last executing test programs: 16.191163062s ago: executing program 2 (id=116): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [], {}, [], {0x10, 0x6}}, 0x24, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r6 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$nfc_llcp(r6, 0x6a, 0x0, 0x0, 0x20000071) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x20, r7, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1], 0x40}}, 0x0) 15.862849591s ago: executing program 2 (id=117): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22701, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000ffff00"}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x884, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) syz_open_pts(r1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020) 14.698335805s ago: executing program 2 (id=119): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f0000000340)="c88ca41443def930559634317d074690ac7552ac3ef6aa3e0ca608c78fc27d83dadf568d5e8a00a001aacadeb12f9be18bc16ddf9cc48e8b387f85033dc25ff8e243", 0x42, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @cgroup_sysctl=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socket$kcm(0x28, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x0, 0xadf9, 0x7, 0x8000, 0x18806, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2, @void, @value=r2}, 0x50) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000070000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "af9c1d95b59ceb13"}}, 0x48}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r7, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0x8, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) 12.425623178s ago: executing program 2 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) accept(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x1a6, &(0x7f0000000600)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x170, 0x11, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, {[@srh={0x5e, 0x4, 0x4, 0x2, 0x8, 0x0, 0x3, [@mcast1, @mcast2]}, @dstopts={0x5e, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x200}, @generic={0x4, 0x85, "fc6645bab44b8cfd95ff84093e77cf7941996f895fe6573fd9c21980b47fdd79fef114e52190dd8005b96f0146b4da6813322398ca61c44248486c74b17168735fbd0696fab68482408e2a43ed0f783c35e2557e0d33a385879ec1a5f614dc40a81a8d21fe5123ef70b96aa657fcd980789419f76e118e003853f104f97d2f347e6e7b249c"}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @pad1]}, @fragment={0x6, 0x0, 0x5, 0x0, 0x0, 0x3, 0x66}, @routing={0x6c, 0x8, 0x1, 0x2, 0x0, [@private1, @empty, @empty, @local]}, @hopopts={0x3b, 0x7, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x81, [0x10, 0x9, 0x5, 0x6f98]}}, @generic, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8000}]}], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}}}}}}}}, 0x0) setrlimit(0x9, &(0x7f00000005c0)={0x4, 0x9f40}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 12.014627665s ago: executing program 2 (id=124): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5511, &(0x7f0000006b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x0, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) inotify_add_watch(r0, &(0x7f0000000180)='./bus\x00', 0x40000200) pwritev2(r0, 0x0, 0x0, 0x7fff, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0) writev(r0, &(0x7f0000000800), 0x0) 10.668395766s ago: executing program 0 (id=131): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f0000000340)="c88ca41443def930559634317d074690ac7552ac3ef6aa3e0ca608c78fc27d83dadf568d5e8a00a001aacadeb12f9be18bc16ddf9cc48e8b387f85033dc25ff8e243", 0x42, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @cgroup_sysctl=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socket$kcm(0x28, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x0, 0xadf9, 0x7, 0x8000, 0x18806, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2, @void, @value=r2}, 0x50) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000070000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000cbfc"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "af9c1d95b59ceb13"}}, 0x48}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r7, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0x8, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) 7.454708364s ago: executing program 0 (id=134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.372385671s ago: executing program 1 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) accept(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x1a6, &(0x7f0000000600)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x170, 0x11, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, {[@srh={0x5e, 0x4, 0x4, 0x2, 0x8, 0x0, 0x3, [@mcast1, @mcast2]}, @dstopts={0x5e, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x200}, @generic={0x4, 0x85, "fc6645bab44b8cfd95ff84093e77cf7941996f895fe6573fd9c21980b47fdd79fef114e52190dd8005b96f0146b4da6813322398ca61c44248486c74b17168735fbd0696fab68482408e2a43ed0f783c35e2557e0d33a385879ec1a5f614dc40a81a8d21fe5123ef70b96aa657fcd980789419f76e118e003853f104f97d2f347e6e7b249c"}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @pad1]}, @fragment={0x6, 0x0, 0x5, 0x0, 0x0, 0x3, 0x66}, @routing={0x6c, 0x8, 0x1, 0x2, 0x0, [@private1, @empty, @empty, @local]}, @hopopts={0x3b, 0x7, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x81, [0x10, 0x9, 0x5, 0x6f98]}}, @generic, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8000}]}], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}}}}}}}}, 0x0) setrlimit(0x9, &(0x7f00000005c0)={0x4, 0x9f40}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 7.286513849s ago: executing program 2 (id=137): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x4, 0x2}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9b443000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) 7.05079651s ago: executing program 1 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x43, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) 5.113472453s ago: executing program 3 (id=141): r0 = inotify_init() read$FUSE(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') preadv(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)=""/250, 0xfa}], 0x2, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/236, &(0x7f0000000480)=""/97, &(0x7f0000000300)=""/79}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 4.859354406s ago: executing program 1 (id=142): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0xfdef) 4.618486047s ago: executing program 0 (id=144): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f0000000340)="c88ca41443def930559634317d074690ac7552ac3ef6aa3e0ca608c78fc27d83dadf568d5e8a00a001aacadeb12f9be18bc16ddf9cc48e8b387f85033dc25ff8e243", 0x42, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @cgroup_sysctl=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socket$kcm(0x28, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x0, 0xadf9, 0x7, 0x8000, 0x18806, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2, @void, @value=r2}, 0x50) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000070000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000cbfc"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "af9c1d95b59ceb13"}}, 0x48}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r7, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0x8, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) 3.565268622s ago: executing program 3 (id=146): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 3.560751722s ago: executing program 4 (id=147): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r0, &(0x7f0000000040), 0x10000000000000bb, 0x7, 0x1) 3.331580072s ago: executing program 0 (id=148): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, r2, 0x1, 0x1000, 0x800, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}}, 0x0) 3.225394532s ago: executing program 4 (id=149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.871164064s ago: executing program 0 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) accept(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x1a6, &(0x7f0000000600)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x170, 0x11, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, {[@srh={0x5e, 0x4, 0x4, 0x2, 0x8, 0x0, 0x3, [@mcast1, @mcast2]}, @dstopts={0x5e, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x200}, @generic={0x4, 0x85, "fc6645bab44b8cfd95ff84093e77cf7941996f895fe6573fd9c21980b47fdd79fef114e52190dd8005b96f0146b4da6813322398ca61c44248486c74b17168735fbd0696fab68482408e2a43ed0f783c35e2557e0d33a385879ec1a5f614dc40a81a8d21fe5123ef70b96aa657fcd980789419f76e118e003853f104f97d2f347e6e7b249c"}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @pad1]}, @fragment={0x6, 0x0, 0x5, 0x0, 0x0, 0x3, 0x66}, @routing={0x6c, 0x8, 0x1, 0x2, 0x0, [@private1, @empty, @empty, @local]}, @hopopts={0x3b, 0x7, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x81, [0x10, 0x9, 0x5, 0x6f98]}}, @generic, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8000}]}], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}}}}}}}}, 0x0) setrlimit(0x9, &(0x7f00000005c0)={0x4, 0x9f40}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2.541385213s ago: executing program 1 (id=151): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) 2.402190726s ago: executing program 3 (id=152): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [], {}, [], {0x10, 