087] ? bpf_lsm_path_truncate+0x5/0x10 [ 260.909459][ T6087] path_openat+0x2897/0x2f10 [ 260.914109][ T6087] ? verify_lock_unused+0x140/0x140 [ 260.919377][ T6087] ? do_filp_open+0x420/0x420 [ 260.924123][ T6087] do_filp_open+0x1ee/0x420 [ 260.928809][ T6087] ? vfs_tmpfile+0x470/0x470 [ 260.933486][ T6087] ? _raw_spin_unlock+0x24/0x40 [ 260.938386][ T6087] ? alloc_fd+0x590/0x640 [ 260.942762][ T6087] do_sys_openat2+0x14b/0x4f0 [ 260.947670][ T6087] ? do_sys_open+0xe0/0xe0 [ 260.952211][ T6087] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 260.954764][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.958320][ T6087] ? lock_chain_count+0x20/0x20 [ 260.969595][ T6087] __x64_sys_open+0x11b/0x140 [ 260.971237][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.974326][ T6087] do_syscall_64+0x4c/0xa0 [ 260.974364][ T6087] ? clear_bhb_loop+0x60/0xb0 [ 260.974392][ T6087] ? clear_bhb_loop+0x60/0xb0 [ 260.974420][ T6087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.002232][ T6087] RIP: 0033:0x7f52cf19e0d9 [ 261.007146][ T6087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.027268][ T6087] RSP: 002b:00007f52cd3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 261.035819][ T6087] RAX: ffffffffffffffda RBX: 00007f52cf426180 RCX: 00007f52cf19e0d9 [ 261.043826][ T6087] RDX: 1df2a23c5997faa6 RSI: 0000000000004242 RDI: 0000200000000440 [ 261.051960][ T6087] RBP: 00007f52cf235024 R08: 0000000000000000 R09: 0000000000000000 [ 261.060758][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.068985][ T6087] R13: 00007f52cf426218 R14: 00007f52cf426180 R15: 00007ffe0712e818 [ 261.077022][ T6087] [ 261.120966][ T6099] loop6: detected capacity change from 0 to 2048 [ 261.539637][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 261.720418][ T6106] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.841306][ T6107] NILFS (loop6): error -2 truncating bmap (ino=16) [ 262.369966][ T6106] NILFS (loop6): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 262.387973][ T6106] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16) [ 262.397958][ T6106] Remounting filesystem read-only [ 262.405345][ T5248] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer