last executing test programs: 48.664039074s ago: executing program 0 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace(0x8, r4) lseek(0xffffffffffffffff, 0x300000002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100f}) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e", 0x1e}], 0x1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x402100, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) 48.086530567s ago: executing program 0 (id=898): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setparam(r0, &(0x7f0000000080)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) 45.151613288s ago: executing program 0 (id=906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x80100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000e00000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='sched_wake_idle_without_ipi\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x5, 0x2, "c8d2c7934396"}}) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc400, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x86) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 39.857864808s ago: executing program 0 (id=920): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000001580)={0x3, [0x0, 0x0, 0xfffffffe], [{0x0, 0x5}, {}, {}, {0x101}, {0x4}, {0x0, 0x10000000}, {}, {}, {0x0, 0x4}]}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) close(0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000007c0)={0x90, "f76ffbffff1c04000004000000090000e61d40572181ef0200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000280)={"840d6042cee820000028000000e8ff0000002000000000000000000f00", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0383e04, &(0x7f0000000140)={"e3fe020000005affffffffff0d7ee4c0cda5cc81927b02000000000000001959", 0xffffffffffffffff, 0xffffffffffffffff, 0x2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f00000002c0)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@journal_ioprio}]}, 0x11, 0x515, &(0x7f0000000dc0)="$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") fcntl$lock(r6, 0x5, &(0x7f0000000600)={0x1, 0x5, 0x6364, 0xfffffffffffffffe}) ptrace$getregset(0x4204, 0x0, 0x1, 0x0) 36.739858305s ago: executing program 0 (id=927): openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c756d61736b3d30303030303030303030303030303030303030303030372c747970653ddc4d22b52c696f636861727365743d6b6f69382d722c6469725f756d61736b3d30303030303030303030303030303030303030303230312c00e3deb3df1827983de8bf9b6acf"], 0x1, 0x2f0, &(0x7f0000000240)="$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") prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x1) 17.917850334s ago: executing program 1 (id=964): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video4linux(&(0x7f0000001140), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioprio_set$pid(0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = socket$caif_stream(0x25, 0x1, 0x0) connect$caif(r3, &(0x7f0000000080)=@rfm={0x25, 0x0, "423e650059ef6c664b6dff801d261cd8"}, 0x18) 12.709850296s ago: executing program 2 (id=977): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102360, 0x18fd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 12.049002087s ago: executing program 2 (id=979): setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) setitimer(0x1, 0x0, 0x0) 11.15065965s ago: executing program 2 (id=981): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, 0xfffffffffffffffe, &(0x7f0000000000)) 10.470946893s ago: executing program 2 (id=982): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x500, 0x20a, 0x278, 0x500, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x2d8, 0x340, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r7, 0x12, 0x2, 0x0, 0x20000000) 10.422992257s ago: executing program 1 (id=984): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'xfrm0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x1, 0x0) gettid() openat$ttyS3(0xffffff9c, &(0x7f0000000500), 0x44140, 0x0) open(&(0x7f0000000280)='./file0/file0\x00', 0x387d82, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @union]}}, &(0x7f0000000b80)=""/4096, 0x46, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) 9.368986054s ago: executing program 2 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x0, 0x0) alarm(0x8000000000000001) 9.365173745s ago: executing program 1 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20008802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 8.513808763s ago: executing program 2 (id=989): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) sendmmsg$inet(r1, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) read(r5, 0x0, 0x2006) dup2(r5, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.43669536s ago: executing program 1 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x50, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) 7.706161928s ago: executing program 1 (id=993): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video4linux(&(0x7f0000001140), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioprio_set$pid(0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = socket$caif_stream(0x25, 0x1, 0x0) connect$caif(r3, &(0x7f0000000080)=@rfm={0x25, 0x0, "423e650059ef6c664b6dff801d261cd8"}, 0x18) 6.518432118s ago: executing program 3 (id=996): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x500, 0x20a, 0x278, 0x500, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x2d8, 0x340, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r7, 0x12, 0x2, 0x0, 0x20000000) 5.527731999s ago: executing program 3 (id=998): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x58, 0x0, 0x0, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}, 0x1, 0xf000}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a0000000000"], 0x114}], 0x1}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x7) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 5.350374875s ago: executing program 4 (id=999): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='dmask=00000000000020000000000,allow_utime=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c696f636861727365743d6b6f69382d752c6572726f72733d636f6e74696e14652c757466382c696f636861727365743d69736f383835392d392c696f636861727365743d63703433372c6572726f72733d636f6e74696e75652c00"], 0x1, 0x1524, &(0x7f0000002280)="$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") r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x500}}], 0x2, 0x0) 4.201834432s ago: executing program 3 (id=1000): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2}) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = getpgrp(0x0) syz_pidfd_open(r5, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 3.216321152s ago: executing program 3 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB="03387adc0f2e5f952bb5361c9b5746a20d2db10e034c3c8720876f763323fb674ad8d483e8d488272346a3027202537adb971a38d3d9e414d82bc1ebb265d67dd24a2d4105a87a6b0aebba6e3486a9a6580fae000069190ce74b608019e5d616b35bc96bbe248750f20fa0e020906b41d20adbed2bc5fd0a2830bf4757dc9680d1aa3cd50c6b3f460063aacfa7513137f1a1470176e6fd7274e28dc4bd9727da7917932a79afb8a5ddd40123ac7a73da1c25419148209bcda92af29f76187d9939141050656f545828ade7f3ddde73020d02b580559e087de493", @ANYRES32=r2, @ANYRES64=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x200, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) sendmsg$nl_route(r5, 0x0, 0x400c000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket$packet(0x11, 0x2, 0x300) 3.177605596s ago: executing program 4 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7f5b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x37, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000800000000000000ff00000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018340000020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xa8, &(0x7f0000000f80)=""/168, 0x41000, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x4, 0x9f}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001040)=[{0x5, 0x2, 0x8, 0x4}, {0x2, 0x4, 0xb}, {0x4, 0x5, 0x4, 0x4}, {0x4, 0x4, 0x10, 0x6}, {0x0, 0x4, 0x6, 0xc}, {0x5, 0x3, 0x7, 0x4}, {0x3, 0x3, 0x8, 0x2}, {0x1, 0x4, 0x8, 0x4}], 0x10, 0x23, @void, @value}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x538, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 2.558317114s ago: executing program 4 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7f5b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x37, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000800000000000000ff00000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018340000020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xa8, &(0x7f0000000f80)=""/168, 0x41000, 0x21, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x4, 0x9f}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001040)=[{0x5, 0x2, 0x8, 0x4}, {0x2, 0x4, 0xb}, {0x4, 0x5, 0x4, 0x4}, {0x4, 0x4, 0x10, 0x6}, {0x0, 0x4, 0x6, 0xc}, {0x5, 0x3, 0x7, 0x4}, {0x3, 0x3, 0x8, 0x2}, {0x1, 0x4, 0x8, 0x4}], 0x10, 0x23, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd5c, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x172eb3391ce08f27) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) pwritev(r7, &(0x7f00000003c0)=[{&(0x7f00000004c0)="aabf75165e2baa3797b0de01a04e74714e60fb1bbf6f4afb4f154365f31a118b0959f44de4a0d729254b458f8ca48b9049cbd194094e2a8a8e73ec797fb9da58ca770dd824643c708b7d814847e25bc26a8f33e7c4a6be58f58fb7996cfcff390fbad66d430239f3240e21ab276568d1a2e3438f2e76aa80cce27eacdcb61ab9a4059f8d2efac99d45f128f8c9e8365ee7ef12ccf6ccde83aef61449a3b9b66f38ec34da25e1dfd2527e591bb9", 0xad}, {&(0x7f0000000300)="d37b3011f2fbcd8bc1321e408a3c644683652d6cf8a080cd255a0cf79bc43944735bfbeb13cfa3b098ab9fe6a9f1b71d83", 0x31}], 0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x538, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 1.769809037s ago: executing program 3 (id=1004): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc000000000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.714291522s ago: executing program 4 (id=1005): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0xfffffffffffffffe, &(0x7f0000000000)) 1.566441625s ago: executing program 4 (id=1006): syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) tee(r0, r1, 0x8, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_open_dev$sndctrl(0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.521214089s ago: executing program 0 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x11c, 0x4, 0x0, 0x74efdfe049b861ab) userfaultfd(0x1) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x6e, 0x2}, @ramp}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) io_uring_setup(0x458, 0x0) io_uring_setup(0x19ad, 0x0) 755.73452ms ago: executing program 3 (id=1007): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x500, 0x20a, 0x278, 0x500, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x2d8, 0x340, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r7, 0x12, 0x2, 0x0, 0x20000000) 676.640727ms ago: executing program 1 (id=1008): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000010c0)=0x15) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000380)='\n', 0x160a}], 0x1) 0s ago: executing program 4 (id=1009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x80100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000e00000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='sched_wake_idle_without_ipi\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x5, 0x2, "c8d2c7934396"}}) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc400, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x86) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): 1.093724][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.233417][ T3700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.288486][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.296045][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.433556][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.794411][ T5126] loop3: detected capacity change from 0 to 2048 [ 201.804505][ T5125] ptrace attach of "./syz-executor exec"[4535] was attempted by "./syz-executor exec"[5125] [ 202.040124][ T5127] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.382206][ T3700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.392426][ T5130] loop0: detected capacity change from 0 to 64 [ 202.423980][ T5098] device hsr_slave_0 entered promiscuous mode [ 202.430391][ T3654] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 202.449212][ T5098] device hsr_slave_1 entered promiscuous mode [ 202.478206][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.497285][ T5098] Cannot create hsr debugfs directory [ 202.658106][ T5020] Bluetooth: hci6: command 0x041b tx timeout [ 203.368170][ T3654] usb 4-1: Using ep0 maxpacket: 16 [ 203.418416][ T3654] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 203.449844][ T3700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.538193][ T3654] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 203.555913][ T3654] usb 4-1: can't read configurations, error -61 [ 203.778028][ T3663] Bluetooth: Error in BCSP hdr checksum [ 203.792160][ T3700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.338060][ T3654] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 204.738371][ T5022] Bluetooth: hci6: command 0x040f tx timeout [ 204.988000][ T3654] usb 4-1: device descriptor read/64, error -71 [ 205.309463][ T3654] usb usb4-port1: attempt power cycle [ 205.528080][ T3612] Bluetooth: hci4: command 0x1003 tx timeout [ 205.534229][ T3570] Bluetooth: hci4: sending frame failed (-49) [ 205.544576][ T5098] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.580377][ T5098] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.593758][ T5140] loop1: detected capacity change from 0 to 40427 [ 205.613063][ T5098] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.643605][ T5098] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.654869][ T5140] F2FS-fs (loop1): invalid crc value [ 205.672781][ T5140] F2FS-fs (loop1): Found nat_bits in checkpoint [ 205.736424][ T3654] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 206.346119][ T5140] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 206.588307][ T3654] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 206.611404][ T3612] Bluetooth: hci2: command 0x0406 tx timeout [ 206.634659][ T3654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.746705][ T5175] attempt to access beyond end of device [ 206.746705][ T5175] loop1: rw=2049, want=45104, limit=40427 [ 206.808877][ T23] Bluetooth: hci6: command 0x0419 tx timeout [ 207.260057][ T3654] usb 4-1: config 0 descriptor?? [ 207.284119][ T3974] attempt to access beyond end of device [ 207.284119][ T3974] loop1: rw=2049, want=45112, limit=40427 [ 207.308911][ T3700] device hsr_slave_0 left promiscuous mode [ 207.318150][ T3700] device hsr_slave_1 left promiscuous mode [ 207.336293][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.354391][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.374460][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.390047][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.401686][ T3700] device bridge_slave_1 left promiscuous mode [ 207.408311][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.421052][ T3700] device bridge_slave_0 left promiscuous mode [ 207.427267][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.444169][ T3700] device veth1_macvtap left promiscuous mode [ 207.450639][ T3700] device veth0_macvtap left promiscuous mode [ 207.456971][ T3700] device veth1_vlan left promiscuous mode [ 207.463809][ T3700] device veth0_vlan left promiscuous mode [ 207.623473][ T5020] Bluetooth: hci4: command 0x1001 tx timeout [ 207.638124][ T3570] Bluetooth: hci4: sending frame failed (-49) [ 207.935186][ T3700] team0 (unregistering): Port device team_slave_1 removed [ 207.997274][ T3700] team0 (unregistering): Port device team_slave_0 removed [ 208.040469][ T3700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.067646][ T3700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.168119][ T3654] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 208.188142][ T3654] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 208.203030][ T3654] asix: probe of 4-1:0.0 failed with error -71 [ 208.242104][ T3654] usb 4-1: USB disconnect, device number 8 [ 208.374385][ T3700] bond0 (unregistering): Released all slaves [ 208.525090][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.567434][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.576080][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.588867][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.603719][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.623505][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.633456][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.640582][ T4831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.649754][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.671416][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.681488][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.691783][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.698909][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.743408][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.759210][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.809640][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.919261][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.964855][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.986395][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.076320][ T5192] ptrace attach of "./syz-executor exec"[3974] was attempted by "./syz-executor exec"[5192] [ 209.155707][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.194184][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.244389][ T5098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.306446][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.350603][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.362380][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.391338][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.698920][ T3612] Bluetooth: hci4: command 0x1009 tx timeout [ 209.914366][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.950368][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.987840][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.702103][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.780245][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.833128][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.889048][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.931547][ T5098] device veth0_vlan entered promiscuous mode [ 210.955297][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.005288][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.075569][ T5098] device veth1_vlan entered promiscuous mode [ 211.565436][ T5231] hub 6-0:1.0: USB hub found [ 211.571401][ T5231] hub 6-0:1.0: 1 port detected [ 211.738677][ T5098] device veth0_macvtap entered promiscuous mode [ 211.790183][ T5098] device veth1_macvtap entered promiscuous mode [ 211.878628][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.914072][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.943053][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.953898][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.964308][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.974843][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.996323][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.058848][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.115587][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.139024][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.148871][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.157648][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.170772][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.180587][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.190303][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.379419][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.588142][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.600974][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.619676][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.630303][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.641388][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.653588][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.668429][ T5246] loop3: detected capacity change from 0 to 128 [ 212.675314][ T5098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.684351][ T5098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.693943][ T5098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.719663][ T5098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.473843][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.488975][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.909674][ T3665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.936256][ T3665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.056901][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.065647][ T4831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.128265][ T4831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.222912][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.341210][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 214.808179][ T3654] Bluetooth: hci5: command 0x0409 tx timeout [ 215.086453][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.112842][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.149361][ T5244] device bridge_slave_0 entered promiscuous mode [ 215.210832][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.274090][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.305494][ T5244] device bridge_slave_1 entered promiscuous mode [ 215.475270][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.511028][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.625733][ T5274] loop1: detected capacity change from 0 to 256 [ 215.634372][ T5244] team0: Port device team_slave_0 added [ 215.671869][ T5244] team0: Port device team_slave_1 added [ 215.728932][ T5274] exfat: Deprecated parameter 'utf8' [ 215.746812][ T5274] exfat: Bad value for 'errors' [ 215.779644][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.804040][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.865150][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.969672][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.991763][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.060554][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.146814][ T3700] bond0: (slave netdevsim0): Releasing backup interface [ 216.204533][ T5244] device hsr_slave_0 entered promiscuous mode [ 216.224388][ T5244] device hsr_slave_1 entered promiscuous mode [ 216.272243][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.313322][ T5244] Cannot create hsr debugfs directory [ 217.246652][ T3654] Bluetooth: hci5: command 0x041b tx timeout [ 217.272979][ T5282] loop3: detected capacity change from 0 to 256 [ 217.388133][ T5282] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 218.675160][ T5315] loop1: detected capacity change from 0 to 128 [ 218.712520][ T5244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.728308][ T5244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.746247][ T5244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.813104][ T3700] device hsr_slave_0 left promiscuous mode [ 218.877644][ T3700] device hsr_slave_1 left promiscuous mode [ 218.884707][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.900184][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.913417][ T3700] device bridge_slave_1 left promiscuous mode [ 218.925187][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.981316][ T3700] device bridge_slave_0 left promiscuous mode [ 218.987575][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.755241][ T3866] Bluetooth: hci5: command 0x040f tx timeout [ 220.408136][ T5327] loop3: detected capacity change from 0 to 131072 [ 220.542486][ T5327] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 220.552047][ T5327] F2FS-fs (loop3): invalid crc value [ 220.579835][ T5327] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 220.655674][ T5327] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 221.575815][ T3700] team0 (unregistering): Port device team_slave_1 removed [ 221.697090][ T3700] team0 (unregistering): Port device team_slave_0 removed [ 221.739904][ T3700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.792693][ T3700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.848303][ T3866] Bluetooth: hci5: command 0x0419 tx timeout [ 222.166029][ T3700] bond0 (unregistering): Released all slaves [ 222.297284][ T5244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.825055][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.865780][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.896212][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.942346][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.965615][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.980028][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.983566][ T5350] loop2: detected capacity change from 0 to 256 [ 222.992871][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.001637][ T3779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.148894][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.231195][ T5350] exfat: Deprecated parameter 'utf8' [ 223.283967][ T5350] exfat: Bad value for 'errors' [ 223.303292][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.282687][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.592806][ T5358] loop1: detected capacity change from 0 to 256 [ 224.621933][ T3779] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.629109][ T3779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.785250][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.921988][ T5358] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 225.361905][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.598459][ T5244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.628033][ T5244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.662712][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.671869][ T5368] loop4: detected capacity change from 0 to 128 [ 225.677448][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.693966][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.703949][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.713521][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.722242][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.731041][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.740808][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.774725][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.885731][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.561464][ T5379] loop2: detected capacity change from 0 to 512 [ 227.620394][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.650224][ T5379] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 227.680977][ T5379] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 227.696664][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.719963][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.763574][ T5385] loop1: detected capacity change from 0 to 256 [ 227.791783][ T5385] exfat: Deprecated parameter 'utf8' [ 227.808056][ T5385] exfat: Bad value for 'errors' [ 227.822472][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.883192][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.075575][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.112996][ T5388] ebtables: ebtables: counters copy to user failed while replacing table [ 228.136511][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.164463][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.176272][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.209239][ T5244] device veth0_vlan entered promiscuous mode [ 228.273618][ T5244] device veth1_vlan entered promiscuous mode [ 228.407172][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.421441][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.454791][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.478366][ T5395] Cannot find del_set index 0 as target [ 228.496879][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.536342][ T5244] device veth0_macvtap entered promiscuous mode [ 228.572727][ T5244] device veth1_macvtap entered promiscuous mode [ 228.636146][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.662866][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.695080][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.727885][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.771310][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.815505][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.854715][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.891765][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.933625][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.969743][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.985592][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.011005][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.036354][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.096973][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.140367][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.177790][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.227990][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.249882][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.278628][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.310843][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.358108][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.406305][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.433302][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.452506][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.476405][ T5244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.495723][ T5244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.563859][ T5244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.583987][ T5244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.604632][ T5399] loop3: detected capacity change from 0 to 256 [ 229.668704][ T5399] exfat: Deprecated parameter 'utf8' [ 229.678396][ T5399] exfat: Bad value for 'errors' [ 229.905967][ T3663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.010504][ T3663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.454506][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.496014][ T3664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.586064][ T3664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.671378][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.684033][ T5407] loop3: detected capacity change from 0 to 256 [ 230.944365][ T5415] MTD: Couldn't look up 'mountinfo': -2 [ 232.356905][ T5407] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 233.226822][ T5422] loop4: detected capacity change from 0 to 512 [ 233.253040][ T5418] serio: Serial port pts0 [ 233.425470][ T5422] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 234.080454][ T5422] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 234.248880][ T5439] loop3: detected capacity change from 0 to 256 [ 234.358911][ T5439] exfat: Deprecated parameter 'utf8' [ 234.385056][ T5439] exfat: Bad value for 'errors' [ 234.832512][ T5448] ebtables: ebtables: counters copy to user failed while replacing table [ 236.807015][ T5467] loop1: detected capacity change from 0 to 256 [ 237.116856][ T5469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 237.477319][ T5465] loop4: detected capacity change from 0 to 131072 [ 237.534823][ T5472] loop2: detected capacity change from 0 to 512 [ 237.549098][ T5465] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 237.561827][ T5467] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 237.574137][ T5465] F2FS-fs (loop4): invalid crc value [ 237.743356][ T5465] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 238.171455][ T5472] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 238.182078][ T5465] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 238.213197][ T5472] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 238.787335][ T5496] loop3: detected capacity change from 0 to 2048 [ 241.339374][ T5503] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.392607][ T5504] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 241.487538][ T5504] serio: Serial port pts0 [ 241.771847][ T5513] loop1: detected capacity change from 0 to 256 [ 241.812074][ T5513] exfat: Deprecated parameter 'utf8' [ 241.817423][ T5513] exfat: Bad value for 'errors' [ 241.912715][ T5515] Process accounting resumed [ 242.199373][ T5518] ebtables: ebtables: counters copy to user failed while replacing table [ 242.364260][ T5524] No such timeout policy "syz1" [ 242.658059][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 242.767864][ T5526] loop0: detected capacity change from 0 to 256 [ 242.852399][ T5526] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 242.918044][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 243.039402][ T7] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 243.059447][ T7] usb 5-1: config 179 has no interface number 0 [ 243.092391][ T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 243.165327][ T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 243.198648][ T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.272277][ T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 243.290698][ T7] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 243.308017][ T7] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 243.329166][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.369061][ T5520] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 243.760086][ T13] usb 5-1: USB disconnect, device number 4 [ 243.768008][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 243.776971][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 243.944480][ T5532] ptrace attach of "./syz-executor exec"[5244] was attempted by "./syz-executor exec"[5532] [ 245.597348][ T5530] loop2: detected capacity change from 0 to 40427 [ 245.872559][ T5551] Process accounting resumed [ 245.944230][ T5530] F2FS-fs (loop2): invalid crc value [ 245.960508][ T5558] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.995915][ T5530] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.362858][ T5564] serio: Serial port pts0 [ 246.455171][ T5565] trusted_key: encrypted_key: insufficient parameters specified [ 246.720359][ T5530] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.983113][ T5576] No such timeout policy "syz1" [ 248.242476][ T5581] ptrace attach of "./syz-executor exec"[4535] was attempted by "./syz-executor exec"[5581] [ 248.536973][ T5586] hub 6-0:1.0: USB hub found [ 248.542574][ T5586] hub 6-0:1.0: 1 port detected [ 249.357165][ T5592] Process accounting resumed [ 251.198232][ T5607] smc: net device batadv_slave_1 applied user defined pnetid SYZ2 [ 251.253668][ T5611] trusted_key: encrypted_key: insufficient parameters specified [ 252.749062][ T5625] ptrace attach of "./syz-executor exec"[5098] was attempted by "./syz-executor exec"[5625] [ 254.437755][ T5649] loop4: detected capacity change from 0 to 256 [ 254.525994][ T5650] No such timeout policy "syz1" [ 254.536821][ T5649] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 255.700351][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.707319][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.839294][ T5671] trusted_key: encrypted_key: insufficient parameters specified [ 258.440142][ T5677] device batadv_slave_0 entered promiscuous mode [ 259.071367][ T5672] device batadv_slave_0 left promiscuous mode [ 263.415420][ T3569] Bluetooth: hci3: command 0x0406 tx timeout [ 267.112732][ T5727] loop0: detected capacity change from 0 to 131072 [ 267.198398][ T5739] No such timeout policy "syz1" [ 267.208098][ T5727] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 267.215761][ T5727] F2FS-fs (loop0): Unrecognized mount option "resgid=0x0000000000000000ÿÿÿÿÿÿÿÿ" or missing value [ 268.709844][ T5761] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 268.754662][ T5766] trusted_key: encrypted_key: insufficient parameters specified [ 268.800326][ T5761] serio: Serial port pts0 [ 272.554273][ T5798] Cannot find del_set index 0 as target [ 272.658148][ T3654] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 273.018247][ T3654] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 273.043126][ T3654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.796927][ T3654] usb 4-1: config 0 descriptor?? [ 274.301291][ T5812] loop2: detected capacity change from 0 to 2048 [ 275.768940][ T3654] hackrf 4-1:0.0: usb_control_msg() failed -110 request 0e [ 275.776309][ T3654] hackrf 4-1:0.0: Could not detect board [ 275.848826][ T3654] hackrf: probe of 4-1:0.0 failed with error -110 [ 275.903112][ T5813] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.963839][ T3654] usb 4-1: USB disconnect, device number 9 [ 280.930867][ T5868] loop4: detected capacity change from 0 to 2048 [ 281.257650][ T5869] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.093701][ T5862] loop0: detected capacity change from 0 to 40427 [ 282.228488][ T5862] F2FS-fs (loop0): invalid crc value [ 284.233385][ T5862] F2FS-fs (loop0): Found nat_bits in checkpoint [ 286.872084][ T5913] serio: Serial port pts0 [ 287.307832][ T5918] No such timeout policy "syz1" [ 288.305116][ T5922] loop2: detected capacity change from 0 to 2048 [ 288.878405][ T5923] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.238085][ T5019] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 290.598067][ T5019] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 290.607546][ T5019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.633758][ T5019] usb 5-1: config 0 descriptor?? [ 291.718173][ T5019] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 291.903276][ T5019] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 291.915809][ T5019] asix: probe of 5-1:0.0 failed with error -71 [ 291.944344][ T5019] usb 5-1: USB disconnect, device number 5 [ 292.850986][ T5950] loop2: detected capacity change from 0 to 4096 [ 292.921631][ T5952] loop1: detected capacity change from 0 to 64 [ 293.368956][ T5960] No such timeout policy "syz1" [ 294.179524][ T5950] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 294.858964][ T5972] loop4: detected capacity change from 0 to 256 [ 294.978674][ T5972] exfat: Deprecated parameter 'utf8' [ 294.984131][ T5972] exfat: Bad value for 'errors' [ 295.449909][ T3569] Bluetooth: hci0: command 0x1003 tx timeout [ 295.466646][ T3573] Bluetooth: hci0: sending frame failed (-49) [ 297.748203][ T13] Bluetooth: hci0: command 0x1001 tx timeout [ 297.758033][ T3573] Bluetooth: hci0: sending frame failed (-49) [ 298.097396][ T6005] hub 6-0:1.0: USB hub found [ 298.104315][ T6005] hub 6-0:1.0: 1 port detected [ 299.298141][ T6013] No such timeout policy "syz1" [ 300.482054][ T3569] Bluetooth: hci0: command 0x1009 tx timeout [ 300.673509][ T6021] loop3: detected capacity change from 0 to 4096 [ 301.001245][ T6021] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.087246][ T26] audit: type=1326 audit(1727958431.304:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc023f6ff9 code=0x7ffc0000 [ 302.115372][ T26] audit: type=1326 audit(1727958431.324:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc023f6ff9 code=0x7ffc0000 [ 302.178571][ T26] audit: type=1326 audit(1727958431.334:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fdc023f6ff9 code=0x7ffc0000 [ 302.200617][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.298544][ T26] audit: type=1326 audit(1727958431.334:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc023f6ff9 code=0x7ffc0000 [ 302.370536][ T26] audit: type=1326 audit(1727958431.334:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc023f6ff9 code=0x7ffc0000 [ 302.392858][ T26] audit: type=1326 audit(1727958431.364:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fdc023f6ff9 code=0x7ffc0000 [ 302.415277][ T26] audit: type=1326 audit(1727958431.364:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc023f6ff9 code=0x7ffc0000 [ 302.441707][ T26] audit: type=1326 audit(1727958431.364:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc023f6ff9 code=0x7ffc0000 [ 302.499860][ T26] audit: type=1326 audit(1727958431.364:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc023f6ff9 code=0x7ffc0000 [ 302.576414][ T26] audit: type=1326 audit(1727958431.364:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc023f6ff9 code=0x7ffc0000 [ 303.494478][ T6055] hub 6-0:1.0: USB hub found [ 303.508144][ T6055] hub 6-0:1.0: 1 port detected [ 304.803209][ T6060] No such timeout policy "syz1" [ 307.448143][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 307.983007][ T6090] loop2: detected capacity change from 0 to 64 [ 308.299984][ T6095] hub 6-0:1.0: USB hub found [ 308.305738][ T6095] hub 6-0:1.0: 1 port detected [ 308.662109][ T3665] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.729412][ T3665] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.841805][ T5016] Bluetooth: hci0: command 0x041b tx timeout [ 309.895069][ T3665] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.967010][ T6068] chnl_net:caif_netlink_parms(): no params data found [ 310.022687][ T3665] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.403601][ T6119] No such timeout policy "syz1" [ 311.026391][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.066328][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.133392][ T6068] device bridge_slave_0 entered promiscuous mode [ 311.142448][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.149827][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.157788][ T6068] device bridge_slave_1 entered promiscuous mode [ 311.242318][ T6068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.260381][ T6068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.884984][ T6068] team0: Port device team_slave_0 added [ 312.050559][ T5016] Bluetooth: hci0: command 0x040f tx timeout [ 312.076131][ T6068] team0: Port device team_slave_1 added [ 312.298520][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.305496][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.331505][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.397968][ T6068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.440121][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.478024][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.504109][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.547998][ T6068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.065951][ T6068] device hsr_slave_0 entered promiscuous