0x6}}, 0x24, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r6 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$nfc_llcp(r6, 0x6a, 0x0, 0x0, 0x20000071) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x20, r7, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x0) 2.254636539s ago: executing program 4 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x43, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) 2.250687399s ago: executing program 0 (id=154): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001940)={0x84, &(0x7f0000001500)={0x0, 0xc, 0x5, "692d2d2118"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.191126374s ago: executing program 3 (id=155): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x101101, 0x0) 1.517516595s ago: executing program 3 (id=156): r0 = inotify_init() read$FUSE(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') preadv(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)=""/250, 0xfa}], 0x2, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/236, &(0x7f0000000480)=""/97, &(0x7f0000000300)=""/79}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1.322762652s ago: executing program 4 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 1.269652197s ago: executing program 1 (id=158): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f0000000340)="c88ca41443def930559634317d074690ac7552ac3ef6aa3e0ca608c78fc27d83dadf568d5e8a00a001aacadeb12f9be18bc16ddf9cc48e8b387f85033dc25ff8e243", 0x42, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @cgroup_sysctl=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socket$kcm(0x28, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x0, 0xadf9, 0x7, 0x8000, 0x18806, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2, @void, @value=r2}, 0x50) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000070000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000cbfc"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "af9c1d95b59ceb13"}}, 0x48}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r7, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0x8, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) 1.173105625s ago: executing program 4 (id=159): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='ro\x00Mz\x94\xb7%H\x01\xec\xd7\x9a\xb47\xe5\xbc\xcd\xca\xed\xb3@\xa8\xd5*\xb8yH\xb6b\x04\x93n*\xb5%WB\xfcyB1\xd6[\x98.j\xe5U\xb7h\x88+\xd3\x95\xeb96\x1f\xc2\xe8\ru\x17h\xc1\xa0\x102\x06\xc7\x86\b]\x8c\xf1C\xd0\x05\x10ts\xae\x87\xd2\xc0\x9b\x8e\xe0\xdb\xcb\xf0\xb1wE\xd4@\xdbeS\x00E\x8d\x00\x00\x00\x00\x00\x00N\x00\x00\x00\x00\x00\x00\xcd\x00\x00\x92\xb9\x87\x98\x8c\f\x89\x91\x1c\x13\xe9\x90\x16\xfc0\x80\xd8\xd1\xe1S\x98\xf7\xa3\xa9\x8b\xe4\x03M;\x04\x18\xfe\xcf\x7f\xaeJ\x85:F4\xfe;\x8b\xe8\xc6\xceYfGD\xf6o\xe6\x0f]\xfc\xcf7)|\x8dc<\xed\xf9sN\xb8\xbf9#\xc38L\xd9\xb7\xe02\xc2\xa4Tx\xa8\xaf\xd7\xcbq\a^\xe8X\xa5\x14G\xf1T\x0e\x93\xd5 \xe3F\xa3\xc1\xf3\x9d\x86\xcc\x14+\"\xae\\\x84\xfb\x84\xa3;\xfa\xff\xde`m0\"C\xdd\r\xf9W\x00\xc8~\xc5\'\xbcL\b\xfc:\bw6i\xc6\xc7\xf5\x9eb\xa5\x1d\t\x99\xc4\x1a\x8a0\a>\x04\x17\xf4L\x1f\xc5\xba\xa9\xccPAh\xcb\xc8\xc2\x95i\x167\xa5\xd2F\x1f\x9f\xe1\xfe\xc5\xd2MJ\xeax\xb2\xcf\x01\xdf\xafV\xf1/\f/\xca2\x97\xb6Bf\x1d\xa5,L\x17\x8c\xb5\xa1\f\xf0\xdc\xde\x91\xf5\xbcj\xd5\x99\xa3\xa5h\x8ciC\xd3\x16\xd3j\x97`\xfe$\xa9\x91\rS@\x86D\xc1\xef\x9f!H.\xad\x9b\x9a\x92\x17W\x8f\xc7\xc4sZE\x12\xd2X\x12\x04\xeb\n\xdd\x04\xf40\x97\x1b\xe19\x15\x82\xe6\xf0\f\xf1QQZ\xa9T\xfa\xc0Y\xdc\xd8\xc9\xdf\x19\xe1\x18\xd8 \xfb', &(0x7f0000000100)='\x19\x00\x00\xe1\xf7.\x81\x00\x03\x00\xc2\xbd', 0x0) 1.12557939s ago: executing program 4 (id=160): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000100)={0x40, 0x17, 0x4, "b59db4ec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.669088ms ago: executing program 3 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. syzkaller login: [ 53.835458][ T4155] cgroup: Unknown subsys name 'net' [ 53.951476][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.388604][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.093618][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 57.212567][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 57.250886][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 57.318453][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.325672][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.333891][ T4166] device bridge_slave_0 entered promiscuous mode [ 57.347109][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 57.370191][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.377360][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.388036][ T4166] device bridge_slave_1 entered promiscuous mode [ 57.475411][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.482532][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.490675][ T4167] device bridge_slave_0 entered promiscuous mode [ 57.499259][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.506425][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.514521][ T4167] device bridge_slave_1 entered promiscuous mode [ 57.523887][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.536324][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.543397][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.551411][ T4170] device bridge_slave_0 entered promiscuous mode [ 57.572740][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.582100][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 57.591389][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.598581][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.606757][ T4170] device bridge_slave_1 entered promiscuous mode [ 57.652023][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.692731][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.713550][ T4166] team0: Port device team_slave_0 added [ 57.730363][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.742721][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.752441][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.759730][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.767915][ T4168] device bridge_slave_0 entered promiscuous mode [ 57.784219][ T4166] team0: Port device team_slave_1 added [ 57.800584][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.808075][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.816293][ T4168] device bridge_slave_1 entered promiscuous mode [ 57.827072][ T4167] team0: Port device team_slave_0 added [ 57.859367][ T4167] team0: Port device team_slave_1 added [ 57.879314][ T4170] team0: Port device team_slave_0 added [ 57.901388][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.908609][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.934900][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.955477][ T4170] team0: Port device team_slave_1 added [ 57.972369][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.989411][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.996520][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.022788][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.042747][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.049938][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.058696][ T4169] device bridge_slave_0 entered promiscuous mode [ 58.068014][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.077676][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.084627][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.110820][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.124488][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.131607][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.157854][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.181417][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.188718][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.196984][ T4169] device bridge_slave_1 entered promiscuous mode [ 58.229905][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.237010][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.263163][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.278197][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.285659][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.311774][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.342153][ T4168] team0: Port device team_slave_0 added [ 58.379740][ T4168] team0: Port device team_slave_1 added [ 58.390486][ T4166] device hsr_slave_0 entered promiscuous mode [ 58.398383][ T4166] device hsr_slave_1 entered promiscuous mode [ 58.422668][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.456801][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.476380][ T4167] device hsr_slave_0 entered promiscuous mode [ 58.483285][ T4167] device hsr_slave_1 entered promiscuous mode [ 58.490065][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.498621][ T4167] Cannot create hsr debugfs directory [ 58.545521][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.552480][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.578862][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.600577][ T4169] team0: Port device team_slave_0 added [ 58.618486][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.625556][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.652037][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.667182][ T4170] device hsr_slave_0 entered promiscuous mode [ 58.673983][ T4170] device hsr_slave_1 entered promiscuous mode [ 58.680653][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.688278][ T4170] Cannot create hsr debugfs directory [ 58.696011][ T4169] team0: Port device team_slave_1 added [ 58.773536][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.780579][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.806110][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 58.806659][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 58.818665][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.829741][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 58.832328][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.843061][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 58.849105][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.875557][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.901048][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 58.961802][ T4168] device hsr_slave_0 entered promiscuous mode [ 58.969788][ T4168] device hsr_slave_1 entered promiscuous mode [ 58.977047][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.984624][ T4168] Cannot create hsr debugfs directory [ 58.997233][ T4169] device hsr_slave_0 entered promiscuous mode [ 59.003999][ T4169] device hsr_slave_1 entered promiscuous mode [ 59.012869][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.020757][ T4169] Cannot create hsr debugfs directory [ 59.215341][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.226201][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.245520][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.262676][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.340628][ T4167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.354187][ T4167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.372653][ T4167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.389883][ T4167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.434721][ T4170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.451129][ T4170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.460790][ T4170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.472681][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.492058][ T4170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.533787][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.557938][ T4168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.567916][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.577799][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.590126][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.599240][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.610261][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.617602][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.633598][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.650391][ T4168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.670248][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.681420][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.691174][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.698325][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.707361][ T4168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.719200][ T4168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.730183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.774045][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.786602][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.796763][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.816943][ T4166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.827422][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.842581][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.851515][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.861055][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.870131][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.879659][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.888932][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.899078][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.908115][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.938236][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.971312][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.992080][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.010201][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.022857][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.031918][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.048287][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.056618][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.067866][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.077867][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.087432][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.094499][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.107917][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.118679][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.133371][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.143370][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.152513][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.159617][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.168476][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.192918][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.205367][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.218732][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.254203][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.278752][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.289174][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.299025][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.309211][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.318987][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.327698][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.335665][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.344023][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.373748][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.383204][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.392794][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.402779][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.412147][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.419259][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.429033][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.437946][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.447034][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.454124][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.462165][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.472309][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.493166][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.502593][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.511829][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.520612][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.530020][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.539051][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.549164][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.557989][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.577158][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.597833][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.611039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.621841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.630996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.639939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.663056][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.682284][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.698754][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.718677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.728658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.737413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.746043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.789261][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.809812][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.820025][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.827165][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.841567][ T4166] device veth0_vlan entered promiscuous mode [ 60.864099][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.872989][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.884005][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.895002][ T4173] Bluetooth: hci3: command 0x041b tx timeout [ 60.895369][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 60.911337][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.914166][ T4213] Bluetooth: hci2: command 0x041b tx timeout [ 60.922102][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.932211][ T4213] Bluetooth: hci0: command 0x041b tx timeout [ 60.935635][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.946983][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.955669][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.964409][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.975247][ T4173] Bluetooth: hci1: command 0x041b tx timeout [ 