last executing test programs: 14.420774013s ago: executing program 3 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 12.112227825s ago: executing program 3 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/104, 0x68) 10.304279815s ago: executing program 3 (id=259): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x2e, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000080)=0x500, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x8, 0x0, 0x0, {{0x2c, 0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000200)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0"], 0x1, 0x655, &(0x7f0000005b40)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000140)=""/140, 0x8c) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 9.629680049s ago: executing program 3 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000008b"]) 8.615688894s ago: executing program 2 (id=270): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 8.540586544s ago: executing program 4 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 8.539722094s ago: executing program 1 (id=281): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$unix(0x1, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) 8.318681956s ago: executing program 0 (id=272): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002340)={'xfrm0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r2, @ANYBLOB="da"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104005540000000000000480000", @ANYRES32=r2, @ANYBLOB='\v'], 0x20}}, 0x0) 7.076032733s ago: executing program 1 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 6.823439824s ago: executing program 2 (id=274): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc6e9c0e"}}) 6.775429254s ago: executing program 0 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1}, 0x60) 6.358722916s ago: executing program 2 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 6.358554296s ago: executing program 4 (id=277): unshare(0x8040080) syz_clone3(&(0x7f0000000340)={0x40000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @remote}}}, 0x84) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) r4 = getpgrp(0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x12000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3], [0x7fff, 0x3]], '\x00', [{}, {}, {0x0, 0x21cb}, {0x0, 0x9d2b, 0x0, 0x1, 0x1}, {0x0, 0x1931}, {0x0, 0xfffffffe}, {0x8}, {0x0, 0x8}, {}, {0x0, 0x3}, {0xfffffffd}], '\x00', 0x1000}) r6 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f00000030c0)={r6, r3, 0xc7f9}) 4.965658263s ago: executing program 4 (id=278): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0), 0x1, 0x5d8, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.960461254s ago: executing program 2 (id=279): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x8, 0x1, 0x483}}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) 4.920845704s ago: executing program 1 (id=280): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@dev}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private}, {}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x107, 0x0, 0x0, {0x0, 0x7c}, [@typed={0x4}, @nested={0x4}]}, 0x1c}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 4.813281534s ago: executing program 0 (id=282): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x3f}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000380)=""/76}, 0x20) 4.521529016s ago: executing program 3 (id=283): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffe, 0x1033c2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000000000014"], 0x3c}}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x60}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x0) acct(&(0x7f0000000000)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 4.463756316s ago: executing program 0 (id=284): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x1214c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa85, &(0x7f0000000440)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r1, &(0x7f0000000340)='2', 0x1, 0x8000c61) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = fsopen(&(0x7f0000000680)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x37, 0x2}) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x4, 0x8000}) r4 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x188241c, &(0x7f0000000080)=ANY=[], 0x1, 0x1273, &(0x7f0000001900)="$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") fcntl$setpipe(r4, 0x407, 0x6) 4.463310706s ago: executing program 1 (id=285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setrlimit(0x2, &(0x7f00000000c0)={0x200000000, 0x40000000000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x50}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendto$inet6(r0, &(0x7f0000000340)="a5b663a1", 0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) 3.661057031s ago: executing program 2 (id=286): openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) 3.637651921s ago: executing program 4 (id=287): r0 = gettid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003380)) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 3.183443613s ago: executing program 3 (id=288): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 2.553580226s ago: executing program 1 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000440)="66b9800000c00f326635000800000f300f0f18ba3535660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c0ded36635004000000f300f20e06635800000000f22e0f30fa6c8", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.473199157s ago: executing program 2 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x109000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000046d4e1f12c12daf00e00884762a17c1e04102104fe8000000000000000000000000000ffef"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.401618467s ago: executing program 4 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0x2, &(0x7f0000000000)={0x4, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x3) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) 1.271567844s ago: executing program 1 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.271438103s ago: executing program 4 (id=293): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0xe4) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) 1.270968493s ago: executing program 0 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 0s ago: executing program 0 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}]}, 0x44}}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 63.655500][ T4158] cgroup: Unknown subsys name 'net' [ 63.787806][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.196111][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.594920][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 66.644454][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 66.672076][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 66.709015][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 66.743198][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 66.818867][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.826642][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.835074][ T4169] device bridge_slave_0 entered promiscuous mode [ 66.847046][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.854138][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.862552][ T4169] device bridge_slave_1 entered promiscuous mode [ 66.937770][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.945052][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.952925][ T4170] device bridge_slave_0 entered promiscuous mode [ 66.969566][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.978781][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.986025][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.993724][ T4175] device bridge_slave_0 entered promiscuous mode [ 67.000911][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.008114][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.015897][ T4181] device bridge_slave_0 entered promiscuous mode [ 67.023696][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.030734][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.039079][ T4170] device bridge_slave_1 entered promiscuous mode [ 67.055075][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.064305][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.071621][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.079376][ T4175] device bridge_slave_1 entered promiscuous mode [ 67.086655][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.093864][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.102297][ T4181] device bridge_slave_1 entered promiscuous mode [ 67.116635][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.123857][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.131846][ T4168] device bridge_slave_0 entered promiscuous mode [ 67.174021][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.181075][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.189560][ T4168] device bridge_slave_1 entered promiscuous mode [ 67.205427][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.217536][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.235881][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.255180][ T4169] team0: Port device team_slave_0 added [ 67.269664][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.280857][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.292628][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.309773][ T4169] team0: Port device team_slave_1 added [ 67.337647][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.357000][ T4175] team0: Port device team_slave_0 added [ 67.379016][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.398246][ T4175] team0: Port device team_slave_1 added [ 67.406504][ T4181] team0: Port device team_slave_0 added [ 67.415060][ T4181] team0: Port device team_slave_1 added [ 67.422815][ T4170] team0: Port device team_slave_0 added [ 67.438093][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.445238][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.471319][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.496902][ T4170] team0: Port device team_slave_1 added [ 67.510366][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.517369][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.543514][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.579115][ T4168] team0: Port device team_slave_0 added [ 67.589481][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.596649][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.622798][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.634432][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.641495][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.668128][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.686796][ T4168] team0: Port device team_slave_1 added [ 67.708545][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.716545][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.742514][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.764067][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.771032][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.797312][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.808813][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.815973][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.842030][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.853701][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.860639][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.886897][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.899674][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.906891][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.933062][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.949861][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.956974][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.983194][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.040834][ T4169] device hsr_slave_0 entered promiscuous mode [ 68.048079][ T4169] device hsr_slave_1 entered promiscuous mode [ 68.081073][ T4175] device hsr_slave_0 entered promiscuous mode [ 68.088503][ T4175] device hsr_slave_1 entered promiscuous mode [ 68.095242][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.103363][ T4175] Cannot create hsr debugfs directory [ 68.124908][ T4168] device hsr_slave_0 entered promiscuous mode [ 68.132023][ T4168] device hsr_slave_1 entered promiscuous mode [ 68.138631][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.146209][ T4168] Cannot create hsr debugfs directory [ 68.166009][ T4170] device hsr_slave_0 entered promiscuous mode [ 68.174085][ T4170] device hsr_slave_1 entered promiscuous mode [ 68.180621][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.188249][ T4170] Cannot create hsr debugfs directory [ 68.214394][ T4181] device hsr_slave_0 entered promiscuous mode [ 68.221329][ T4181] device hsr_slave_1 entered promiscuous mode [ 68.227983][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.235640][ T4181] Cannot create hsr debugfs directory [ 68.322384][ T4171] Bluetooth: hci0: command 0x0409 tx timeout [ 68.330835][ T4171] Bluetooth: hci1: command 0x0409 tx timeout [ 68.331395][ T2305] Bluetooth: hci4: command 0x0409 tx timeout [ 68.337785][ T4171] Bluetooth: hci3: command 0x0409 tx timeout [ 68.349431][ T4171] Bluetooth: hci2: command 0x0409 tx timeout [ 68.569339][ T4170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.582835][ T4170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.592306][ T4170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.602861][ T4170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.653169][ T4169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.673209][ T4169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.687176][ T4169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.708844][ T4169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.763782][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.771971][ T4175] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.781105][ T4175] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.799647][ T4175] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.827479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.837008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.845087][ T4175] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.858943][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.894826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.905394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.914577][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.921908][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.930662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.954287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.963533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.973836][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.980985][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.015532][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.025044][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.038926][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.048695][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.064802][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.084147][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.094894][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.139542][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.146781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.155823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.164729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.174277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.182731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.192006][ T4168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.203862][ T4168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.215009][ T4168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.224634][ T4168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.250528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.260288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.269218][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.276352][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.285414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.294898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.303362][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.310405][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.319416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.328565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.337175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.345682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.357048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.379500][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.390853][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.412570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.422884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.432505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.445635][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.458428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.481682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.489338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.498871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.509056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.517840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.532114][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.571626][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.581074][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.592524][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.603220][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.611879][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.618939][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.627574][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.636857][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.645412][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.652518][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.660372][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.678887][ T4169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.689563][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.728074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.738231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.748934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.765437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.775574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.785653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.795856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.837295][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.852154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.862910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.871797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.879262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.899766][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.918755][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.939356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.948009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.959195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.968691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.976978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.985070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.994011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.003704][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.010752][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.018911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.032425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.041652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.058747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.069227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.078425][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.085539][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.097036][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.110604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.138012][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.146809][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.158325][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.168374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.176313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.184360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.193018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.201800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.210312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.218177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.226322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.235845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.250541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.259215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.268199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.281783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.290440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.304630][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.340575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.349732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.358822][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.365947][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.375407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.384346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.403660][ T4219] Bluetooth: hci4: command 0x041b tx timeout [ 70.409805][ T4219] Bluetooth: hci0: command 0x041b tx timeout [ 70.410298][ T4214] Bluetooth: hci2: command 0x041b tx timeout [ 70.437402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.445812][ T4214] Bluetooth: hci3: command 0x041b tx timeout [ 70.452548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.461111][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 70.471779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.480159][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.487261][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.498149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.507681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.517898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.526652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.535212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.546541][ T4170] device veth0_vlan entered promiscuous mode [ 70.564137][ T4170] device veth1_vlan entered promiscuous mode [ 70.578764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.586779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.594555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.605455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.614435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.625674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.634029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.643378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.651873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.659528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.670285][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.679909][ T4169] device veth0_vlan entered promiscuous mode [ 70.700225][ T4169] device veth1_vlan entered promiscuous mode [ 70.709401][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.719133][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.728806][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.737897][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.758119][ T4170] device veth0_macvtap entered promiscuous mode [ 70.789177][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.799231][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.810821][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.820649][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.831727][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.839191][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.846657][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.855735][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.865740][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.881617][ T4170] device veth1_macvtap entered promiscuous mode [ 70.905922][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.919435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.929340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.949129][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.960377][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.976615][ T4169] device veth0_macvtap entered promiscuous mode [ 70.991584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.999959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.008799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.018407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.027362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.047213][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.062740][ T4169] device veth1_macvtap entered promiscuous mode [ 71.080576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.088870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.098568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.119358][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.145195][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.152403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.159825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.168790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.178610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.190676][ T4170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.200183][ T4170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.209767][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.219026][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.235126][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.253788][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.268644][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.295366][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.306518][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.317780][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.326992][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.353657][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.364661][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.376920][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.400258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.410526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.427536][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.437367][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.446946][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.456104][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.489822][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.498177][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.505937][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.514449][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.525575][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.533777][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.546222][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.563373][ T4175] device veth0_vlan entered promiscuous mode [ 71.622071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.630720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.664569][ T4175] device veth1_vlan entered promiscuous mode [ 71.679270][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.689280][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.698646][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.707340][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.717981][ T4168] device veth0_vlan entered promiscuous mode [ 71.740981][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.750665][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.758823][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.772892][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.792078][ T4168] device veth1_vlan entered promiscuous mode [ 71.802955][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.817515][ T4175] device veth0_macvtap entered promiscuous mode [ 71.825763][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.834700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.843957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.853364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.862398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.870109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.879184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.888462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.896831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.906084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.927163][ T4175] device veth1_macvtap entered promiscuous mode [ 71.953720][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.955449][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.972689][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.984545][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.985369][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.003313][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.015241][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.026584][ T4181] device veth0_vlan entered promiscuous mode [ 72.039386][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.048331][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.059051][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.072383][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.084344][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.094762][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.105460][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.117001][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.136127][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.147219][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.164671][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.171644][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.183586][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.194485][ T4175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.194872][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.209222][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.213412][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.220601][ T4175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.235296][ T4175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.244703][ T4175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.256647][ T4181] device veth1_vlan entered promiscuous mode [ 72.272613][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.282944][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.342013][ T4168] device veth0_macvtap entered promiscuous mode [ 72.367983][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.385784][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.395815][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.414186][ T4168] device veth1_macvtap entered promiscuous mode [ 72.436330][ T296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.473752][ T4181] device veth0_macvtap entered promiscuous mode [ 72.481919][ T4246] Bluetooth: hci1: command 0x040f tx timeout [ 72.488412][ T4246] Bluetooth: hci3: command 0x040f tx timeout [ 72.495647][ T296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.503415][ T4246] Bluetooth: hci4: command 0x040f tx timeout [ 72.511768][ T4218] Bluetooth: hci2: command 0x040f tx timeout [ 72.517875][ T4218] Bluetooth: hci0: command 0x040f tx timeout [ 72.572246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.580586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.595991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.608090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.624049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.666010][ T4251] hub 9-0:1.0: USB hub found [ 72.671063][ T4251] hub 9-0:1.0: 1 port detected [ 72.716645][ T4181] device veth1_macvtap entered promiscuous mode [ 72.739197][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.751443][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.761471][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.772501][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.782734][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.794821][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.815344][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.630221][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.667099][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.718150][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.739509][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.753141][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.764474][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.774360][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.786841][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.800894][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.810735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.819633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.846913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.859260][ T4256] loop2: detected capacity change from 0 to 64 [ 73.866573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.876642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.899637][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.909213][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.910033][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.930400][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.934090][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 73.947331][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.966566][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.976513][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.987097][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.998594][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.010321][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.020956][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.031522][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.042355][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.052549][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.063309][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.073408][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.084180][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.096692][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.113048][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.127544][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.137891][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.147694][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.157281][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.170272][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.184844][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.194486][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.207561][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.238058][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.248533][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.258461][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.280203][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.412529][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.434435][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.516112][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 