mode [ 314.172469][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 314.188668][ T6068] device hsr_slave_1 entered promiscuous mode [ 314.206735][ T6068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.231693][ T6068] Cannot create hsr debugfs directory [ 315.278434][ T6172] No such timeout policy "syz1" [ 317.141650][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.148830][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.822749][ T6211] Process accounting resumed [ 318.975088][ T6068] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.080356][ T6068] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.928112][ T6068] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.946030][ T6068] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.156692][ T3665] device hsr_slave_0 left promiscuous mode [ 321.175730][ T3665] device hsr_slave_1 left promiscuous mode [ 321.195354][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.224925][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.238077][ T3612] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 321.261611][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.292208][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.322947][ T3665] device bridge_slave_1 left promiscuous mode [ 321.350647][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.386018][ T3665] device bridge_slave_0 left promiscuous mode [ 321.405868][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.462696][ T3665] device veth1_macvtap left promiscuous mode [ 321.482688][ T3665] device veth0_macvtap left promiscuous mode [ 321.503944][ T3665] device veth1_vlan left promiscuous mode [ 321.513600][ T3665] device veth0_vlan left promiscuous mode [ 321.622270][ T6238] trusted_key: encrypted_key: insufficient parameters specified [ 321.638245][ T3612] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 321.654042][ T3612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.684004][ T3612] usb 3-1: config 0 descriptor?? [ 322.147334][ T3665] team0 (unregistering): Port device team_slave_1 removed [ 322.166453][ T3665] team0 (unregistering): Port device team_slave_0 removed [ 322.185745][ T3665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.212757][ T3665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.447136][ T3665] bond0 (unregistering): Released all slaves [ 322.677574][ T6068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.750475][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.760026][ T3612] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 322.770976][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.772960][ T3612] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 322.790536][ T3612] asix: probe of 3-1:0.0 failed with error -71 [ 322.801336][ T3612] usb 3-1: USB disconnect, device number 5 [ 322.843721][ T6068] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.488823][ T6068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.500272][ T6068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.534854][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.573068][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.730242][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.737412][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.763714][ T6262] Process accounting resumed [ 323.970550][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.067696][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.087373][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.094579][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.110384][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.120513][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.137046][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.160426][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.180124][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.202058][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.233713][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.257794][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.283066][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.303815][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.321520][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.330159][ T23] Bluetooth: hci6: command 0x0406 tx timeout [ 324.350869][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.368113][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.616063][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.628836][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.830346][ T6068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.934384][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.963649][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.043788][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 325.076238][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.121085][ T6068] device veth0_vlan entered promiscuous mode [ 325.130524][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.165567][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.201457][ T6068] device veth1_vlan entered promiscuous mode [ 325.293200][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 325.313291][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 325.347456][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.390467][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.431288][ T6068] device veth0_macvtap entered promiscuous mode [ 325.454775][ T6068] device veth1_macvtap entered promiscuous mode [ 325.556025][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.581515][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.597271][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.628416][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.667141][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.708475][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.743627][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.798712][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.836168][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.874544][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.893120][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.927063][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.976415][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.055219][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.081685][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.228276][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.317612][ T6324] No such timeout policy "syz1" [ 326.374977][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.446946][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.515703][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.646813][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.811106][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.032578][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.061854][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.071853][ T6328] trusted_key: encrypted_key: insufficient parameters specified [ 327.116390][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.180815][ T6068] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.211024][ T6068] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.239538][ T6068] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.267626][ T6068] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.490559][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.512161][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.575321][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 327.671308][ T3636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.714945][ T3636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.764965][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.940191][ T6330] ptrace attach of "./syz-executor exec"[6068] was attempted by "./syz-executor exec"[6330] [ 330.405113][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 330.405129][ T26] audit: type=1804 audit(1727958459.624:18): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.615" name="/root/syz.36YEeT" dev="sda1" ino=1937 res=1 errno=0 [ 330.779724][ T6359] No such timeout policy "syz1" [ 331.602878][ T6361] print_req_error: 40 callbacks suppressed [ 331.602897][ T6361] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.620249][ T6361] F2FS-fs (loop1): Unable to read 1th superblock [ 331.626820][ T6361] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.637791][ T6361] F2FS-fs (loop1): Unable to read 2th superblock [ 332.359192][ T6372] trusted_key: encrypted_key: insufficient parameters specified [ 336.148362][ T6399] Process accounting resumed [ 336.484281][ T6407] No such timeout policy "syz1" [ 338.574497][ T6420] trusted_key: encrypted_key: insufficient parameters specified [ 340.008487][ T5016] Bluetooth: hci5: command 0x0406 tx timeout [ 341.463037][ T6422] loop2: detected capacity change from 0 to 40427 [ 341.542175][ T6422] F2FS-fs (loop2): invalid crc value [ 341.559037][ T6422] F2FS-fs (loop2): Found nat_bits in checkpoint [ 343.588579][ T6450] chnl_net:caif_netlink_parms(): no params data found [ 343.719695][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.726946][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.736365][ T6450] device bridge_slave_0 entered promiscuous mode [ 343.750329][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.764071][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.773340][ T6450] device bridge_slave_1 entered promiscuous mode [ 343.848077][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 343.878207][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 343.904173][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.964687][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.162167][ T6450] team0: Port device team_slave_0 added [ 344.211642][ T6450] team0: Port device team_slave_1 added [ 344.288336][ T13] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 344.322872][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.382331][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.402751][ T13] usb 1-1: config 0 descriptor?? [ 344.412198][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.493478][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.709498][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.716461][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.323824][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.457422][ T6450] device hsr_slave_0 entered promiscuous mode [ 345.499998][ T6450] device hsr_slave_1 entered promiscuous mode [ 345.929751][ T13] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 345.989511][ T13] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 346.046890][ T13] asix: probe of 1-1:0.0 failed with error -71 [ 346.481868][ T5021] Bluetooth: hci2: command 0x041b tx timeout [ 346.490479][ T13] usb 1-1: USB disconnect, device number 8 [ 346.828617][ T4144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.204146][ T4144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.325908][ T4144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.435957][ T4144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.493053][ T6507] loop3: detected capacity change from 0 to 40427 [ 348.594336][ T4144] device hsr_slave_0 left promiscuous mode [ 348.615021][ T4144] device hsr_slave_1 left promiscuous mode [ 348.645086][ T4144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.683871][ T6507] F2FS-fs (loop3): invalid crc value [ 348.732306][ T4144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.748941][ T5021] Bluetooth: hci2: command 0x040f tx timeout [ 348.760484][ T4144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.764086][ T6507] F2FS-fs (loop3): Found nat_bits in checkpoint [ 348.946516][ T6534] hub 6-0:1.0: USB hub found [ 348.952146][ T6534] hub 6-0:1.0: 1 port detected [ 349.888009][ T4144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.490177][ T4144] device bridge_slave_1 left promiscuous mode [ 350.498181][ T4144] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.509502][ T4144] device bridge_slave_0 left promiscuous mode [ 350.515711][ T4144] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.554121][ T4144] device veth1_macvtap left promiscuous mode [ 350.578258][ T4144] device veth0_macvtap left promiscuous mode [ 350.584369][ T4144] device veth1_vlan left promiscuous mode [ 350.590947][ T4144] device veth0_vlan left promiscuous mode [ 350.808032][ T5020] Bluetooth: hci2: command 0x0419 tx timeout [ 351.720236][ T4144] team0 (unregistering): Port device team_slave_1 removed [ 351.906803][ T4144] team0 (unregistering): Port device team_slave_0 removed [ 351.981352][ T4144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.214799][ T4144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.189580][ T4144] bond0 (unregistering): Released all slaves [ 354.492317][ T6450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.635930][ T6450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.665507][ T6450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.712309][ T6450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.068362][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.182872][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.206673][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.255331][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.300334][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.343478][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.409298][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.416497][ T3867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.520083][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 355.567725][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.610241][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.626640][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.633791][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.690769][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.740345][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.922637][ T6450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.137946][ T6450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.874723][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.908907][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.955162][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.964467][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.973370][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.000981][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.054400][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.094726][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.179801][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.402450][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.884025][ T6608] Cannot find map_set index 0 as target [ 358.072457][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.105824][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.281564][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.501736][ T6594] loop1: detected capacity change from 0 to 40427 [ 359.588623][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 359.606561][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 359.677267][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.714997][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.778653][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.799053][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.816294][ T6625] loop1: detected capacity change from 0 to 64 [ 359.869242][ T6450] device veth0_vlan entered promiscuous mode [ 360.034738][ T6629] hub 6-0:1.0: USB hub found [ 360.048171][ T6629] hub 6-0:1.0: 1 port detected [ 360.529194][ T6450] device veth1_vlan entered promiscuous mode [ 360.663811][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.676180][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 360.802258][ T6450] device veth0_macvtap entered promiscuous mode [ 361.018787][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.038592][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.069749][ T6450] device veth1_macvtap entered promiscuous mode [ 361.133694][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.196178][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.295122][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.343708][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.354801][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.367652][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.385575][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.397504][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.413138][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.425784][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.490023][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.535621][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.578702][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.636818][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.695294][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.766162][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.811032][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.874027][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.918029][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.928070][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.939829][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.953760][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.963806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.977851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 362.004206][ T6450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.026827][ T6450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.065002][ T6450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.096628][ T6450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.226933][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.254772][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.292636][ T3663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.305312][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.323991][ T3663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.364684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 362.813715][ T5021] Bluetooth: hci4: command 0x1003 tx timeout [ 362.820733][ T3570] Bluetooth: hci4: sending frame failed (-49) [ 364.894752][ T3612] Bluetooth: hci4: command 0x1001 tx timeout [ 365.038112][ T3570] Bluetooth: hci4: sending frame failed (-49) [ 365.163283][ T26] audit: type=1326 audit(1727958494.384:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff49bff9 code=0x7ffc0000 [ 365.226643][ T26] audit: type=1326 audit(1727958494.414:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f25ff49bff9 code=0x7ffc0000 [ 365.313647][ T26] audit: type=1326 audit(1727958494.414:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff49bff9 code=0x7ffc0000 [ 365.373149][ T26] audit: type=1326 audit(1727958494.414:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f25ff49bff9 code=0x7ffc0000 [ 365.439074][ T26] audit: type=1326 audit(1727958494.414:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff49bff9 code=0x7ffc0000 [ 365.514995][ T6659] loop3: detected capacity change from 0 to 40427 [ 365.932768][ T6681] hub 6-0:1.0: USB hub found [ 365.938184][ T6681] hub 6-0:1.0: 1 port detected [ 366.263217][ T6659] F2FS-fs (loop3): invalid crc value [ 366.299759][ T6659] F2FS-fs (loop3): Found nat_bits in checkpoint [ 366.479566][ T6659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 366.592072][ T6689] trusted_key: encrypted_key: insufficient parameters specified [ 367.050749][ T5020] Bluetooth: hci4: command 0x1009 tx timeout [ 367.267348][ T3568] attempt to access beyond end of device [ 367.267348][ T3568] loop3: rw=2049, want=45104, limit=40427 [ 367.959257][ T6701] ptrace attach of "./syz-executor exec"[3568] was attempted by "./syz-executor exec"[6701] [ 369.625275][ T6725] Cannot find map_set index 0 as target [ 371.845831][ T6741] ebtables: ebtables: counters copy to user failed while replacing table [ 373.441563][ T6735] loop3: detected capacity change from 0 to 40427 [ 373.525923][ T6735] F2FS-fs (loop3): invalid crc value [ 373.546878][ T6739] chnl_net:caif_netlink_parms(): no params data found [ 373.556778][ T6735] F2FS-fs (loop3): Found nat_bits in checkpoint [ 373.939886][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.997847][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.049747][ T6739] device bridge_slave_0 entered promiscuous mode [ 374.069249][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.258689][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.454982][ T6739] device bridge_slave_1 entered promiscuous mode [ 374.787953][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 375.001618][ T6739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.135487][ T6739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.843167][ T6739] team0: Port device team_slave_0 added [ 375.890049][ T6739] team0: Port device team_slave_1 added [ 376.134765][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.238605][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.569428][ T6739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.596975][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.617720][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.694973][ T6772] loop4: detected capacity change from 0 to 64 [ 376.776919][ T6739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.808039][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 377.759239][ T6739] device hsr_slave_0 entered promiscuous mode [ 377.920751][ T6739] device hsr_slave_1 entered promiscuous mode [ 378.299546][ T6782] loop0: detected capacity change from 0 to 512 [ 378.316601][ T6739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.327981][ T6739] Cannot create hsr debugfs directory [ 378.517219][ T6782] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 378.534737][ T6782] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 378.579727][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.586091][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.904990][ T3569] Bluetooth: hci4: command 0x040f tx timeout [ 378.947782][ T6739] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.037031][ T6800] ptrace attach of "./syz-executor exec"[4535] was attempted by "./syz-executor exec"[6800] [ 379.066110][ T6739] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.219729][ T6739] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.355195][ T6739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.519038][ T6739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 380.564699][ T6739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 380.652207][ T6739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 380.782803][ T6739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 380.968048][ T3569] Bluetooth: hci4: command 0x0419 tx timeout [ 381.249283][ T6796] loop3: detected capacity change from 0 to 40427 [ 381.334276][ T6796] F2FS-fs (loop3): invalid crc value [ 381.373320][ T6796] F2FS-fs (loop3): Found nat_bits in checkpoint [ 381.460740][ T6796] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 381.462876][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.084199][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.097457][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.144532][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.195459][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.208741][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.304454][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.311654][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.367589][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.400651][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.415965][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.748194][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.755371][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.275309][ T6827] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 383.303058][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.333384][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.399812][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.427696][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.536983][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.982278][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.992748][ T6827] serio: Serial port pts0 [ 384.004367][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.019338][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.102454][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.165555][ T6739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.571621][ T6739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.484273][ T3568] attempt to access beyond end of device [ 385.484273][ T3568] loop3: rw=2049, want=45104, limit=40427 [ 385.497163][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.532891][ T6836] loop2: detected capacity change from 0 to 512 [ 385.675117][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.745834][ T6844] ebtables: ebtables: counters copy to user failed while replacing table [ 386.383069][ T6846] loop0: detected capacity change from 0 to 64 [ 386.425360][ T6836] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 386.435296][ T6836] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 386.844274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.906217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.986935][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.021735][ T148] device hsr_slave_0 left promiscuous mode [ 387.034380][ T148] device hsr_slave_1 left promiscuous mode [ 387.056999][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.472139][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.527037][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.538690][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.548853][ T148] device bridge_slave_1 left promiscuous mode [ 387.558204][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.578618][ T148] device bridge_slave_0 left promiscuous mode [ 387.859908][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.293919][ T148] device veth1_macvtap left promiscuous mode [ 389.307149][ T148] device veth0_macvtap left promiscuous mode [ 389.379458][ T6875] hub 6-0:1.0: USB hub found [ 389.384827][ T6875] hub 6-0:1.0: 1 port detected [ 389.528122][ T148] device veth1_vlan left promiscuous mode [ 389.535266][ T148] device veth0_vlan left promiscuous mode [ 389.687999][ T1302] Bluetooth: hci0: command 0x1003 tx timeout [ 389.694151][ T146] Bluetooth: hci0: sending frame failed (-49) [ 389.989806][ T148] team0 (unregistering): Port device team_slave_1 removed [ 390.005113][ T148] team0 (unregistering): Port device team_slave_0 removed [ 390.019748][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.035781][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.175266][ T148] bond0 (unregistering): Released all slaves [ 390.855765][ T6739] device veth0_vlan entered promiscuous mode [ 390.894781][ T6739] device veth1_vlan entered promiscuous mode [ 390.953490][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.962438][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.971712][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 390.980967][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.990204][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 390.999436][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 391.113237][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 391.130440][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.314427][ T3654] Bluetooth: hci0: command 0x1001 tx timeout [ 392.320840][ T146] Bluetooth: hci0: sending frame failed (-49) [ 392.388878][ T6739] device veth0_macvtap entered promiscuous mode [ 392.457409][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.516391][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.567581][ T6895] serio: Serial port pts1 [ 392.575515][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 392.596179][ T6739] device veth1_macvtap entered promiscuous mode [ 