60.975426][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.989511][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.018064][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.036380][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.046264][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.059609][ T4166] device veth1_vlan entered promiscuous mode [ 61.073492][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.087828][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.097196][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.105421][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.113200][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.126033][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.133532][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.141440][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.150484][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.172857][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.182972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.196883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.211481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.221346][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.228492][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.237610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.246717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.256218][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.263302][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.271444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.296641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.307799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.316376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.326784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.352777][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.361350][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.369869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.383824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.395510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.410143][ T4166] device veth0_macvtap entered promiscuous mode [ 61.427450][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.445856][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.454676][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.477517][ T4166] device veth1_macvtap entered promiscuous mode [ 61.515809][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.526075][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.540163][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.549623][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.580165][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.590196][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.600562][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.633125][ T4170] device veth0_vlan entered promiscuous mode [ 61.647191][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.663991][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.673383][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.682683][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.692200][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.700995][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.710297][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.718460][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.731460][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.743189][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.761655][ T4170] device veth1_vlan entered promiscuous mode [ 61.779569][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.795730][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.803937][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.812781][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.822028][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.831144][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.840361][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.850204][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.882386][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.898832][ T4167] device veth0_vlan entered promiscuous mode [ 61.917697][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.926476][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.938013][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.947725][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.956633][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.969670][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.978740][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.988179][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.997182][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.014405][ T4167] device veth1_vlan entered promiscuous mode [ 62.036366][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.043489][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.052448][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.060503][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.068791][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.077644][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.099123][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.108133][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.137832][ T4170] device veth0_macvtap entered promiscuous mode [ 62.152956][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.161982][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.172916][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.180619][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.203847][ T4170] device veth1_macvtap entered promiscuous mode [ 62.213618][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.230790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.242696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.252822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.263831][ T4167] device veth0_macvtap entered promiscuous mode [ 62.300349][ T4167] device veth1_macvtap entered promiscuous mode [ 62.349341][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.361228][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.373494][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.381924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.390649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.399212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.409229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.418614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.427934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.437355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.446851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.474347][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.486199][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.496167][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.506626][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.518317][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.537628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.546724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.569692][ T4169] device veth0_vlan entered promiscuous mode [ 62.570520][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.585843][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.593901][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.599306][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.615799][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.623435][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.634511][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.647880][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.658666][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.670808][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.679947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.689555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.698370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.707469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.717185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.726160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.734892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.743619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.752762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.761836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.769956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.778500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.786483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.797159][ T4168] device veth0_vlan entered promiscuous mode [ 62.812224][ T4167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.821789][ T4167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.830696][ T4167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.839637][ T4167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.852500][ T4170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.863005][ T4170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.873141][ T4170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.882205][ T4170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.919934][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.930847][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.938147][ T4169] device veth1_vlan entered promiscuous