last executing test programs: 13.270022852s ago: executing program 1 (id=396): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000c00)={0x20080522}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 13.151792664s ago: executing program 2 (id=398): syz_open_procfs(0x0, 0x0) r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x47b4d000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 12.191881369s ago: executing program 1 (id=401): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000640)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 10.934129849s ago: executing program 0 (id=404): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 9.778105177s ago: executing program 2 (id=407): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) 6.681878576s ago: executing program 0 (id=411): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet_udp(0x2, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 6.681186796s ago: executing program 1 (id=412): getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000140)=""/134, 0x86) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/cgroup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0x6, '\x00', @p_u8=0x0}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x18, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x3b, 0x2, 0x1, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}]}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080080003400000000205000640520000001400000011"], 0xc8}}, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) setns(r0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000202010100000000000002000005300002812c00018014000300fc0200000000000000000000000000011400d8dc24a6c2c6040020010000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x40008c0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 6.42030612s ago: executing program 3 (id=413): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000009400)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r0, 0x4000, 0x4) 6.41951301s ago: executing program 2 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) r2 = shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) r3 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) shmctl$SHM_STAT_ANY(r2, 0xf, 0x0) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44884) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000124e0000010069703665727370616e0000001c00028014000500fc01000000000000000000000000000004001200"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) 6.319595781s ago: executing program 3 (id=415): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8006, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@hoplimit={{0x10, 0x29, 0x34, 0x8}}], 0x10}}], 0x1, 0x8800) 6.199933093s ago: executing program 2 (id=416): r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.145811974s ago: executing program 3 (id=417): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x4a, 0xc8, {0x7d, 0x7f, 0x10, 0xf, 0x6}}}}, 0x17) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x5, 0x7fff, 0x0, 0x8000, 0x16, "2278d8e2a4608fb25ad1d9c44c0965a4d4b750"}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) close(0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008880}, 0x4004) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000f06000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0xd6, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x8, "02a20948fd74"}, {0x0, 0x9, "ccf0294e2a3bdb"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) 5.800636909s ago: executing program 3 (id=418): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) close_range(r2, 0xffffffffffffffff, 0x0) 5.684062171s ago: executing program 0 (id=419): socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 4.795450445s ago: executing program 1 (id=421): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 4.770795515s ago: executing program 3 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x83, &(0x7f0000000780)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "00c222", 0x4d, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@hopopts={0x3c, 0x3, '\x00', [@generic={0x3, 0x12, "3deb733d6a7bfc4b01775556ce44eb9a5ed9"}, @jumbo={0xc2, 0x4, 0x2}]}], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x4, 0x0, 0x3}, {"04957fd731abb52ef8bc03acd4dacf4375"}}}}}}}, 0x0) 4.685592507s ago: executing program 3 (id=424): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) 3.703648442s ago: executing program 1 (id=425): r0 = openat$mice(0xffffff9c, &(0x7f0000000240), 0x40000) r1 = syz_io_uring_setup(0x43b9, &(0x7f00000006c0)={0x0, 0x42f5, 0x40, 0x2, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14, 0x40000) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000007c0)={{r4}, "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"}) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000000039a0040008000c0001800600060086dd0000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) r9 = fsmount(0xffffffffffffffff, 0x0, 0xc) ioctl$IOCTL_GET_NUM_DEVICES(r9, 0x40046104, &(0x7f0000000100)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000020006600000008000300", @ANYRES32=r11, @ANYBLOB="080026006c09000008009f00010000000800b700950000"], 0x34}}, 0x0) 3.464450446s ago: executing program 4 (id=428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000200)=0x1, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x6004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in6=@local, {@in6=@private2, @in6=@local}, {{@in=@local, @in=@dev, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4, 0x6e6bb8}, 0xfffffffe}, [@tmpl={0x44, 0x8, [{{@in6=@loopback}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) eventfd2(0x6, 0x800) fsmount(0xffffffffffffffff, 0x1, 0xf) eventfd2(0x68, 0xc00) eventfd(0x7ff) io_setup(0x8, &(0x7f0000004200)) openat$null(0xffffffffffffff9c, 0x0, 0x104, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x202042, 0x0) memfd_secret(0x80000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 3.18920613s ago: executing program 4 (id=429): socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x8000600) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 3.111684332s ago: executing program 1 (id=430): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x10041ff, 0x2) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000000)=0x9) 2.271255425s ago: executing program 4 (id=431): socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x80000000000000a, 0x5, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x802, 0x0) socket$inet(0xa, 0x801, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003}, 0x94) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.114165827s ago: executing program 0 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xffffffff}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.995048739s ago: executing program 4 (id=433): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) close_range(r2, 0xffffffffffffffff, 0x0) 1.994205779s ago: executing program 0 (id=434): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.467610237s ago: executing program 0 (id=435): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 1.062801953s ago: executing program 4 (id=436): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 951.224206ms ago: executing program 2 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) r2 = shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) r3 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) shmctl$SHM_STAT_ANY(r2, 0xf, 0x0) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44884) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000124e0000010069703665727370616e0000001c00028014000500fc01000000000000000000000000000004001200"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) 62.13389ms ago: executing program 4 (id=438): syz_open_dev$dri(0x0, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) r3 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) 0s ago: executing program 2 (id=439): socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 49.913313][ T4171] cgroup: Unknown subsys name 'net' [ 50.018272][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.219881][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.578968][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.646076][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 52.655570][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.717981][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 52.743776][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.751291][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.758945][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.770400][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.777611][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.785787][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.798163][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 