392.664523][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.683894][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.712097][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.736232][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.757356][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.777566][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.799396][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.823508][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.882693][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.892268][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.942990][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 393.055537][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.497477][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.555154][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.576901][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.587182][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.624692][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.645009][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.658084][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.706080][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.733860][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 393.759988][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 393.795768][ T6739] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.814221][ T6739] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.834580][ T6739] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.856789][ T6739] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.392422][ T3569] Bluetooth: hci0: command 0x1009 tx timeout [ 394.426110][ T6912] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 394.435925][ T6912] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 394.439670][ T3665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.497771][ T3664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.514411][ T3664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.515475][ T3665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.583901][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 394.659541][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.101980][ T6955] Cannot find map_set index 0 as target [ 399.783859][ T6957] binder: 6956:6957 ioctl 4018620d 0 returned -22 [ 401.131380][ T3612] Bluetooth: hci0: command 0x0409 tx timeout [ 402.587686][ T6948] chnl_net:caif_netlink_parms(): no params data found [ 403.669332][ T5018] Bluetooth: hci0: command 0x041b tx timeout [ 403.812247][ T6948] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.844696][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.873734][ T6948] device bridge_slave_0 entered promiscuous mode [ 403.898838][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.924495][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.966467][ T6948] device bridge_slave_1 entered promiscuous mode [ 404.046693][ T6948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.056042][ T5018] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 404.083472][ T6948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.333739][ T6948] team0: Port device team_slave_0 added [ 404.344153][ T6948] team0: Port device team_slave_1 added [ 404.470803][ T5018] usb 2-1: Using ep0 maxpacket: 8 [ 405.252816][ T5018] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 405.885038][ T5018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.930677][ T5018] usb 2-1: config 0 descriptor?? [ 405.941048][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 405.989880][ T5018] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 406.678078][ T5018] cxusb: set interface failed [ 406.684767][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.692483][ T5018] dvb-usb: bulk message failed: -22 (1/0) [ 406.699714][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.707254][ T7005] loop3: detected capacity change from 0 to 256 [ 406.757553][ T6948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.760253][ T5018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 406.788413][ T5018] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 406.797383][ T5018] usb 2-1: media controller created [ 406.863903][ T5018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.880337][ T7005] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 406.895104][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.081539][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.109469][ T6948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.353303][ T6948] device hsr_slave_0 entered promiscuous mode [ 407.390905][ T6948] device hsr_slave_1 entered promiscuous mode [ 407.475951][ T6948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.530929][ T6948] Cannot create hsr debugfs directory [ 408.445926][ T7015] loop1: detected capacity change from 0 to 131072 [ 408.461625][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 408.485121][ T7015] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 408.496382][ T7015] F2FS-fs (loop1): invalid crc value [ 408.566834][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.632348][ T7015] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 408.688164][ T7015] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 408.713861][ T5018] DVB: Unable to find symbol lgdt330x_attach() [ 408.720418][ T5018] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 408.778060][ T5018] dvb-usb: bulk message failed: -22 (1/0) [ 408.783980][ T5018] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 408.814666][ T5018] usb 2-1: USB disconnect, device number 4 [ 408.879074][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.881774][ T5018] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 409.100240][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.205840][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.278523][ T7026] ptrace attach of "./syz-executor exec"[4535] was attempted by "./syz-executor exec"[7026] [ 414.407009][ T7058] loop3: detected capacity change from 0 to 131072 [ 414.839660][ T7058] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 415.003664][ T7058] F2FS-fs (loop3): invalid crc value [ 415.585076][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 415.734600][ T7058] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 415.985039][ T7086] loop2: detected capacity change from 0 to 256 [ 415.996423][ T7058] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 416.081030][ T7086] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 416.188346][ T6948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.234814][ T6948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.275518][ T6948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.327636][ T6948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.665903][ T6948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.757821][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 416.766317][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.781472][ T6948] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.815367][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 416.836942][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.885427][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.892610][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.901349][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.996026][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 417.012039][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.066587][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.073728][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.137721][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 417.178504][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 417.229079][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 417.240219][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 417.278674][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 417.318330][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 417.351757][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 417.393500][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 417.429170][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.492338][ T6948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.549128][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.588401][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 417.601576][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.667963][ T148] device hsr_slave_0 left promiscuous mode [ 417.719617][ T148] device hsr_slave_1 left promiscuous mode [ 417.737456][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.784281][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.821082][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.831112][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.845420][ T148] device bridge_slave_1 left promiscuous mode [ 417.950882][ T7115] ptrace attach of "./syz-executor exec"[3568] was attempted by "./syz-executor exec"[7115] [ 418.496127][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.518324][ T148] device bridge_slave_0 left promiscuous mode [ 418.541243][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.607400][ T148] device veth1_macvtap left promiscuous mode [ 418.620643][ T148] device veth0_macvtap left promiscuous mode [ 418.661898][ T148] device veth1_vlan left promiscuous mode [ 418.695541][ T148] device veth0_vlan left promiscuous mode [ 419.020989][ T7123] netlink: 140 bytes leftover after parsing attributes in process `syz.1.791'. [ 420.172196][ T148] team0 (unregistering): Port device team_slave_1 removed [ 420.214169][ T148] team0 (unregistering): Port device team_slave_0 removed [ 420.371166][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.914946][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.992107][ T7140] loop1: detected capacity change from 0 to 131072 [ 422.383546][ T7144] No such timeout policy "syz1" [ 422.472508][ T148] bond0 (unregistering): Released all slaves [ 422.514495][ T7140] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 422.525230][ T7140] F2FS-fs (loop1): invalid crc value [ 422.647894][ T7140] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 422.708056][ T7140] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 422.945290][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.028539][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.088222][ T6948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.164353][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.190340][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.330924][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.352024][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.355458][ T7160] loop2: detected capacity change from 0 to 256 [ 423.364489][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.378981][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.392511][ T6948] device veth0_vlan entered promiscuous mode [ 423.454915][ T6948] device veth1_vlan entered promiscuous mode [ 423.477209][ T7160] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 423.562758][ T6948] device veth0_macvtap entered promiscuous mode [ 423.698804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 423.718307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 423.726516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.769997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.807118][ T6948] device veth1_macvtap entered promiscuous mode [ 423.824838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 423.974023][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.031634][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.042108][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.053053][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.063855][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.074870][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.085968][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.097501][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.116265][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.125880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 424.169044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.249410][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.260257][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.271004][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.282393][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.292890][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.303709][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.314025][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.325021][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.349657][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.367651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.382894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 424.443046][ T6948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.478285][ T6948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.487436][ T6948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.496767][ T6948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.425388][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.446330][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.571260][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 425.626566][ T3663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.657222][ T3663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.697105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 425.856000][ T7167] loop4: detected capacity change from 0 to 40427 [ 425.986235][ T7167] F2FS-fs (loop4): invalid crc value [ 427.359956][ T7167] F2FS-fs (loop4): Found nat_bits in checkpoint [ 427.614374][ T7167] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 430.002726][ T7212] loop0: detected capacity change from 0 to 256 [ 430.116928][ T6450] attempt to access beyond end of device [ 430.116928][ T6450] loop4: rw=2049, want=45104, limit=40427 [ 430.215425][ T7212] exfat: Deprecated parameter 'utf8' [ 430.238031][ T7212] exfat: Bad value for 'errors' [ 430.350056][ T7214] netlink: 68 bytes leftover after parsing attributes in process `syz.3.816'. [ 431.824200][ T7235] loop3: detected capacity change from 0 to 256 [ 432.580943][ T7235] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 433.489771][ T7255] Cannot find map_set index 0 as target [ 