mode [ 62.949756][ T4168] device veth1_vlan entered promiscuous mode [ 62.965551][ T4211] Bluetooth: hci0: command 0x040f tx timeout [ 62.975770][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 62.976537][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.981948][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 62.991652][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.007954][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.013385][ T4215] Bluetooth: hci3: command 0x040f tx timeout [ 63.017010][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.048632][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 63.096672][ T4169] device veth0_macvtap entered promiscuous mode [ 63.122250][ T4168] device veth0_macvtap entered promiscuous mode [ 63.132578][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.147702][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.156936][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.166045][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.174622][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.183773][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.192328][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.211529][ T4169] device veth1_macvtap entered promiscuous mode [ 63.231062][ T4168] device veth1_macvtap entered promiscuous mode [ 63.247667][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.267847][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.303008][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.326865][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.342230][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.359923][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.371976][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.401491][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.413571][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.581995][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.590804][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.599414][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.614430][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.625126][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.738730][ T4249] loop1: detected capacity change from 0 to 512 [ 63.851096][ T4249] ======================================================= [ 63.851096][ T4249] WARNING: The mand mount option has been deprecated and [ 63.851096][ T4249] and is ignored by this kernel. Remove the mand [ 63.851096][ T4249] option from the mount to silence this warning. [ 63.851096][ T4249] ======================================================= [ 64.020425][ T4249] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.6: iget: bad extended attribute block 1 [ 64.041006][ T4249] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.6: couldn't read orphan inode 15 (err -117) [ 64.057708][ T4249] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,data_err=ignore,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 64.226761][ T4249] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 13: comm syz.1.6: lblock 0 mapped to illegal pblock 13 (length 1) [ 65.374814][ C0] sched: RT throttling activated [ 65.377002][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 65.378021][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.394870][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 65.404740][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 65.406537][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.427727][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.442337][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.456930][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.472009][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.484906][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.501714][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.513793][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.515266][ T1110] Bluetooth: hci0: command 0x0419 tx timeout [ 65.527653][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 65.542987][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.554369][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.564973][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.575693][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.585858][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.596649][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.609449][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.627005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.636413][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.675222][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.712670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.738822][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.745534][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.748651][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.785221][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.793989][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.829938][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.890839][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.932968][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.944354][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.954366][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.965069][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.978220][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.990184][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.000569][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.013219][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.031455][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.083186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.101716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.117105][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.126610][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.136757][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.145743][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.166170][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.174912][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.208578][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.217394][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.225677][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.238248][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.586961][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.617695][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.644195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.725589][ T4265] loop4: detected capacity change from 0 to 16 [ 66.726153][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.747193][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.774933][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.785443][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.804369][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.831598][ T4265] erofs: (device loop4): mounted with root inode @ nid 36. [ 66.848916][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.873087][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.899631][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.938679][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.188794][ T4271] loop3: detected capacity change from 0 to 512 [ 67.336973][ T4272] attempt to access beyond end of device [ 67.336973][ T4272] loop4: rw=0, want=24, limit=16 [ 68.073947][ T4271] EXT4-fs (loop3): Test dummy encryption mode enabled [ 68.096244][ T4271] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 1: comm syz.3.4: invalid block [ 68.109754][ T4271] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.4: couldn't read orphan inode 11 (err -117) [ 68.122207][ T4271] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 68.126448][ T4279] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.244438][ T4285] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 69.257572][ T4285] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.4: Directory hole found for htree leaf block 0 [ 69.342543][ T4263] loop2: detected capacity change from 0 to 40427 [ 69.461068][ T4263] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 69.480531][ T4263] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 69.508674][ T4263] F2FS-fs (loop2): invalid crc value [ 69.593968][ T4263] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 69.690879][ T4283] loop4: detected capacity change from 0 to 512 [ 70.124415][ T4299] loop1: detected capacity change from 0 to 512 [ 70.311330][ T4299] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.325286][ T4299] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.190484][ T4307] hub 6-0:1.0: USB hub found [ 71.196355][ T4307] hub 6-0:1.0: 1 port detected [ 71.218650][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.226625][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.090921][ T4315] loop2: detected capacity change from 0 to 512 [ 73.268143][ T4315] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.341895][ T4315] EXT4-fs (loop2): 1 orphan inode deleted [ 73.373401][ T4315] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.319072][ T4326] loop0: detected capacity change from 0 to 256 [ 74.491835][ T4327] binder: 4320:4327 