74.574434][ T4217] Bluetooth: hci4: command 0x0419 tx timeout [ 74.578340][ T4218] Bluetooth: hci2: command 0x0419 tx timeout [ 74.582684][ T4217] Bluetooth: hci3: command 0x0419 tx timeout [ 74.631151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.640132][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.649106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.658070][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.667034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.676015][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.684984][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.938032][ T4217] Bluetooth: hci1: command 0x0419 tx timeout [ 75.175227][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.194232][ T4265] batman_adv: batadv0: Adding interface: ip6gretap1 [ 75.200833][ T4265] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.226982][ T4265] batman_adv: batadv0: Interface activated: ip6gretap1 [ 75.279237][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.309311][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.367288][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.393619][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.414977][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.524279][ T4279] ªªªªªª: renamed from vlan0 [ 75.588543][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.714436][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.743673][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.849706][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.857886][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.895390][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.112349][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.837822][ T4299] loop0: detected capacity change from 0 to 2048 [ 76.996120][ T4299] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.551139][ C0] sched: RT throttling activated [ 81.271351][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.370241][ T4362] loop2: detected capacity change from 0 to 512 [ 81.478189][ T4362] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.491851][ T4350] loop4: detected capacity change from 0 to 8192 [ 81.517533][ T4362] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.588073][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 81.628779][ T4362] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.685846][ T26] audit: type=1800 audit(1732330071.131:2): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.31" name="file2" dev="loop4" ino=1048590 res=0 errno=0 [ 83.291665][ T13] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 83.332570][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.350965][ T13] usb 1-1: Product: syz [ 83.385804][ T13] usb 1-1: Manufacturer: syz [ 83.390443][ T13] usb 1-1: SerialNumber: syz [ 83.570502][ T13] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 83.719611][ T4394] device syzkaller0 entered promiscuous mode [ 83.868727][ T4407] loop2: detected capacity change from 0 to 512 [ 84.059318][ T4407] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.148215][ T4399] kvm: emulating exchange as write [ 84.155959][ T4407] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.602647][ T4437] netlink: 180 bytes leftover after parsing attributes in process `syz.3.47'. [ 84.654922][ T4437] Zero length message leads to an empty skb [ 84.683200][ T4437] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.702179][ T4437] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.747318][ T4437] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.772396][ T4437] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.027147][ T4437] device geneve2 entered promiscuous mode [ 85.667114][ T26] audit: type=1326 audit(1732330075.111:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f913819 code=0x7ffc0000 [ 85.697526][ T26] audit: type=1326 audit(1732330075.111:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9f913819 code=0x7ffc0000 [ 85.724595][ T4445] loop1: detected capacity change from 0 to 512 [ 85.739905][ T26] audit: type=1326 audit(1732330075.131:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fca9f913819 code=0x7ffc0000 [ 85.771193][ T26] audit: type=1326 audit(1732330075.131:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca9f913853 code=0x7ffc0000 [ 85.897458][ T4445] EXT4-fs (loop1): Ignoring removed oldalloc option [ 85.905078][ T26] audit: type=1326 audit(1732330075.141:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca9f9122ff code=0x7ffc0000 [ 85.926948][ T26] audit: type=1326 audit(1732330075.171:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fca9f9138a7 code=0x7ffc0000 [ 85.960583][ T4445] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.972208][ T26] audit: type=1326 audit(1732330075.171:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca9f9121b0 code=0x7ffc0000 [ 86.270740][ T4445] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.551250][ T13] gspca_stk1135: reg_w 0x203 err -71 [ 87.788447][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 87.843033][ T1110] cfg80211: failed to load regulatory.db [ 87.864441][ T4476] 9pnet: Insufficient options for proto=fd [ 87.881612][ T13] gspca_stk1135: Sensor write failed [ 87.887000][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 87.896729][ T13] gspca_stk1135: Sensor write failed [ 87.902291][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 87.908931][ T13] gspca_stk1135: Sensor read failed [ 87.914577][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 87.921166][ T13] gspca_stk1135: Sensor read failed [ 87.926424][ T13] gspca_stk1135: Detected sensor type unknown (0x0) [ 87.934205][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 87.940613][ T13] gspca_stk1135: Sensor read failed [ 87.959805][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 87.966297][ T13] gspca_stk1135: Sensor read failed [ 87.971963][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 87.978400][ T13] gspca_stk1135: Sensor write failed [ 87.984065][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 87.990504][ T13] gspca_stk1135: Sensor write failed [ 87.996504][ T13] stk1135: probe of 1-1:64.0 failed with error -71 [ 88.293351][ T4445] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 88.361977][ T13] usb 1-1: USB disconnect, device number 2 [ 88.518400][ T26] audit: type=1326 audit(1732330075.171:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca9f91341b code=0x7ffc0000 [ 88.742794][ T4445] EXT4-fs (loop1): 1 truncate cleaned up [ 88.748476][ T4445] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 88.869939][ T26] audit: type=1326 audit(1732330075.181:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fca9f9124aa code=0x7ffc0000 [ 89.601439][ T26] audit: type=1326 audit(1732330075.181:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fca9f9124aa code=0x7ffc0000 [ 90.261382][ T26] audit: type=1326 audit(1732330075.321:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fca9f9120b7 code=0x7ffc0000 [ 90.288731][ T26] audit: type=1326 audit(1732330075.321:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fca9f914fba code=0x7ffc0000 [ 91.254736][ T4505] loop3: detected capacity change from 0 to 1024 [ 91.309113][ T4509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 91.433127][ T4509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 92.322876][ T4526] loop3: detected capacity change from 0 to 256 [ 98.039019][ T4541] loop3: detected capacity change from 0 to 8 [ 98.788368][ T4535] process 'syz.3.72' launched '/dev/fd/7/./file0' with NULL argv: empty string added [ 98.870929][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 99.180582][ T4555] loop1: detected capacity change from 0 to 256 [ 99.360542][ T4555] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 99.759036][ T4563] loop0: detected capacity change from 0 to 256 [ 99.991065][ T26] audit: type=1800 audit(1732330089.431:15): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.78" name="bus" dev="loop1" ino=1048601 res=0 errno=0 [ 100.001388][ T4566] Â: renamed from pim6reg1 [ 100.037258][ T4555] exFAT-fs (loop1): hint_cluster is invalid (17) [ 100.055509][ T4567] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET) [ 100.161511][ C0] llc_process_tmr_ev: timer called on closed connection [ 101.243405][ T4572] loop0: detected capacity change from 0 to 512 [ 101.347245][ T4572] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 101.400363][ T4572] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.498588][ T4572] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 101.568703][ T4572] EXT4-fs (loop0): 1 truncate cleaned up [ 101.595557][ T9] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 101.640482][ T4572] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x0000000000000000,jqfmt=vfsold,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 101.701585][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6220: comm kworker/u4:0: Failed to release dquot type 1 [ 102.077265][ T4606] netlink: 'syz.1.90': attribute type 1 has an invalid length. [ 102.199528][ T4608] loop2: detected capacity change from 0 to 1024 [ 102.636546][ T4608] EXT4-fs (loop2): Ignoring removed nobh option [ 102.771368][ T4608] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.824495][ T4616] loop4: detected capacity change from 0 to 128 [ 103.086864][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 103.678842][ T4616] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.698130][ T4616] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.245003][ T4608] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,dioread_nolock,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 104.287219][ T4628] loop1: detected capacity change from 0 to 512 [ 104.339364][ T4630] device vlan2 entered promiscuous mode [ 104.391058][ T4628] ======================================================= [ 104.391058][ T4628] WARNING: The mand mount option has been deprecated and [ 104.391058][ T4628] and is ignored by this kernel. Remove the mand [ 104.391058][ T4628] option from the mount to silence this warning. [ 104.391058][ T4628] ======================================================= [ 104.501448][ T4630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 104.578451][ T4628] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 104.622634][ T4628] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.781954][ T4630] device hsr_slave_1 left promiscuous mode [ 104.895643][ T4628] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 104.910968][ T4628] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 104.923461][ T4628] EXT4-fs (loop1): This should not happen!! Data will be lost [ 104.923461][ T4628] [ 104.933597][ T4628] EXT4-fs (loop1): Total free blocks count 0 [ 104.939567][ T4628] EXT4-fs (loop1): Free/Dirty block details [ 104.945520][ T4628] EXT4-fs (loop1): free_blocks=39626 [ 104.950832][ T4628] EXT4-fs (loop1): dirty_blocks=15 [ 104.955958][ T4628] EXT4-fs (loop1): Block reservation details [ 104.962823][ T4628] EXT4-fs (loop1): i_reserved_data_blocks=15 [ 109.291701][ T4686] syz.1.108 sent an empty control message without MSG_MORE. [ 111.532984][ T4692] loop1: detected capacity change from 0 to 512 [ 111.546389][ T4690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.113'. [ 111.573062][ T4690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.113'. [ 112.526854][ T4698] loop0: detected capacity change from 0 to 2048 [ 113.313583][ T4704] netlink: 72 bytes leftover after parsing attributes in process `syz.4.117'. [ 113.340007][ T4692] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.480929][ T4711] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.524133][ T4692] EXT4-fs (loop1): 1 truncate cleaned up [ 113.529897][ T4692] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.290781][ T4722] netlink: 244 bytes leftover after parsing attributes in process `syz.4.120'. [ 117.300449][ T4722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.120'. [ 118.858377][ T4738] netlink: 'syz.3.125': attribute type 5 has an invalid length. [ 118.878638][ T4743] loop0: detected capacity change from 0 to 1024 [ 118.934405][ T4743] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 119.277210][ T4743] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resgid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,dioread_lock,quota,,errors=continue. Quota mode: writeback. [ 120.397523][ T4762] loop2: detected capacity change from 0 to 2048 [ 120.416080][ T4219] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.485164][ T4762] loop2: p3 < > p4 < > [ 120.506684][ T4762] loop2: partition table partially beyond EOD, truncated [ 120.530291][ T4762] loop2: p3 start 4284289 is beyond EOD, truncated [ 120.642977][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.651718][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.890351][ T4765] syz.0.131 (4765) used greatest stack depth: 19224 bytes left [ 121.584659][ T4219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.595923][ T4219] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.617342][ T4219] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.631459][ T4219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.674126][ T4219] usb 4-1: config 0 descriptor?? [ 122.158445][ T4219] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 122.262391][ T4219] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 122.520533][ T4798] Restarting kernel threads ... done. [ 122.799746][ T1327] usb 4-1: USB disconnect, device number 2 [ 124.549412][ T4818] loop0: detected capacity change from 0 to 1024 [ 124.756048][ T4818] hfsplus: request for non-existent node 33423360 in B*Tree [ 124.800335][ T4818] hfsplus: request for non-existent node 33423360 in B*Tree [ 124.868284][ T4826] hfsplus: request for non-existent node 33423360 in B*Tree [ 124.922605][ T4826] hfsplus: request for non-existent node 33423360 in B*Tree [ 124.932003][ T4829] hfsplus: request for non-existent node 33423360 in B*Tree [ 124.939334][ T4829] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.014997][ T4818] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.049320][ T4818] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.076614][ T4826] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.104221][ T4826] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.170538][ T4818] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.208693][ T4818] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.222832][ T4836] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 125.231241][ T4827] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.265352][ T4829] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.301299][ T4829] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.371868][ T4826] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.401874][ T4826] hfsplus: request for non-existent node 33423360 in B*Tree [ 125.543347][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 125.580529][ T4837] syz.4.147 (4837): drop_caches: 2 [ 125.672285][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 125.713419][ T4823] loop1: detected capacity change from 0 to 32768 [ 125.849103][ T4859] loop3: detected capacity change from 0 to 8 [ 125.876641][ T4859] squashfs: Unknown parameter 'ÿÿÿÿ' [ 125.939237][ T4862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 125.962105][ T4862] device bridge_slave_1 left promiscuous mode [ 125.972654][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.018241][ T26] audit: type=1800 audit(1732330115.461:16): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.145" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 126.083665][ T4862] device bridge_slave_0 left promiscuous mode [ 126.119660][ T4862] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.315271][ T4872] netlink: 'syz.3.152': attribute type 12 has an invalid length. [ 126.498728][ T4880] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 126.798865][ T4893] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.173327][ T4911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'. [ 128.436635][ T4922] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 130.208522][ T4941] loop1: detected capacity change from 0 to 1024 [ 130.503892][ T4219] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.045842][ T4292] hfsplus: b-tree write err: -5, ino 4 [ 131.151396][ T4219] usb 3-1: Using ep0 maxpacket: 16 [ 131.206395][ T4947] loop0: detected capacity change from 0 to 1024 [ 131.273946][ T4219] usb 3-1: config 0 has no interfaces? [ 131.290914][ T4947] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 131.327934][ T4947] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.366080][ T4947] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.394667][ T4947] EXT4-fs (loop0): Remounting filesystem read-only [ 131.420305][ T4947] EXT4-fs (loop0): 1 truncate cleaned up [ 131.431420][ T4219] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 131.447754][ T4947] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,grpid,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback. [ 131.450417][ T4219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.488116][ T4219] usb 3-1: Product: syz [ 131.493108][ T4219] usb 3-1: Manufacturer: syz [ 131.497796][ T4219] usb 3-1: SerialNumber: syz [ 131.499431][ T4969] capability: warning: `syz.4.171' uses 32-bit capabilities (legacy support in use) [ 131.537670][ T4219] usb 3-1: config 0 