433.723319][ T7258] loop0: detected capacity change from 0 to 4096 [ 433.880137][ T7258] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 434.181987][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.828'. [ 434.283297][ T7244] loop1: detected capacity change from 0 to 40427 [ 434.365407][ T7266] loop3: detected capacity change from 0 to 256 [ 434.430249][ T7244] F2FS-fs (loop1): invalid crc value [ 434.494723][ T7244] F2FS-fs (loop1): Found nat_bits in checkpoint [ 434.499603][ T7266] exfat: Deprecated parameter 'utf8' [ 434.517388][ T7266] exfat: Bad value for 'errors' [ 438.208986][ T7281] trusted_key: encrypted_key: insufficient parameters specified [ 439.155105][ T7289] loop3: detected capacity change from 0 to 256 [ 439.987268][ T7289] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 440.021619][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.029810][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.941073][ T7295] No such timeout policy "syz1" [ 441.610767][ T7308] loop2: detected capacity change from 0 to 256 [ 441.658632][ T7308] exfat: Deprecated parameter 'utf8' [ 441.667296][ T7308] exfat: Bad value for 'errors' [ 444.138366][ T7333] trusted_key: encrypted_key: insufficient parameters specified [ 444.644040][ T7317] loop1: detected capacity change from 0 to 40427 [ 445.132742][ T7317] F2FS-fs (loop1): invalid crc value [ 445.172573][ T7317] F2FS-fs (loop1): Found nat_bits in checkpoint [ 445.373459][ T7317] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 445.428337][ T7350] loop3: detected capacity change from 0 to 256 [ 446.415484][ T7353] loop2: detected capacity change from 0 to 131072 [ 446.587201][ T7350] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 446.653635][ T7353] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 446.663280][ T7353] F2FS-fs (loop2): invalid crc value [ 446.828414][ T6739] attempt to access beyond end of device [ 446.828414][ T6739] loop1: rw=2049, want=45104, limit=40427 [ 446.879963][ T7353] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 446.937395][ T7353] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 447.233366][ T7367] loop2: detected capacity change from 0 to 256 [ 447.302008][ T7367] exfat: Deprecated parameter 'utf8' [ 447.317516][ T7367] exfat: Bad value for 'errors' [ 450.309885][ T7384] loop2: detected capacity change from 0 to 512 [ 452.985211][ T7405] loop1: detected capacity change from 0 to 131072 [ 453.117368][ T7405] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 453.126681][ T7405] F2FS-fs (loop1): invalid crc value [ 453.235268][ T7405] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 453.272402][ T7405] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 454.152072][ T7427] Cannot find map_set index 0 as target [ 455.324984][ T7435] hub 6-0:1.0: USB hub found [ 455.330531][ T7435] hub 6-0:1.0: 1 port detected [ 457.916453][ T7455] loop4: detected capacity change from 0 to 512 [ 457.978020][ T7455] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 457.988436][ T7455] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 459.447405][ T7459] loop4: detected capacity change from 0 to 131072 [ 459.533194][ T7459] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 459.543077][ T7459] F2FS-fs (loop4): invalid crc value [ 459.593657][ T7459] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 459.651973][ T7459] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 460.150376][ T7477] Cannot find map_set index 0 as target [ 461.193667][ T7483] hub 6-0:1.0: USB hub found [ 461.199081][ T7483] hub 6-0:1.0: 1 port detected [ 464.502722][ T7507] loop4: detected capacity change from 0 to 512 [ 464.558133][ T7507] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 464.587162][ T7507] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 464.674620][ T7520] misc userio: Invalid payload size [ 465.690502][ T7530] loop1: detected capacity change from 0 to 256 [ 465.788585][ T7530] exfat: Deprecated parameter 'utf8' [ 465.794233][ T7530] exfat: Bad value for 'errors' [ 466.898476][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 467.301228][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.314619][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.329161][ T7532] device bridge_slave_0 entered promiscuous mode [ 467.340512][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.350301][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.368429][ T7532] device bridge_slave_1 entered promiscuous mode [ 467.403836][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.415602][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.494397][ T7532] team0: Port device team_slave_0 added [ 467.529305][ T7532] team0: Port device team_slave_1 added [ 467.607699][ T1246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.687995][ T5016] Bluetooth: hci2: command 0x0406 tx timeout [ 468.295101][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.303620][ T5016] Bluetooth: hci5: command 0x0409 tx timeout [ 468.313093][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.349029][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.369464][ T1246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.387594][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.395870][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.477201][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.565212][ T1246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.631391][ T7532] device hsr_slave_0 entered promiscuous mode [ 468.643242][ T7532] device hsr_slave_1 entered promiscuous mode [ 468.652651][ T7532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.288759][ T7532] Cannot create hsr debugfs directory [ 469.323447][ T1246] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.439401][ T3612] Bluetooth: hci5: command 0x041b tx timeout [ 470.588768][ T7586] Process accounting resumed [ 470.881503][ T7598] loop1: detected capacity change from 0 to 256 [ 470.958642][ T7598] exfat: Deprecated parameter 'utf8' [ 470.965725][ T7598] exfat: Bad value for 'errors' [ 471.270699][ T7604] ebtables: ebtables: counters copy to user failed while replacing table [ 472.045331][ T7532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 472.097956][ T7532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 472.156001][ T7532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 472.205959][ T7532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 472.488300][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 472.601671][ T1246] device hsr_slave_0 left promiscuous mode [ 472.615139][ T1246] device hsr_slave_1 left promiscuous mode [ 472.639296][ T1246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.664656][ T1246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.706126][ T1246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.740532][ T1246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.777549][ T1246] device bridge_slave_1 left promiscuous mode [ 472.788287][ T1246] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.842806][ T1246] device bridge_slave_0 left promiscuous mode [ 472.872076][ T1246] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.892242][ T7634] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 472.948300][ T1246] device veth1_macvtap left promiscuous mode [ 472.954662][ T7630] loop0: detected capacity change from 0 to 512 [ 472.972960][ T1246] device veth0_macvtap left promiscuous mode [ 473.043654][ T1246] device veth1_vlan left promiscuous mode [ 473.085243][ T1246] device veth0_vlan left promiscuous mode [ 473.099605][ T7634] serio: Serial port pts0 [ 473.106490][ T7630] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 473.157287][ T7630] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 473.869472][ T1246] smc: removing net device batadv_slave_1 with user defined pnetid SYZ2 [ 473.984439][ T1246] team0 (unregistering): Port device team_slave_1 removed [ 474.264004][ T7640] Process accounting resumed [ 474.302311][ T1246] team0 (unregistering): Port device team_slave_0 removed [ 475.184410][ T5018] Bluetooth: hci5: command 0x0419 tx timeout [ 475.262557][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.301051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.343874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.391444][ T7532] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.450973][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.500786][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.525934][ T4144] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.533184][ T4144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.563010][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.573200][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.582488][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.594857][ T4144] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.602136][ T4144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.611361][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 475.620455][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 475.639183][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 475.650186][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 475.660557][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 475.670696][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 475.679531][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 475.690990][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 475.716178][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 475.783258][ T7532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.831348][ T7532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 475.871306][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 475.893694][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 475.913962][ T7653] loop0: detected capacity change from 0 to 64 [ 478.777483][ T5018] Bluetooth: hci1: command 0x1003 tx timeout [ 478.873377][ T3570] Bluetooth: hci1: sending frame failed (-49) [ 479.000803][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.027199][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.108731][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.200653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.215797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.304276][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 479.330344][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.369056][ T7532] device veth0_vlan entered promiscuous mode [ 479.392879][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.444441][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.469153][ T7532] device veth1_vlan entered promiscuous mode [ 479.580026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 479.624416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 479.647784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.668998][ T7680] Process accounting resumed [ 479.674607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.723782][ T7532] device veth0_macvtap entered promiscuous mode [ 479.960717][ T7532] device veth1_macvtap entered promiscuous mode [ 480.021194][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 480.044031][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 480.142606][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.191576][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.278574][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.290170][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.300721][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.475987][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.501617][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.522525][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.543930][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.556198][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.573880][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.592040][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.604115][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.621455][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.645740][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.759334][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.763284][ T7693] loop4: detected capacity change from 0 to 512 [ 480.790427][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.800439][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.811355][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.831319][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.901763][ T5018] Bluetooth: hci1: command 0x1001 tx timeout [ 480.925155][ T7693] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 480.925368][ T3570] Bluetooth: hci1: sending frame failed (-49) [ 480.949007][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.989262][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 481.019215][ T7693] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 481.021572][ T7532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.082053][ T7532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.145028][ T7532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.196412][ T7532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.715545][ T3664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.405558][ T5016] Bluetooth: hci1: command 0x1009 tx timeout [ 483.420537][ T3664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.458818][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.510568][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.532526][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.577620][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 484.244079][ T7715] loop3: detected capacity change from 0 to 2048 [ 484.592687][ T7716] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 485.394139][ T7723] Process accounting resumed [ 487.647431][ T1246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.786870][ T7741] chnl_net:caif_netlink_parms(): no params data found [ 487.832932][ T1246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.945172][ T1246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.053505][ T1246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.121423][ T7741] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.135275][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.180601][ T7741] device bridge_slave_0 entered promiscuous mode [ 488.259434][ T7741] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.298896][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.308380][ T7741] device bridge_slave_1 entered promiscuous mode [ 488.488110][ T23] Bluetooth: hci6: command 0x0409 tx timeout [ 488.542586][ T7741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.625108][ T7741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.814296][ T7741] team0: Port device team_slave_0 added [ 488.858841][ T7741] team0: Port device team_slave_1 added [ 488.978334][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.005509][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.119433][ T7741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.250323][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.257387][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.318856][ T7741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.154714][ T7741] device hsr_slave_0 entered promiscuous mode [ 490.308439][ T7741] device hsr_slave_1 entered promiscuous mode [ 490.514265][ T7786] netlink: 'syz.1.953': attribute type 29 has an invalid length. [ 490.578351][ T5017] Bluetooth: hci6: command 0x041b tx timeout [ 490.738748][ T7787] loop3: detected capacity change from 0 to 2048 [ 490.861667][ T7741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.870708][ T7785] loop2: detected capacity change from 0 to 512 [ 490.878332][ T7741] Cannot create hsr debugfs directory [ 490.932971][ T7788] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 491.230673][ T7785] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 491.934361][ T7785] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 492.236262][ T7799] No such timeout policy "syz1" [ 492.543205][ T1246] device hsr_slave_0 left promiscuous mode [ 492.555223][ T1246] device hsr_slave_1 left promiscuous mode [ 492.571270][ T1246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.589831][ T1246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.607964][ T5017] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 492.612534][ T1246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.639826][ T1246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.648114][ T3612] Bluetooth: hci6: command 0x040f tx timeout [ 492.683384][ T1246] device bridge_slave_1 left promiscuous mode [ 492.708384][ T1246] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.740146][ T1246] device bridge_slave_0 left promiscuous mode [ 492.751976][ T1246] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.815181][ T1246] device veth1_macvtap left promiscuous mode [ 492.836927][ T1246] device veth0_macvtap left promiscuous mode [ 492.853042][ T1246] device veth1_vlan left promiscuous mode [ 492.867062][ T1246] device veth0_vlan left promiscuous mode [ 492.922937][ T5017] usb 5-1: Using ep0 maxpacket: 8 [ 493.258102][ T5017] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 493.267593][ T5017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.281467][ T5017] usb 5-1: Product: syz [ 493.287074][ T5017] usb 5-1: Manufacturer: syz [ 493.292319][ T5017] usb 5-1: SerialNumber: syz [ 493.316282][ T5017] usb 5-1: config 0 descriptor?? [ 493.350629][ T7819] Process accounting resumed [ 493.578046][ T5017] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 493.751570][ T1246] team0 (unregistering): Port device team_slave_1 removed [ 493.790961][ T1246] team0 (unregistering): Port device team_slave_0 removed [ 493.805895][ T1246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.822453][ T1246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.573076][ T1246] bond0 (unregistering): Released all slaves [ 494.790033][ T3612] Bluetooth: hci6: command 0x0419 tx timeout [ 495.548413][ T5017] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 496.056723][ T3612] usb 5-1: USB disconnect, device number 6 [ 496.334085][ T7741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 496.429823][ T7741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 496.699263][ T7741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.918553][ T7741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.019999][ T7861] ptrace attach of "./syz-executor exec"[4535] was attempted by "./syz-executor exec"[7861] [ 498.626915][ T3866] Bluetooth: hci4: command 0x0406 tx timeout [ 498.664447][ T7741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.691441][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 498.753076][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.955532][ T7741] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.618069][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.705745][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.770462][ T4144] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.777549][ T4144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.786152][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 499.806332][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 499.821989][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.841591][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.848728][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.955944][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.445409][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 501.105853][ T7892] loop3: detected capacity change from 0 to 131072 [ 501.114648][ T7894] syz.2.979 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 501.140548][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 501.191239][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 501.218787][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 501.247419][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 501.302104][ T7741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 501.355769][ T7892] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 501.365785][ T7892] F2FS-fs (loop3): invalid crc value [ 501.461944][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.468599][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.508405][ T7741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.627532][ T7892] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 501.936967][ T7892] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 502.054393][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.089536][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.195217][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.260544][ T7908] ptrace attach of "./syz-executor exec"[6450] was attempted by "./syz-executor exec"[7908] [ 502.353188][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.362002][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.374767][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.477043][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.491034][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.533050][ T7741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.625466][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 503.642770][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 503.699684][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 503.740729][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.783622][ T7741] device veth0_vlan entered promiscuous mode [ 503.795589][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.815439][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.851649][ T7741] device veth1_vlan entered promiscuous mode [ 503.919474][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 503.938292][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 503.956133][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 504.026451][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 504.106591][ T7741] device veth0_macvtap entered promiscuous mode [ 504.291800][ T7741] device veth1_macvtap entered promiscuous mode [ 504.752079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 504.891577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 505.863307][ T7971] fuse: Bad value for 'group_id' [ 505.901697][ T7971] Process accounting resumed [ 505.921068][ T7741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.960819][ T7741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.990323][ T7741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.038525][ T7741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.053032][ T7741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.065206][ T7741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.075567][ T7741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.181749][ T7741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.201821][ T7741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.209796][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 506.241407][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 507.191428][ T7741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.234506][ T7741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.363148][ T7991] loop4: detected capacity change from 0 to 256 [ 507.397513][ T7741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.451021][ T7741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.337982][ T7741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.348914][ T7741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.374695][ T7741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.492346][ T7741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.526834][ T7741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.546578][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 508.556146][ T7991] exfat: Deprecated parameter 'utf8' [ 508.565384][ T7991] exfat: Bad value for 'errors' [ 508.609336][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 508.664413][ T7741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.719760][ T7741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.729173][ T7741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.738270][ T7741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.920800][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.948466][ T3665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.968361][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.988781][ T3665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.996085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 510.815537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 511.789907][ T8023] Process accounting resumed [ 512.573493][ T8037] INFO: trying to register non-static key. [ 512.579321][ T8037] The code is fine but needs lockdep annotation, or maybe [ 512.586421][ T8037] you didn't initialize this object before use? [ 512.592639][ T8037] turning off the locking correctness validator. [ 512.598944][ T8037] CPU: 1 PID: 8037 Comm: syz.1.1008 Not tainted 5.15.167-syzkaller #0 [ 512.607088][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 512.617135][ T8037] Call Trace: [ 512.620403][ T8037] [ 512.623325][ T8037] dump_stack_lvl+0x1e3/0x2d0 [ 512.627988][ T8037] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 512.633601][ T8037] ? panic+0x860/0x860 [ 512.637650][ T8037] ? __is_module_percpu_address+0x287/0x3c0 [ 512.643529][ T8037] ? is_kernel_percpu_address+0x132/0x150 [ 512.649231][ T8037] assign_lock_key+0x21e/0x230 [ 512.653973][ T8037] ? SOFTIRQ_verbose+0x10/0x10 [ 512.658713][ T8037] ? reacquire_held_locks+0x660/0x660 [ 512.664063][ T8037] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 512.670023][ T8037] register_lock_class+0x28a/0x9a0 [ 512.675112][ T8037] ? __lock_acquire+0x1295/0x1ff0 [ 512.680114][ T8037] ? is_dynamic_key+0x1f0/0x1f0 [ 512.684947][ T8037] __lock_acquire+0xd7/0x1ff0 [ 512.689606][ T8037] lock_acquire+0x1db/0x4f0 [ 512.694088][ T8037] ? gsmld_write+0x5b/0x120 [ 512.698568][ T8037] ? __lock_acquire+0x1ff0/0x1ff0 [ 512.703569][ T8037] ? read_lock_is_recursive+0x10/0x10 [ 512.708922][ T8037] ? __might_fault+0xb4/0x110 [ 512.713580][ T8037] ? _copy_from_iter+0x3f0/0xe90 [ 512.718498][ T8037] ? _raw_spin_lock_irqsave+0xac/0x120 [ 512.723942][ T8037] ? lockdep_hardirqs_off+0x70/0x100 [ 512.729211][ T8037] _raw_spin_lock_irqsave+0xd1/0x120 [ 512.734476][ T8037] ? gsmld_write+0x5b/0x120 [ 512.738968][ T8037] ? _raw_spin_lock+0x40/0x40 [ 512.743639][ T8037] gsmld_write+0x5b/0x120 [ 512.747947][ T8037] file_tty_write+0x561/0x920 [ 512.752952][ T8037] ? gsmld_read+0x10/0x10 [ 512.757261][ T8037] do_iter_readv_writev+0x594/0x7a0 [ 512.762443][ T8037] ? generic_file_rw_checks+0x260/0x260 [ 512.767968][ T8037] ? common_file_perm+0x17d/0x1d0 [ 512.772974][ T8037] ? fsnotify_perm+0x64/0x590 [ 512.777631][ T8037] ? security_file_permission+0x75/0xa0 [ 512.783157][ T8037] do_iter_write+0x1e6/0x760 [ 512.787728][ T8037] ? import_iovec+0xe6/0x120 [ 512.792297][ T8037] do_writev+0x281/0x470 [ 512.796524][ T8037] ? do_readv+0x460/0x460 [ 512.800838][ T8037] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 512.806799][ T8037] ? vtime_user_exit+0x2d1/0x400 [ 512.811719][ T8037] ? syscall_enter_from_user_mode+0x2e/0x240 [ 512.817677][ T8037] ? lockdep_hardirqs_on+0x94/0x130 [ 512.822851][ T8037] ? syscall_enter_from_user_mode+0x2e/0x240 [ 512.828814][ T8037] do_syscall_64+0x3b/0xb0 [ 512.833209][ T8037] ? clear_bhb_loop+0x15/0x70 [ 512.837870][ T8037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 512.843751][ T8037] RIP: 0033:0x7f58ebc60ff9 [ 512.848143][ T8037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.867736][ T8037] RSP: 002b:00007f58ea0d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 512.876127][ T8037] RAX: ffffffffffffffda RBX: 00007f58ebe18f80 RCX: 00007f58ebc60ff9 [ 512.884075][ T8037] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 512.892021][ T8037] RBP: 00007f58ebcd3296 R08: 0000000000000000 R09: 0000000000000000 [ 512.899967][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.907913][ T8037] R13: 0000000000000000 R14: 00007f58ebe18f80 R15: 00007ffe14425378 [ 512.915867][ T8037] [ 512.918887][ T8037] [U] [ 512.921554][ T8037] [U] [ 512.924217][ T8037] [U] [ 512.926881][ T8037] [U] [ 512.932666][ T8037] [U] [ 512.935377][ T8037] [U] [ 512.938065][ T8037] [U] [ 512.940748][ T8037] [U] [ 512.987817][ T8037] [U] [ 512.990525][ T8037] [U] [ 512.993197][ T8037] [U] [ 513.061622][ T8036] [U]