ioctl c018620c 20000000 returned -1 [ 75.099154][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.133221][ T4326] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.158495][ T4326] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.287564][ T26] audit: type=1800 audit(1731072052.617:2): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="bus" dev="loop0" ino=1048590 res=0 errno=0 [ 75.299461][ T4332] loop3: detected capacity change from 0 to 128 [ 76.023031][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 76.053103][ T4332] EXT4-fs (loop3): Test dummy encryption mode enabled [ 76.117353][ T4332] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 76.163282][ T4335] loop1: detected capacity change from 0 to 16 [ 76.163496][ T4332] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.175119][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.198912][ T4339] loop4: detected capacity change from 0 to 512 [ 76.200322][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.216870][ T1110] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 76.236129][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.251074][ T4335] erofs: (device loop1): mounted with root inode @ nid 36. [ 76.258196][ T1110] usb 3-1: config 0 descriptor?? [ 76.287723][ T4339] EXT4-fs (loop4): Ignoring removed nobh option [ 76.294072][ T4339] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.339165][ T4339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.369374][ T4339] EXT4-fs (loop4): 1 truncate cleaned up [ 76.379076][ T4339] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 77.601188][ T1110] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 77.621525][ T1110] usb 3-1: USB disconnect, device number 2 [ 79.027414][ T4364] loop0: detected capacity change from 0 to 512 [ 79.185678][ T4364] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.28: corrupted inode contents [ 79.288028][ T4364] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.28: mark_inode_dirty error [ 79.308513][ T4364] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.28: corrupted inode contents [ 79.348382][ T4364] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.28: mark_inode_dirty error [ 79.400188][ T4371] binder: 4353:4371 ioctl c018620c 20000000 returned -1 [ 79.416796][ T4364] Quota error (device loop0): write_blk: dquota write failed [ 79.445954][ T4364] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 79.492156][ T4364] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.28: Failed to acquire dquot type 0 [ 79.560165][ T4364] EXT4-fs (loop0): 1 orphan inode deleted [ 79.570369][ T4364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.606040][ T4364] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.802000][ T4380] loop1: detected capacity change from 0 to 128 [ 80.831279][ T4379] loop3: detected capacity change from 0 to 512 [ 80.899297][ T4380] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.907962][ T4379] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.940455][ T4380] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 80.969880][ T4379] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 1: comm syz.3.31: invalid block [ 80.979718][ T4380] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.013984][ T4379] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.31: couldn't read orphan inode 11 (err -117) [ 81.026525][ T4379] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 81.124942][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.080581][ T4387] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 82.429277][ T7] cfg80211: failed to load regulatory.db [ 82.435178][ T4364] syz.0.28 (4364) used greatest stack depth: 19264 bytes left [ 82.465350][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 82.586586][ T4389] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.31: Directory hole found for htree leaf block 0 [ 83.335090][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.346853][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.505264][ T13] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 83.529999][ T13] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 83.555062][ T13] usb 3-1: Product: syz [ 83.559267][ T13] usb 3-1: Manufacturer: syz [ 83.615785][ T13] usb 3-1: config 0 descriptor?? [ 83.737251][ T4395] loop1: detected capacity change from 0 to 512 [ 83.934997][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 83.941637][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 84.002508][ T13] usb 3-1: USB disconnect, device number 3 [ 84.011410][ T4395] EXT4-fs (loop1): Ignoring removed nobh option [ 84.035064][ T4395] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.191351][ T4395] EXT4-fs (loop1): 1 truncate cleaned up [ 84.209154][ T4395] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 84.763731][ T4415] device pim6reg1 entered promiscuous mode [ 85.395950][ T4425] loop0: detected capacity change from 0 to 512 [ 85.420263][ T4423] kvm: emulating exchange as write [ 85.520767][ T4425] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.551502][ T4425] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.677695][ T4259] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.954857][ T4259] usb 3-1: Using ep0 maxpacket: 32 [ 88.295170][ T4259] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 88.327312][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.361465][ T4259] usb 3-1: Product: syz [ 88.390752][ T4259] usb 3-1: Manufacturer: syz [ 88.400947][ T4259] usb 3-1: SerialNumber: syz [ 88.450994][ T4259] usb 3-1: config 0 descriptor?? [ 88.664924][ T4215] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.737210][ T4435] loop2: detected capacity change from 0 to 256 [ 88.795505][ T4435] exfat: Deprecated parameter 'utf8' [ 88.800880][ T4435] exfat: Deprecated parameter 'namecase' [ 88.836842][ T4435] exfat: Deprecated parameter 'utf8' [ 88.894711][ T4435] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x791ffbba, utbl_chksum : 0xe619d30d) [ 88.920298][ T4442] loop4: detected capacity change from 0 to 40427 [ 88.920310][ T4445] loop3: detected capacity change from 0 to 40427 [ 88.950906][ T4445] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 88.965420][ T4215] usb 1-1: Using ep0 maxpacket: 32 [ 88.985876][ T4445] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 88.996827][ T4442] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 89.015333][ T4442] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 89.028809][ T4445] F2FS-fs (loop3): invalid crc value [ 89.039796][ T4442] F2FS-fs (loop4): invalid crc value [ 89.079451][ T4442] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.079635][ T4445] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 89.105232][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.147844][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.185010][ T4215] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.214688][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.250607][ T4215] usb 1-1: config 0 descriptor?? [ 89.273140][ T4445] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.281278][ T4442] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 89.285560][ T4445] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.289160][ T4442] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.306805][ T4215] hub 1-1:0.0: USB hub found [ 89.868734][ T4215] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 90.175287][ T4215] usbhid 1-1:0.0: can't add hid device: -71 [ 90.185204][ T4215] usbhid: probe of 1-1:0.0 failed with error -71 [ 90.204975][ T4450] loop1: detected capacity change from 0 to 40427 [ 90.276146][ T4215] usb 1-1: USB disconnect, device number 2 [ 90.361064][ T4450] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.525888][ T4450] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.646926][ T4166] attempt to access beyond end of device [ 90.646926][ T4166] loop1: rw=2049, want=45104, limit=40427 [ 91.596638][ T4485] process 'syz.0.61' launched './file1' with NULL argv: empty string added [ 92.221467][ T4497] Zero length message leads to an empty skb [ 92.325648][ T4259] rtl8150 3-1:0.0: couldn't reset the device [ 92.384328][ T4259] rtl8150: probe of 3-1:0.0 failed with error -5 [ 93.048611][ T13] usb 3-1: USB disconnect, device number 4 [ 93.392248][ T4478] loop3: detected capacity change from 0 to 40427 [ 93.512933][ T4478] F2FS-fs (loop3): invalid crc value [ 93.597165][ T4478] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.732461][ T4478] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 93.771900][ T4478] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.850220][ T4507] attempt to access beyond end of device [ 93.850220][ T4507] loop3: rw=2049, want=45104, limit=40427 [ 94.623078][ T4504] loop4: detected capacity change from 0 to 40427 [ 95.031131][ T4504] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 95.168232][ T4504] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 96.056875][ T4504] F2FS-fs (loop4): invalid crc value [ 96.168347][ T4504] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.864324][ T4541] loop2: detected capacity change from 0 to 40427 [ 98.962965][ T4541] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 98.994071][ T4541] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 99.053940][ T4541] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 