descriptor?? [ 131.593714][ T4528] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.720132][ T4981] loop3: detected capacity change from 0 to 1024 [ 131.792688][ T4969] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 131.851237][ T4528] usb 2-1: Using ep0 maxpacket: 8 [ 131.862345][ T4969] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 131.971443][ T4528] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.031263][ T4528] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.050587][ T4528] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 132.060293][ T4528] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.064887][ T4175] hfsplus: walked past end of dir [ 132.832966][ T4175] hfsplus: xattr search failed [ 132.896979][ T4528] usb 2-1: config 0 descriptor?? [ 132.943837][ T4528] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 133.130057][ T4993] loop3: detected capacity change from 0 to 1024 [ 133.317880][ T4994] overlayfs: failed to resolve './file2': -2 [ 134.411661][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.418166][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.472076][ T1327] usb 2-1: USB disconnect, device number 2 [ 134.528123][ T4999] loop0: detected capacity change from 0 to 1024 [ 134.582360][ T4217] usb 3-1: USB disconnect, device number 2 [ 134.609346][ T5002] mmap: syz.1.178 (5002) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 134.639148][ T4999] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none. [ 134.685009][ T4999] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.719975][ T4999] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.177: corrupted xattr block 128 [ 134.749836][ T4999] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.177: corrupted xattr block 128 [ 134.825007][ T26] audit: type=1804 audit(1732330124.261:17): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.177" name="/newroot/39/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 134.863832][ T26] audit: type=1804 audit(1732330124.271:18): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.177" name="/newroot/39/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 134.967706][ T26] audit: type=1804 audit(1732330124.271:19): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.177" name="/newroot/39/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 135.161255][ T1327] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 135.253426][ T5023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.184'. [ 135.606855][ T1327] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 135.625567][ T1327] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 135.648658][ T1327] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 135.664519][ T1327] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 135.679764][ T1327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 135.714476][ T1327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 135.828228][ T1327] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 136.242246][ T5034] syz.0.187[5034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.244751][ T5034] syz.0.187[5034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.341674][ T1327] usb 2-1: string descriptor 0 read error: -22 [ 136.426231][ T1327] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 136.450389][ T5034] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 136.468680][ T1327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.551699][ T1327] usb 2-1: config 0 descriptor?? [ 136.579145][ T5034] lo speed is unknown, defaulting to 1000 [ 136.595051][ T5034] lo speed is unknown, defaulting to 1000 [ 136.602592][ T1327] hub 2-1:0.0: bad descriptor, ignoring hub [ 136.612403][ T5038] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 136.623607][ T1327] hub: probe of 2-1:0.0 failed with error -5 [ 136.644453][ T5034] lo speed is unknown, defaulting to 1000 [ 136.644595][ T1327] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 136.663190][ T5037] kernel profiling enabled (shift: 6) [ 136.995408][ T1327] usb 2-1: USB disconnect, device number 3 [ 137.778306][ T5034] infiniband syz0: set active [ 137.807654][ T5034] infiniband syz0: added lo [ 139.023895][ T5034] RDS/IB: syz0: added [ 139.029874][ T5034] smc: adding ib device syz0 with port count 1 [ 139.045291][ T13] lo speed is unknown, defaulting to 1000 [ 139.053675][ T5034] smc: ib device syz0 port 1 has pnetid [ 139.063140][ T13] lo speed is unknown, defaulting to 1000 [ 139.073763][ T5034] lo speed is unknown, defaulting to 1000 [ 139.518335][ T5034] lo speed is unknown, defaulting to 1000 [ 141.489242][ T5101] loop2: detected capacity change from 0 to 16 [ 141.946661][ T5101] erofs: (device loop2): mounted with root inode @ nid 36. [ 142.237179][ T5034] lo speed is unknown, defaulting to 1000 [ 143.294525][ T5034] lo speed is unknown, defaulting to 1000 [ 143.674666][ T5034] lo speed is unknown, defaulting to 1000 [ 143.767521][ T5163] loop1: detected capacity change from 0 to 256 [ 143.880786][ T5163] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 143.951547][ T5166] tipc: Started in network mode [ 143.956761][ T5166] tipc: Node identity be4ce322379f, cluster identity 4711 [ 143.990925][ T5166] tipc: Enabled bearer , priority 0 [ 144.244578][ T5167] tipc: Disabling bearer [ 145.103655][ T4219] tipc: Node number set to 2312364834 [ 145.551371][ T5179] device vlan2 entered promiscuous mode [ 145.629352][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 145.785442][ T5179] device hsr_slave_1 left promiscuous mode [ 145.860740][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 146.001696][ T4528] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.101247][ T5197] loop3: detected capacity change from 0 to 512 [ 146.290569][ T5197] EXT4-fs (loop3): 1 orphan inode deleted [ 146.308008][ T5197] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,barrier,,errors=continue. Quota mode: writeback. [ 146.342608][ T5197] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.381475][ T4528] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.392821][ T4528] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.411650][ T4528] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 146.421491][ T4528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.441698][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.464553][ T4528] usb 1-1: config 0 descriptor?? [ 146.971428][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 147.092071][ T13] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 147.139543][ T13] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 147.237586][ T4528] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 147.276749][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.587052][ T4528] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 147.691518][ T4528] cp2112 0003:10C4:EA90.0002: error requesting version [ 147.700291][ T4528] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 147.724284][ T4528] usb 1-1: USB disconnect, device number 3 [ 147.751281][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 147.771540][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.818073][ T13] usb 3-1: Product: syz [ 147.827145][ T13] usb 3-1: Manufacturer: syz [ 147.830128][ T5219] loop4: detected capacity change from 0 to 2048 [ 147.834037][ T13] usb 3-1: SerialNumber: syz [ 147.846839][ T13] usb 3-1: config 0 descriptor?? [ 147.892717][ T13] appledisplay 3-1:0.0: Could not find int-in endpoint [ 147.900462][ T13] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 147.979697][ T5222] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.001611][ T5223] loop3: detected capacity change from 0 to 128 [ 148.028971][ T5223] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 148.057357][ T5223] attempt to access beyond end of device [ 148.057357][ T5223] loop3: rw=0, want=6491538, limit=128 [ 148.072815][ T5223] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 148.102642][ T5223] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 148.144121][ T4171] usb 3-1: USB disconnect, device number 3 [ 148.290168][ T5225] tipc: Started in network mode [ 148.299094][ T5225] tipc: Node identity 080211000001, cluster identity 4711 [ 148.321619][ T5225] tipc: Enabled bearer , priority 0 [ 148.768814][ T4175] sysv_free_block: flc_count > flc_size [ 148.796573][ T4175] sysv_free_block: flc_count > flc_size [ 148.831307][ T4175] sysv_free_block: flc_count > flc_size [ 148.838029][ T4175] sysv_free_block: flc_count > flc_size [ 148.852286][ T4175] sysv_free_block: flc_count > flc_size [ 148.857885][ T4175] sysv_free_block: flc_count > flc_size [ 148.874332][ T4175] sysv_free_block: flc_count > flc_size [ 148.880045][ T4175] sysv_free_block: flc_count > flc_size [ 148.888886][ T4175] sysv_free_block: flc_count > flc_size [ 148.897100][ T4175] sysv_free_block: flc_count > flc_size [ 148.904133][ T4175] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 