52.867458][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.876781][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.883932][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.892797][ T4191] device bridge_slave_0 entered promiscuous mode [ 52.917480][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.933791][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.940834][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.948629][ T4191] device bridge_slave_1 entered promiscuous mode [ 52.958122][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.965262][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.973271][ T4188] device bridge_slave_0 entered promiscuous mode [ 53.001974][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.009043][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.016816][ T4188] device bridge_slave_1 entered promiscuous mode [ 53.032889][ T4182] team0: Port device team_slave_0 added [ 53.038788][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.046022][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.054261][ T4181] device bridge_slave_0 entered promiscuous mode [ 53.074640][ T4182] team0: Port device team_slave_1 added [ 53.080447][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.087604][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.095624][ T4181] device bridge_slave_1 entered promiscuous mode [ 53.104217][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.115688][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.139007][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.173711][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.201611][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.208676][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.216464][ T4190] device bridge_slave_0 entered promiscuous mode [ 53.231373][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.238309][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.264384][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.277487][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.288697][ T4191] team0: Port device team_slave_0 added [ 53.297773][ T4191] team0: Port device team_slave_1 added [ 53.303764][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.310852][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.319315][ T4190] device bridge_slave_1 entered promiscuous mode [ 53.332465][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.339405][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.365795][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.378217][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.401742][ T4188] team0: Port device team_slave_0 added [ 53.433729][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.444655][ T4188] team0: Port device team_slave_1 added [ 53.451908][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.477470][ T4190] team0: Port device team_slave_0 added [ 53.488712][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.495923][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.522013][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.555716][ T4190] team0: Port device team_slave_1 added [ 53.563130][ T4181] team0: Port device team_slave_0 added [ 53.575614][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.582708][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.608736][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.625157][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.632227][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.658218][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.670704][ T4181] team0: Port device team_slave_1 added [ 53.698768][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.707701][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.715060][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.722129][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.748314][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.764981][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.772048][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.798187][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.835377][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.842565][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.868729][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.890630][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.897377][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.904058][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.912038][ T4191] Cannot create hsr debugfs directory [ 53.917921][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.925066][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.951323][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.988898][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.996116][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.022160][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.044391][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.051128][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.057623][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.065313][ T4188] Cannot create hsr debugfs directory [ 54.105966][ T4190] device hsr_slave_0 entered promiscuous mode [ 54.112705][ T4190] device hsr_slave_1 entered promiscuous mode [ 54.119174][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.126781][ T4190] Cannot create hsr debugfs directory [ 54.196520][ T4181] device hsr_slave_0 entered promiscuous mode [ 54.203242][ T4181] device hsr_slave_1 entered promiscuous mode [ 54.209632][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.217609][ T4181] Cannot create hsr debugfs directory [ 54.263901][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 54.270572][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 54.276879][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 54.283601][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 54.289673][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 54.457273][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.467497][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.481752][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.490465][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.518986][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.530552][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.552554][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.566341][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.623543][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.635232][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.644443][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.661719][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.716321][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.729677][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.740227][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.756095][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.771531][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.780630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.790432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.815461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.825006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.834513][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.841725][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.851559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.860204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.868693][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.875753][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.883574][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.918180][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.927299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.935528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.944406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.953367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.962947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.974455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.983480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.992300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.022213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.032597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.053985][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.066316][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.083856][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.095673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.104388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