100.882448][ T4602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.88'. [ 101.298154][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.508821][ T4620] loop4: detected capacity change from 0 to 512 [ 101.598310][ T4253] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.935052][ T4253] usb 4-1: Using ep0 maxpacket: 16 [ 102.085886][ T4253] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.180271][ T4253] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.334822][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 102.381756][ T4620] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.95: corrupted inode contents [ 102.400959][ T4620] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #3: comm syz.4.95: mark_inode_dirty error [ 102.413066][ T4253] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 102.430301][ T4253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.442069][ T4620] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.95: corrupted inode contents [ 102.455064][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.460642][ T4253] usb 4-1: Product: syz [ 102.472383][ T4620] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.95: mark_inode_dirty error [ 102.472410][ T4253] usb 4-1: Manufacturer: syz [ 102.472430][ T4253] usb 4-1: SerialNumber: syz [ 102.495760][ T4253] usb 4-1: config 0 descriptor?? [ 102.511926][ T4620] Quota error (device loop4): write_blk: dquota write failed [ 102.520681][ T4620] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 102.521706][ T7] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 102.531924][ T4620] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.95: Failed to acquire dquot type 0 [ 102.555889][ T4253] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 102.568645][ T4253] gspca_stv06xx: st6422 sensor detected [ 102.579209][ T4620] EXT4-fs (loop4): 1 orphan inode deleted [ 102.585721][ T4620] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.598781][ T4620] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.610570][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.805133][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 102.825428][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.843802][ T7] usb 1-1: Product: syz [ 102.882895][ T7] usb 1-1: Manufacturer: syz [ 102.899647][ T7] usb 1-1: SerialNumber: syz [ 102.919573][ T7] usb 1-1: config 0 descriptor?? [ 103.848255][ T7] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 103.854504][ T7] gspca_stv06xx: st6422 sensor detected [ 105.125345][ T7] STV06xx: probe of 1-1:0.0 failed with error -71 [ 105.140455][ T7] usb 1-1: USB disconnect, device number 3 [ 105.416103][ T4253] STV06xx: probe of 4-1:0.0 failed with error -71 [ 105.425490][ T4253] usb 4-1: USB disconnect, device number 2 [ 105.568356][ T4652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.103'. [ 105.890599][ T4665] loop0: detected capacity change from 0 to 256 [ 106.152681][ T4665] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 106.721422][ T4670] loop2: detected capacity change from 0 to 512 [ 106.889185][ T4670] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 108.162968][ T4670] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.546383][ T4686] loop3: detected capacity change from 0 to 16 [ 108.632106][ T4688] loop1: detected capacity change from 0 to 512 [ 108.669587][ T4686] erofs: (device loop3): mounted with root inode @ nid 36. [ 108.790809][ T4688] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.828271][ T4688] EXT4-fs error (device loop1): ext4_fill_super:4841: inode #2: comm syz.1.114: casefold flag without casefold feature [ 108.847512][ T4688] EXT4-fs (loop1): get root inode failed [ 108.853198][ T4688] EXT4-fs (loop1): mount failed [ 109.062401][ T4693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 109.465464][ T4700] attempt to access beyond end of device [ 109.465464][ T4700] loop3: rw=0, want=24, limit=16 [ 110.240168][ T4688] loop1: detected capacity change from 0 to 40427 [ 110.720099][ T4688] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.344619][ T4737] netlink: 32 bytes leftover after parsing attributes in process `syz.3.127'. [ 113.376348][ T4735] loop4: detected capacity change from 0 to 2048 [ 113.464979][ T4216] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.847100][ T4735] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.385080][ T4744] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 32: padding at end of block bitmap is not set [ 114.516822][ T4216] usb 2-1: Using ep0 maxpacket: 16 [ 114.522821][ T4727] loop2: detected capacity change from 0 to 40427 [ 115.831767][ T4727] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 115.845707][ T4727] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 117.353343][ T4727] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 117.368759][ T4216] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 117.399187][ T4216] usb 2-1: can't read configurations, error -71 [ 119.816085][ T4771] netlink: 32 bytes leftover after parsing attributes in process `syz.3.139'. [ 120.193593][ T4787] loop2: detected capacity change from 0 to 16 [ 120.333419][ T4787] erofs: (device loop2): mounted with root inode @ nid 36. [ 122.744378][ T4820] loop1: detected capacity change from 0 to 512 [ 122.784581][ T4818] netlink: 32 bytes leftover after parsing attributes in process `syz.3.152'. [ 122.824656][ T4820] EXT4-fs (loop1): Ignoring removed nobh option [ 122.901345][ T4820] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.215697][ T4820] EXT4-fs (loop1): 1 truncate cleaned up [ 123.289401][ T4820] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 123.825021][ T4212] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.202226][ T4212] usb 1-1: Using ep0 maxpacket: 8 [ 124.486330][ T4212] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 124.525623][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.612176][ T4212] usb 1-1: Product: syz [ 124.658438][ T4212] usb 1-1: Manufacturer: syz [ 124.751653][ T4212] usb 1-1: SerialNumber: syz [ 124.840814][ T4212] usb 1-1: config 0 descriptor?? [ 124.937279][ T4212] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 125.054131][ T4849] [ 125.056495][ T4849] ====================================================== [ 125.063503][ T4849] WARNING: possible circular locking dependency detected [ 125.070499][ T4849] 5.15.170-syzkaller #0 Not tainted [ 125.075682][ T4849] ------------------------------------------------------ [ 125.082678][ T4849] syz.1.162/4849 is trying to acquire lock: [ 125.088548][ T4849] ffff8880b9127e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x1b5/0x8a0 [ 125.097162][ T4849] [ 125.097162][ T4849] but task is already holding lock: [ 125.104505][ T4849] ffff88802ad281b8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 125.113362][ T4849] [ 125.113362][ T4849] which lock already depends on the new lock. [ 125.113362][ T4849] [ 125.123743][ T4849] [ 125.123743][ T4849] the existing dependency chain (in reverse order) is: [ 125.132734][ T4849] [ 125.132734][ T4849] -> #2 (&trie->lock){....}-{2:2}: [ 125.140011][ T4849] lock_acquire+0x1db/0x4f0 [ 125.145020][ T4849] _raw_spin_lock_irqsave+0xd1/0x120 [ 125.150812][ T4849] trie_delete_elem+0x90/0x690 [ 125.156084][ T4849] bpf_dispatcher_xdp+0x195/0x1000 [ 125.161699][ T4849] bpf_trace_run3+0x1d1/0x380 [ 125.166882][ T4849] enqueue_timer+0x3ae/0x540 [ 125.171991][ T4849] __mod_timer+0xa60/0xeb0 [ 125.176916][ T4849] schedule_timeout+0x1b4/0x300 [ 125.182273][ T4849] rcu_gp_fqs_loop+0x2bf/0x1080 [ 125.187647][ T4849] rcu_gp_kthread+0xa4/0x360 [ 125.192744][ T4849] kthread+0x3f6/0x4f0 [ 125.197321][ T4849] ret_from_fork+0x1f/0x30 [ 125.202261][ T4849] [ 125.202261][ T4849] -> #1 (&base->lock){-.-.}-{2:2}: [ 125.209545][ T4849] lock_acquire+0x1db/0x4f0 [ 125.214557][ T4849] _raw_spin_lock_irqsave+0xd1/0x120 [ 125.220350][ T4849] lock_timer_base+0x120/0x260 [ 125.225620][ T4849] __mod_timer+0x1d6/0xeb0 [ 125.230557][ T4849] queue_delayed_work_on+0x156/0x250 [ 125.236363][ T4849] kvfree_call_rcu+0x50e/0x8a0 [ 125.241635][ T4849] rtnl_register_internal+0x443/0x530 [ 125.247613][ T4849] rtnl_register+0x32/0x70 [ 125.252538][ T4849] ip_rt_init+0x2e6/0x390 [ 125.257383][ T4849] ip_init+0xa/0x20 [ 125.261695][ T4849] inet_init+0x27c/0x390 [ 125.266441][ T4849] do_one_initcall+0x22b/0x7a0 [ 125.271712][ T4849] do_initcall_level+0x157/0x210 [ 125.277156][ T4849] do_initcalls+0x49/0x90 [ 125.281996][ T4849] kernel_init_freeable+0x425/0x5c0 [ 125.287704][ T4849] kernel_init+0x19/0x290 [ 125.292547][ T4849] ret_from_fork+0x1f/0x30 [ 125.297562][ T4849] [ 125.297562][ T4849] -> #0 (krc.lock){..-.