148.949063][ T5241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.228'. [ 148.958368][ T4171] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 149.441244][ T13] tipc: Node number set to 134418688 [ 150.361286][ T4171] usb 5-1: config 0 has no interfaces? [ 150.459273][ T5263] Restarting kernel threads ... done. [ 152.548862][ T5283] loop0: detected capacity change from 0 to 128 [ 152.626813][ T5283] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 152.668209][ T5283] attempt to access beyond end of device [ 152.668209][ T5283] loop0: rw=0, want=6491538, limit=128 [ 152.721304][ T5283] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 152.800915][ T5283] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.160713][ T4170] sysv_free_block: flc_count > flc_size [ 153.169738][ T4170] sysv_free_block: flc_count > flc_size [ 153.201932][ T4170] sysv_free_block: flc_count > flc_size [ 153.212017][ T4170] sysv_free_block: flc_count > flc_size [ 153.217862][ T5289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'. [ 153.237257][ T4170] sysv_free_block: flc_count > flc_size [ 153.242943][ T4170] sysv_free_block: flc_count > flc_size [ 153.278338][ T4170] sysv_free_block: flc_count > flc_size [ 153.308508][ T4170] sysv_free_block: flc_count > flc_size [ 153.331190][ T4170] sysv_free_block: flc_count > flc_size [ 153.341516][ T4170] sysv_free_block: flc_count > flc_size [ 153.342431][ T4171] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 153.356703][ T4170] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 153.376270][ T4171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.390142][ T4171] usb 5-1: Product: syz [ 153.410130][ T4171] usb 5-1: Manufacturer: syz [ 153.439981][ T4171] usb 5-1: config 0 descriptor?? [ 153.646971][ T4171] usb 5-1: can't set config #0, error -71 [ 153.653931][ T5294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.685296][ T5297] binder_alloc: 5295: binder_alloc_buf size 154618822680 failed, no address space [ 153.692017][ T4171] usb 5-1: USB disconnect, device number 2 [ 153.701565][ T5297] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 153.822331][ T5298] overlayfs: failed to resolve './file2': -2 [ 154.811775][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 154.882184][ T5311] loop1: detected capacity change from 0 to 64 [ 155.004864][ T5312] loop4: detected capacity change from 0 to 128 [ 155.268939][ T5311] Trying to free block not in datazone [ 158.210483][ T5334] loop2: detected capacity change from 0 to 128 [ 158.738824][ T5334] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 158.868944][ T5334] attempt to access beyond end of device [ 158.868944][ T5334] loop2: rw=0, want=6491538, limit=128 [ 159.156205][ T5334] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 159.880128][ T5348] netlink: 'syz.3.259': attribute type 9 has an invalid length. [ 159.905028][ T5348] loop3: detected capacity change from 0 to 164 [ 160.146166][ T4169] sysv_free_block: flc_count > flc_size [ 160.394871][ T4169] sysv_free_block: flc_count > flc_size [ 160.420843][ T4169] sysv_free_block: flc_count > flc_size [ 160.472594][ T4169] sysv_free_block: flc_count > flc_size [ 160.478317][ T4169] sysv_free_block: flc_count > flc_size [ 160.510242][ T5360] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 160.542799][ T4169] sysv_free_block: flc_count > flc_size [ 160.572592][ T4169] sysv_free_block: flc_count > flc_size [ 160.578236][ T4169] sysv_free_block: flc_count > flc_size [ 160.611138][ T4169] sysv_free_block: flc_count > flc_size [ 160.626867][ T4169] sysv_free_block: flc_count > flc_size [ 160.633158][ T4169] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 160.769040][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 160.824439][ T5368] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 160.997727][ T5370] loop2: detected capacity change from 0 to 512 [ 161.137239][ T5370] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 161.167064][ T5370] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.403725][ T5370] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 161.419805][ T5370] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 161.432105][ T5370] EXT4-fs (loop2): This should not happen!! Data will be lost [ 161.432105][ T5370] [ 161.441778][ T5370] EXT4-fs (loop2): Total free blocks count 0 [ 161.447769][ T5370] EXT4-fs (loop2): Free/Dirty block details [ 161.453692][ T5370] EXT4-fs (loop2): free_blocks=39626 [ 161.458985][ T5370] EXT4-fs (loop2): dirty_blocks=15 [ 161.464150][ T5370] EXT4-fs (loop2): Block reservation details [ 161.470124][ T5370] EXT4-fs (loop2): i_reserved_data_blocks=15 [ 161.770054][ T5393] loop2: detected capacity change from 0 to 256 [ 163.476370][ T5399] syz.0.272 (5399) used greatest stack depth: 18488 bytes left [ 163.710288][ T5400] device syzkaller0 entered promiscuous mode [ 164.290664][ T5418] overlayfs: failed to resolve './file2': -2 [ 165.123600][ T5420] loop4: detected capacity change from 0 to 1024 [ 165.330259][ T5420] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.686613][ T5437] loop0: detected capacity change from 0 to 2048 [ 166.554259][ T5444] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.799049][ T5440] Process accounting resumed [ 170.169306][ T21] [ 170.172395][ T21] ============================= [ 170.177256][ T21] WARNING: suspicious RCU usage [ 170.182193][ T21] 5.15.173-syzkaller #0 Not tainted [ 170.187544][ T21] ----------------------------- [ 170.192433][ T21] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 170.200754][ T21] [ 170.200754][ T21] other info that might help us debug this: [ 170.200754][ T21] [ 170.211030][ T21] [ 170.211030][ T21] rcu_scheduler_active = 2, debug_locks = 1 [ 170.219117][ T21] 8 locks held by kworker/1:0/21: [ 170.224143][ T21] #0: ffff888062d62538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 170.235264][ T21] #1: ffffc90000db7d20 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 170.247838][ T21] #2: ffff88807dbdcc78 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x56/0x1d0 [ 170.258856][ T21] #3: ffffffff8c91fcc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 170.268438][ T21] #4: ffffffff8c91fcc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 170.278040][ T21] #5: ffffffff8c91fcc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 170.287650][ T21] #6: ffff88802537e108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xc1f/0x32b0 [ 170.297223][ T21] #7: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 170.306555][ T21] [ 170.306555][ T21] stack backtrace: [ 170.312445][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 5.15.173-syzkaller #0 [ 170.320501][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.330542][ T21] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 170.336599][ T21] Call Trace: [ 170.339893][ T21] [ 170.342812][ T21] dump_stack_lvl+0x1e3/0x2d0 [ 170.347511][ T21] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 170.353146][ T21] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 170.358687][ T21] qdisc_lookup+0xa8/0x630 [ 170.363185][ T21] qdisc_tree_reduce_backlog+0x212/0x4f0 [ 170.368810][ T21] pfifo_tail_enqueue+0x2ca/0x400 [ 170.373832][ T21] tbf_enqueue+0x345/0x6a0 [ 170.378242][ T21] ? __rwlock_init+0x140/0x140 [ 170.382997][ T21] dev_qdisc_enqueue+0x47/0x240 [ 170.387837][ T21] ? __dev_queue_xmit+0xcba/0x32b0 [ 170.392937][ T21] __dev_queue_xmit+0xe32/0x32b0 [ 170.397892][ T21] ? dev_queue_xmit+0x20/0x20 [ 170.402557][ T21] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 170.408525][ T21] ? print_irqtrace_events+0x210/0x210 [ 170.413973][ T21] ? __ipv6_neigh_lookup_noref+0x59b/0x730 [ 170.419783][ T21] ? ip6_finish_output2+0xcbf/0x15a0 [ 170.425063][ T21] ip6_finish_output2+0xead/0x15a0 [ 170.430170][ T21] ? __ip6_finish_output+0x7d0/0x7d0 [ 170.435456][ T21] ? __ip6_finish_output+0x645/0x7d0 [ 170.440765][ T21] udp_tunnel6_xmit_skb+0x538/0x970 [ 170.445991][ T21] send6+0x6a7/0xad0 [ 170.449902][ T21] ? send4+0xf50/0xf50 [ 170.453975][ T21] ? __local_bh_disable_ip+0x183/0x210 [ 170.459437][ T21] ? del_timer+0x183/0x310 [ 170.463862][ T21] ? wg_socket_send_skb_to_peer+0x56/0x1d0 [ 170.469661][ T21] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 170.475376][ T21] wg_packet_tx_worker+0x1a1/0x7a0 [ 170.480580][ T21] process_one_work+0x8a1/0x10c0 [ 170.485543][ T21] ? worker_detach_from_pool+0x260/0x260 [ 170.491205][ T21] ? _raw_spin_lock_irqsave+0x120/0x120 [ 170.496747][ T21] ? kthread_data+0x4e/0xc0 [ 170.501238][ T21] ? wq_worker_running+0x97/0x170 [ 170.506266][ T21] worker_thread+0xaca/0x1280 [ 170.510971][ T21] kthread+0x3f6/0x4f0 [ 170.515049][ T21] ? rcu_lock_release+0x20/0x20 [ 170.519972][ T21] ? kthread_blkcg+0xd0/0xd0 [ 170.524548][ T21] ret_from_fork+0x1f/0x30 [ 170.528969][ T21] [ 170.776957][ T5476] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 171.764392][ T5489] overlayfs: failed to resolve './file2': -2