.112854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.120425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.140013][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.157230][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.197746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.206463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.220357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.239529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.250247][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.257354][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.265841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.274603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.283205][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.290228][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.297951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.306499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.316621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.325229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.333768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.341727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.354458][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.361507][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.370032][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.379830][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.412280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.420880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.429430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.438690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.447559][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.454636][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.462643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.471450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.479734][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.486907][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.494955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.504472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.513632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.522636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.530867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.539533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.547988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.556287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.580202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.587721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.595474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.604705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.619599][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.646398][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.667618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.679321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.688176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.697223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.705922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.714513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.729826][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.759361][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.810753][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.820212][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.836359][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.871657][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.880829][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.891926][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.899061][ T1507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.908595][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.931144][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.939721][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.962785][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.969851][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.979226][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.988320][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.997847][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.008083][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.022683][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.038581][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.047246][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.058456][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.071884][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.080184][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.089444][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.112982][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.121716][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.129141][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.139783][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.175091][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.183598][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.193658][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.202577][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.210424][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.218349][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.226477][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.245864][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.269740][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.280178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.297255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.314073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.328626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.340160][ T4182] device veth0_vlan entered promiscuous mode [ 56.366235][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 56.366379][ T4191] device veth0_vlan entered promiscuous mode [ 56.378360][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 56.379680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.391211][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 56.398886][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 56.399996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.406214][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 56.419078][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.426561][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.437677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.446799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.455559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.463045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.470417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.478785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.487387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.495402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.504215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.516306][ T4182] device veth1_vlan entered promiscuous mode [ 56.532053][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.540886][ T4191] device veth1_vlan entered promiscuous mode [ 56.549449][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.557660][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.565913][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.575275][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.584362][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.591439][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.631882][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.639913][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.649812][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.661809][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.670302][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.689250][ T4188] device veth0_vlan entered promiscuous mode [ 56.715936][ T4182] device veth0_macvtap entered promiscuous mode [ 56.724199][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.732820][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.744837][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.753546][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.763699][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.772339][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.780749][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.790044][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.798723][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.807437][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.815804][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.824241][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.833319][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.841842][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.850012][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.859272][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.867439][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.875528][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.883778][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.898526][ T4191] device veth0_macvtap entered promiscuous mode [ 56.909080][ T4188] device veth1_vlan entered promiscuous mode [ 56.923871][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.934336][ T4182] device veth1_macvtap entered promiscuous mode [ 56.945837][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.955402][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.963689][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.972200][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.980510][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.010203][ T4190] device veth0_vlan entered promiscuous mode [ 57.025625][ T4191] device veth1_macvtap entered promiscuous mode [ 57.034281][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.048709][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.057654][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.071576][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.079888][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.089040][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.102430][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.109899][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.118456][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.127926][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.137472][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.155999][ T4190] device veth1_vlan entered promiscuous mode [ 57.164845][ T4188] device veth0_macvtap entered promiscuous mode [ 57.178217][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.196441][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.208932][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.221795][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.232373][ T4188] device veth1_macvtap entered promiscuous mode [ 57.251615][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.259525][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.267920][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.276676][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.285145][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.294438][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.303708][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.312315][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.328708][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.337718][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.346802][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.355761][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.389339][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.400094][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.411816][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.446856][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.456452][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.466591][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.478551][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.489011][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.496987][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.512324][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.521562][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.530245][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.539291][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.552541][ T4190] device veth0_macvtap entered promiscuous mode [ 57.568945][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.579569][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.594046][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.604731][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.616227][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.645563][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.653285][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.662270][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.670687][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.681183][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.692258][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.703047][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.713546][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.724874][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.732918][ T4190] device veth1_macvtap entered promiscuous mode [ 57.743089][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.763953][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.772428][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.776552][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.789788][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.810321][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.823027][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.833023][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.843668][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.853487][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.869246][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.880361][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.906212][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.917266][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.927055][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.937029][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.949864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.959298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.969822][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.980712][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.990872][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.002132][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.012225][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.024205][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.035214][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.062812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.073095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.082125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.090777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.104779][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.114704][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.123808][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.132756][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.154087][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.167724][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.191224][ T1507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.199156][ T1507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.207084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.218059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.227365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.237004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.246372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.255205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.266925][ T4181] device veth0_vlan entered promiscuous mode [ 58.296441][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.322122][ T4181] device veth1_vlan entered promiscuous mode [ 58.329409][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.355112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.385222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.394166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.419675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.428942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.437444][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 58.446644][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 58.453146][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 58.459537][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 58.465654][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 58.481343][ T4181] device veth0_macvtap entered promiscuous mode [ 58.507847][ T4181] device veth1_macvtap entered promiscuous mode [ 58.558083][ T721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.577060][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.596221][ T721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.599203][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.659326][ T4307] trusted_key: encrypted_key: insufficient parameters specified [ 58.665524][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.679653][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.691469][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.703515][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.714663][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.725301][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.733997][ T4308] loop0: detected capacity change from 0 to 4096 [ 58.739381][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.761853][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.781109][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.790997][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.834609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.868876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.872411][ T4308] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 58.967478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.980018][ T4308] ntfs3: loop0: Failed to load $Extend. [ 58.980079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.994878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.014647][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.047078][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.058264][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.075571][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.093548][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.104777][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.115115][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.135043][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.148208][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.330552][ T4309] Zero length message leads to an empty skb [ 59.347791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.464749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.482209][ T1507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.488622][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.646498][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.756410][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 59.769928][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 59.780425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 59.949604][ T4308] syz.0.1 (4308) used greatest stack depth: 21168 bytes left [ 59.963514][ T1507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.974573][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.984778][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.018513][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.030259][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.045396][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.088216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.127208][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.154174][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.225721][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.274796][ T721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.305600][ T721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.341448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.350368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.470197][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.502117][ T4303] Bluetooth: hci1: command 0x0419 tx timeout [ 60.522887][ T4303] Bluetooth: hci0: command 0x0419 tx timeout [ 60.591772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.628946][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 60.661265][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.739308][ T4303] Bluetooth: hci3: command 0x0419 tx timeout [ 60.862573][ T4303] Bluetooth: hci4: command 0x0419 tx timeout [ 60.939021][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.026256][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.184425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.535909][ T4333] syz.4.8 uses obsolete (PF_INET,SOCK_PACKET) [ 61.569430][ T4320] loop3: detected capacity change from 0 to 32768 [ 61.902665][ T4320] ======================================================= [ 61.902665][ T4320] WARNING: The mand mount option has been deprecated and [ 61.902665][ T4320] and is ignored by this kernel. Remove the mand [ 61.902665][ T4320] option from the mount to silence this warning. [ 61.902665][ T4320] ======================================================= [ 61.937533][ C0] vkms_vblank_simulate: vblank timer overrun [ 62.200610][ T4343] loop2: detected capacity change from 0 to 512 [ 62.517477][ T4350] loop0: detected capacity change from 0 to 512 [ 62.850315][ T4350] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 62.857521][ T4350] EXT4-fs (loop0): Ignoring removed bh option [ 62.864257][ T4350] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.876537][ T4350] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.889552][ T4350] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.182271][ T4343] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 63.251314][ T4343] EXT4-fs (loop2): invalid journal inode [ 63.257726][ T4343] EXT4-fs (loop2): can't get journal size [ 63.258185][ T4350] EXT4-fs (loop0): 1 truncate cleaned up [ 63.269805][ T4350] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 63.622781][ T4343] EXT4-fs (loop2): 1 truncate cleaned up [ 63.628480][ T4343] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 63.638158][ T4320] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 64.374565][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 65.286251][ T4371] loop4: detected capacity change from 0 to 64 [ 65.298061][ T4369] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 65.412538][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.008718][ T4369] device bridge_slave_1 left promiscuous mode [ 67.254938][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.271294][ T4369] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 68.179365][ T4384] mmap: syz.3.18 (4384) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 68.232177][ T4386] device syzkaller0 entered promiscuous mode [ 68.306274][ T4392] loop3: detected capacity change from 0 to 256 [ 68.342664][ T4390] loop2: detected capacity change from 0 to 64 [ 68.404250][ T4392] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.445696][ T4390] minix_free_block (loop2:1): bit already cleared [ 68.452281][ T4390] minix_free_block (loop2:4): bit already cleared [ 68.458713][ T4390] minix_free_block (loop2:3): bit already cleared [ 68.465154][ T4390] minix_free_block (loop2:2): bit already cleared [ 68.471601][ T4390] minix_free_block (loop2:1): bit already cleared [ 68.551273][ T4392] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 68.654733][ T4392] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 71.332355][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.339154][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.348875][ T4404] syz.4.19 (4404) used greatest stack depth: 20768 bytes left [ 71.502924][ T4424] loop2: detected capacity change from 0 to 64 [ 72.765881][ T4440] loop1: detected capacity change from 0 to 64 [ 72.931403][ T4440] minix_free_block (loop1:1): bit already cleared [ 72.937853][ T4440] minix_free_block (loop1:4): bit already cleared [ 72.944323][ T4440] minix_free_block (loop1:3): bit already cleared [ 72.950729][ T4440] minix_free_block (loop1:2): bit already cleared [ 72.957187][ T4440] minix_free_block (loop1:1): bit already cleared [ 73.057827][ T4443] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.174367][ T4443] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 73.217732][ T4443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.345216][ T4474] loop2: detected capacity change from 0 to 64 [ 76.377967][ T7] cfg80211: failed to load regulatory.db [ 77.774104][ T4502] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.839614][ T4502] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 77.945006][ T4502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.320184][ T4517] device syzkaller0 entered promiscuous mode [ 78.739206][ T4525] loop3: detected capacity change from 0 to 64 [ 79.071109][ T4532] syz.1.60 uses old SIOCAX25GETINFO [ 81.448787][ T4555] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.502951][ T4556] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 81.586932][ T4556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.956554][ T4565] IPVS: length: 24 != 239142997080 [ 82.846214][ T4579] loop4: detected capacity change from 0 to 64 [ 82.889017][ T4575] loop2: detected capacity change from 0 to 40427 [ 82.921139][ T4577] loop1: detected capacity change from 0 to 4096 [ 82.947662][ T4575] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 82.955614][ T4575] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 