}-{2:2}: [ 125.304598][ T4849] validate_chain+0x1649/0x5930 [ 125.309972][ T4849] __lock_acquire+0x1295/0x1ff0 [ 125.315331][ T4849] lock_acquire+0x1db/0x4f0 [ 125.320360][ T4849] _raw_spin_lock+0x2a/0x40 [ 125.325372][ T4849] kvfree_call_rcu+0x1b5/0x8a0 [ 125.330647][ T4849] trie_delete_elem+0x520/0x690 [ 125.336009][ T4849] bpf_prog_8c8ab8634bca3061+0x3a/0x658 [ 125.342066][ T4849] bpf_trace_run3+0x1d1/0x380 [ 125.347270][ T4849] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 125.353430][ T4849] kmem_cache_free+0x1ce/0x1f0 [ 125.358719][ T4849] alloc_vmap_area+0x16ae/0x19a0 [ 125.364181][ T4849] __get_vm_area_node+0x16e/0x2f0 [ 125.369728][ T4849] __vmalloc_node_range+0xe3/0x8c0 [ 125.375360][ T4849] __vmalloc+0x75/0x80 [ 125.379940][ T4849] bpf_prog_alloc_no_stats+0x33/0x2f0 [ 125.385831][ T4849] bpf_prog_alloc+0x18/0x1d0 [ 125.390927][ T4849] bpf_prog_create_from_user+0xa0/0x3d0 [ 125.396995][ T4849] do_seccomp+0x8cf/0x1790 [ 125.401918][ T4849] __se_sys_prctl+0x919/0x2ab0 [ 125.407184][ T4849] do_syscall_64+0x3b/0xb0 [ 125.412134][ T4849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.418626][ T4849] [ 125.418626][ T4849] other info that might help us debug this: [ 125.418626][ T4849] [ 125.428845][ T4849] Chain exists of: [ 125.428845][ T4849] krc.lock --> &base->lock --> &trie->lock [ 125.428845][ T4849] [ 125.440558][ T4849] Possible unsafe locking scenario: [ 125.440558][ T4849] [ 125.447996][ T4849] CPU0 CPU1 [ 125.453357][ T4849] ---- ---- [ 125.458742][ T4849] lock(&trie->lock); [ 125.462802][ T4849] lock(&base->lock); [ 125.469371][ T4849] lock(&trie->lock); [ 125.475950][ T4849] lock(krc.lock); [ 125.479743][ T4849] [ 125.479743][ T4849] *** DEADLOCK *** [ 125.479743][ T4849] [ 125.487868][ T4849] 3 locks held by syz.1.162/4849: [ 125.492874][ T4849] #0: ffffffff8c9dedf8 (free_vmap_area_lock){+.+.}-{2:2}, at: alloc_vmap_area+0x23c/0x19a0 [ 125.502956][ T4849] #1: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 125.512262][ T4849] #2: ffff88802ad281b8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 125.521576][ T4849] [ 125.521576][ T4849] stack backtrace: [ 125.527497][ T4849] CPU: 1 PID: 4849 Comm: syz.1.162 Not tainted 5.15.170-syzkaller #0 [ 125.535550][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.545596][ T4849] Call Trace: [ 125.548870][ T4849] [ 125.551796][ T4849] dump_stack_lvl+0x1e3/0x2d0 [ 125.556469][ T4849] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 125.562101][ T4849] ? print_circular_bug+0x12b/0x1a0 [ 125.567287][ T4849] check_noncircular+0x2f8/0x3b0 [ 125.572213][ T4849] ? add_chain_block+0x850/0x850 [ 125.577141][ T4849] ? lockdep_lock+0x11f/0x2a0 [ 125.581810][ T4849] validate_chain+0x1649/0x5930 [ 125.586787][ T4849] ? reacquire_held_locks+0x660/0x660 [ 125.592165][ T4849] ? mark_lock+0x98/0x340 [ 125.596509][ T4849] ? __lock_acquire+0x1295/0x1ff0 [ 125.601678][ T4849] ? mark_lock+0x98/0x340 [ 125.606002][ T4849] __lock_acquire+0x1295/0x1ff0 [ 125.610856][ T4849] lock_acquire+0x1db/0x4f0 [ 125.615360][ T4849] ? kvfree_call_rcu+0x1b5/0x8a0 [ 125.620316][ T4849] ? __lock_acquire+0x1ff0/0x1ff0 [ 125.625335][ T4849] ? read_lock_is_recursive+0x10/0x10 [ 125.630731][ T4849] ? do_raw_spin_unlock+0x137/0x8b0 [ 125.635929][ T4849] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 125.642095][ T4849] ? _raw_spin_unlock+0x40/0x40 [ 125.647206][ T4849] ? debug_object_active_state+0x6b/0x380 [ 125.652929][ T4849] _raw_spin_lock+0x2a/0x40 [ 125.657425][ T4849] ? kvfree_call_rcu+0x1b5/0x8a0 [ 125.662354][ T4849] kvfree_call_rcu+0x1b5/0x8a0 [ 125.667108][ T4849] ? _raw_spin_lock_irqsave+0xac/0x120 [ 125.672566][ T4849] ? call_rcu+0xa70/0xa70 [ 125.676898][ T4849] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 125.682509][ T4849] ? _raw_spin_lock+0x40/0x40 [ 125.687188][ T4849] ? read_lock_is_recursive+0x10/0x10 [ 125.692897][ T4849] ? longest_prefix_match+0x49b/0x640 [ 125.698293][ T4849] trie_delete_elem+0x520/0x690 [ 125.703151][ T4849] bpf_prog_8c8ab8634bca3061+0x3a/0x658 [ 125.708710][ T4849] bpf_trace_run3+0x1d1/0x380 [ 125.713481][ T4849] ? bpf_trace_run2+0x340/0x340 [ 125.718442][ T4849] ? alloc_vmap_area+0x16ae/0x19a0 [ 125.723655][ T4849] ? lockdep_hardirqs_on+0x94/0x130 [ 125.728979][ T4849] ? alloc_vmap_area+0x16ae/0x19a0 [ 125.734461][ T4849] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 125.740122][ T4849] ? alloc_vmap_area+0x16ae/0x19a0 [ 125.745228][ T4849] kmem_cache_free+0x1ce/0x1f0 [ 125.749999][ T4849] alloc_vmap_area+0x16ae/0x19a0 [ 125.754973][ T4849] ? vm_map_ram+0xb80/0xb80 [ 125.759465][ T4849] ? kmem_cache_alloc_node_trace+0x171/0x2e0 [ 125.765435][ T4849] ? __get_vm_area_node+0x11f/0x2f0 [ 125.770624][ T4849] __get_vm_area_node+0x16e/0x2f0 [ 125.775643][ T4849] __vmalloc_node_range+0xe3/0x8c0 [ 125.780741][ T4849] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 125.786292][ T4849] ? memset+0x1f/0x40 [ 125.790270][ T4849] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 125.795970][ T4849] __vmalloc+0x75/0x80 [ 125.800055][ T4849] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 125.805591][ T4849] bpf_prog_alloc_no_stats+0x33/0x2f0 [ 125.810974][ T4849] bpf_prog_alloc+0x18/0x1d0 [ 125.815552][ T4849] bpf_prog_create_from_user+0xa0/0x3d0 [ 125.821089][ T4849] ? seccomp_attach_filter+0xa40/0xa40 [ 125.826541][ T4849] do_seccomp+0x8cf/0x1790 [ 125.830959][ T4849] ? release_firmware_map_entry+0x190/0x190 [ 125.836842][ T4849] ? prctl_set_seccomp+0x60/0x60 [ 125.841771][ T4849] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 125.847757][ T4849] ? yama_task_prctl+0x63/0x440 [ 125.852601][ T4849] __se_sys_prctl+0x919/0x2ab0 [ 125.857363][ T4849] ? preempt_schedule_thunk+0x16/0x18 [ 125.862729][ T4849] ? trace_hardirqs_on+0x30/0x80 [ 125.867656][ T4849] ? try_to_wake_up+0x8a8/0x1300 [ 125.872588][ T4849] ? validate_chain+0x112/0x5930 [ 125.877556][ T4849] ? validate_chain+0x112/0x5930 [ 125.882483][ T4849] ? __lock_acquire+0x1ff0/0x1ff0 [ 125.887493][ T4849] ? plist_check_list+0x20d/0x220 [ 125.892587][ T4849] ? plist_del+0x3ed/0x410 [ 125.896996][ T4849] ? __x64_sys_prctl+0xc0/0xc0 [ 125.901923][ T4849] ? wake_up_q+0x9f/0xd0 [ 125.906308][ T4849] ? reacquire_held_locks+0x660/0x660 [ 125.911721][ T4849] ? futex_wake+0x607/0x750 [ 125.916235][ T4849] ? reacquire_held_locks+0x660/0x660 [ 125.921693][ T4849] ? futex_wait+0x740/0x740 [ 125.926192][ T4849] ? rcu_read_lock_sched_held+0x89/0x130 [ 125.931818][ T4849] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 125.937788][ T4849] ? bpf_link_settle+0x7d/0x140 [ 125.942636][ T4849] ? _local_bh_enable+0xa0/0xa0 [ 125.947642][ T4849] ? bpf_link_settle+0x7d/0x140 [ 125.952483][ T4849] ? mark_lock+0x98/0x340 [ 125.956797][ T4849] ? __lock_acquire+0x1295/0x1ff0 [ 125.961818][ T4849] ? read_lock_is_recursive+0x10/0x10 [ 125.967183][ T4849] ? __context_tracking_exit+0x4c/0x80 [ 125.972644][ T4849] ? __lock_acquire+0x1ff0/0x1ff0 [ 125.977655][ T4849] ? __sys_bpf+0x468/0x670 [ 125.982062][ T4849] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 125.988026][ T4849] ? print_irqtrace_events+0x210/0x210 [ 125.993484][ T4849] ? vtime_user_exit+0x2d1/0x400 [ 125.998412][ T4849] ? syscall_enter_from_user_mode+0x2e/0x240 [ 126.004390][ T4849] ? lockdep_hardirqs_on+0x94/0x130 [ 126.009596][ T4849] ? __x64_sys_prctl+0x1c/0xc0 [ 126.014454][ T4849] do_syscall_64+0x3b/0xb0 [ 126.019096][ T4849] ? clear_bhb_loop+0x15/0x70 [ 126.023774][ T4849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.029658][ T4849] RIP: 0033:0x7f9d21e11719 [ 126.034078][ T4849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.053674][ T4849] RSP: 002b:00007f9d20289038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 126.062076][ T4849] RAX: ffffffffffffffda RBX: 00007f9d21fc8f80 RCX: 00007f9d21e11719 [ 126.070046][ T4849] RDX: 0000000020000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 126.078032][ T4849] RBP: 00007f9d21e8439e R08: 0000000000000000 R09: 0000000000000000 [ 126.085987][ T4849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.093943][ T4849] R13: 0000000000000000 R14: 00007f9d21fc8f80 R15: 00007fff817a8ba8 [ 126.101904][ T4849] [ 126.108280][ T26] audit: type=1326 audit(1731072103.437:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d21e11719 code=0x7ffc0000 [ 126.170105][ T4212] gspca_vc032x: reg_r err -110 [ 126.174996][ T4212] vc032x: probe of 1-1:0.0 failed with error -110 [ 126.186736][ T4212] usb 1-1: USB disconnect, device number 4 [ 126.216791][ T4259] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.240909][ T26] audit: type=1326 audit(1731072103.477:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d21e11719 code=0x7ffc0000 [ 126.484847][ T4259] usb 5-1: Using ep0 maxpacket: 16 [ 126.815014][ T4259] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 126.824127][ T4259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.832248][ T4259] usb 5-1: Product: syz [ 126.836471][ T4259] usb 5-1: Manufacturer: syz [ 126.841095][ T4259] usb 5-1: SerialNumber: syz [ 126.848698][ T4259] usb 5-1: config 0 descriptor?? [ 126.888004][ T4259] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 126.924959][ T4259] gp8psk: usb in 128 operation failed. [ 126.956289][ T4259] gp8psk: usb in 137 operation failed. [ 126.961814][ T4259] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.985066][ T4259] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 126.994356][ T4259] usb 5-1: media controller created [ 127.007686][ T4259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.021213][ T4259] gp8psk_fe: Frontend revision 1 attached [ 127.027006][ T4259] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 127.035014][ T4259] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 127.135010][ T4259] gp8psk: usb in 138 operation failed. [ 127.140510][ T4259] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 127.150650][ T4259] gp8psk: found Genpix USB device pID = 201 (hex) [ 127.159167][ T4259] usb 5-1: USB disconnect, device number 2 [ 127.201519][ T4259] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 132.647549][ T1426] ieee802154 phy0 wpan0: encryption failed: -22