82.968260][ T4575] F2FS-fs (loop2): invalid crc value [ 84.115320][ T4577] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 84.166096][ T4577] ntfs3: loop1: Failed to load $Extend. [ 84.176956][ T4575] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.503346][ T4575] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 85.510609][ T4575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 85.552416][ T4604] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 85.887715][ T4604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.091323][ T4630] IPVS: length: 24 != 239142997080 [ 87.155124][ T4634] loop4: detected capacity change from 0 to 64 [ 88.751863][ T4647] loop3: detected capacity change from 0 to 40427 [ 88.804885][ T4647] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 88.812721][ T4647] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 88.890351][ T4647] F2FS-fs (loop3): invalid crc value [ 89.192947][ T4647] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.302054][ T4647] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.309206][ T4647] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.459267][ T4669] loop1: detected capacity change from 0 to 4096 [ 91.294673][ T4669] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 91.342180][ T4669] ntfs3: loop1: Failed to load $Extend. [ 91.432471][ T4684] IPVS: length: 24 != 239142997080 [ 91.981696][ T4690] loop1: detected capacity change from 0 to 128 [ 92.081455][ T4690] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.277216][ T4693] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 92.295795][ T4690] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.315395][ T4693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.604463][ T4708] loop0: detected capacity change from 0 to 40427 [ 93.709781][ T4708] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 93.717643][ T4708] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.730774][ T4708] F2FS-fs (loop0): invalid crc value [ 93.866727][ T4708] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.975284][ T4708] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.982579][ T4708] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.493175][ T4739] loop1: detected capacity change from 0 to 64 [ 95.523383][ T4739] minix_free_block (loop1:1): bit already cleared [ 95.530260][ T4739] minix_free_block (loop1:4): bit already cleared [ 95.536954][ T4739] minix_free_block (loop1:3): bit already cleared [ 95.543387][ T4739] minix_free_block (loop1:2): bit already cleared [ 95.549815][ T4739] minix_free_block (loop1:1): bit already cleared [ 95.762563][ T4750] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.509217][ T4751] IPVS: length: 24 != 239142997080 [ 96.526735][ T4755] loop2: detected capacity change from 0 to 64 [ 97.709362][ T4767] loop3: detected capacity change from 0 to 256 [ 97.743634][ T4769] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.156785][ T4769] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 98.242727][ T4767] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.321380][ T4767] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 98.409034][ T4775] loop0: detected capacity change from 0 to 40427 [ 98.418829][ T4767] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 98.434211][ T4769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.448202][ T4776] device vlan2 entered promiscuous mode [ 98.457021][ T4776] device bond1 entered promiscuous mode [ 98.466704][ T4775] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 98.475484][ T4775] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.488973][ T4775] F2FS-fs (loop0): invalid crc value [ 98.660291][ T4775] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.502705][ T4775] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 99.509806][ T4775] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.911958][ T4809] loop4: detected capacity change from 0 to 64 [ 101.094268][ T4807] loop1: detected capacity change from 0 to 32768 [ 101.251776][ T4813] IPVS: length: 24 != 239142997080 [ 101.476169][ T4807] XFS (loop1): Mounting V5 Filesystem [ 101.909218][ T4807] XFS (loop1): Ending clean mount [ 101.922516][ T4807] XFS (loop1): Quotacheck needed: Please wait. [ 102.019064][ T4807] XFS (loop1): Quotacheck: Done. [ 102.059117][ T25] audit: type=1804 audit(1753282729.130:2): pid=4807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.130" name="/newroot/24/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 102.210049][ T4827] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 102.362438][ T25] audit: type=1804 audit(1753282729.430:3): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.130" name="/newroot/24/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 102.818915][ T4827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.835288][ T4831] device vlan3 entered promiscuous mode [ 102.841741][ T4831] device bond2 entered promiscuous mode [ 102.861904][ T4181] XFS (loop1): Unmounting Filesystem [ 104.347527][ T4844] loop4: detected capacity change from 0 to 40427 [ 104.467058][ T4844] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 104.474952][ T4844] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 104.496665][ T4844] F2FS-fs (loop4): invalid crc value [ 104.521695][ T4844] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.600540][ T4844] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 104.607674][ T4844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.241105][ T4872] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 107.349276][ T4872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.672920][ T4877] device vlan2 entered promiscuous mode [ 107.706486][ T4877] device bond2 entered promiscuous mode [ 108.367801][ T4881] bond2: (slave gretap1): making interface the new active one [ 108.395839][ T4896] loop4: detected capacity change from 0 to 64 [ 108.410609][ T4881] device gretap1 entered promiscuous mode [ 108.421719][ T4881] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 108.432720][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 108.450624][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 108.506513][ T4881] syz.0.148 (4881) used greatest stack depth: 20160 bytes left [ 112.409482][ T4945] loop3: detected capacity change from 0 to 32768 [ 112.665355][ T4945] XFS (loop3): Mounting V5 Filesystem [ 112.956013][ T4945] XFS (loop3): Ending clean mount [ 112.963636][ T4945] XFS (loop3): Quotacheck needed: Please wait. [ 113.065256][ T4957] loop0: detected capacity change from 0 to 1024 [ 113.101336][ T4945] XFS (loop3): Quotacheck: Done. [ 113.141970][ T25] audit: type=1804 audit(1753282740.220:4): pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.166" name="/newroot/28/file0/bus" dev="loop3" ino=9290 res=1 errno=0 [ 113.296932][ T4957] EXT4-fs (loop0): Invalid want_extra_isize 132 [ 113.786394][ T25] audit: type=1804 audit(1753282740.530:5): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.166" name="/newroot/28/file0/bus" dev="loop3" ino=9290 res=1 errno=0 [ 113.807155][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.213207][ T4963] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.353223][ T4190] XFS (loop3): Unmounting Filesystem [ 115.758828][ T4988] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.771842][ T4988] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 118.644801][ T5005] loop3: detected capacity change from 0 to 256 [ 118.783802][ T5005] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.932248][ T5005] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 119.016584][ T5005] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 120.374868][ T5020] loop0: detected capacity change from 0 to 512 [ 121.386302][ T5031] loop2: detected capacity change from 0 to 64 [ 121.583453][ T5032] xt_TCPMSS: Only works on TCP SYN packets [ 123.862972][ T5052] loop0: detected capacity change from 0 to 64 [ 124.051160][ T5052] minix_free_block (loop0:1): bit already cleared [ 124.057581][ T5052] minix_free_block (loop0:4): bit already cleared [ 124.064089][ T5052] minix_free_block (loop0:3): bit already cleared [ 124.070482][ T5052] minix_free_block (loop0:2): bit already cleared [ 124.076903][ T5052] minix_free_block (loop0:1): bit already cleared [ 124.122732][ T5056] tipc: Started in network mode [ 124.141061][ T5056] tipc: Node identity 06a21669cdba, cluster identity 4711 [ 124.148404][ T5056] tipc: Enabled bearer , priority 0 [ 124.326293][ T5059] device syzkaller0 entered promiscuous mode [ 124.373879][ T5057] loop1: detected capacity change from 0 to 40427 [ 125.021019][ T5057] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 125.028813][ T5057] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.050167][ T5056] tipc: Resetting bearer [ 125.091476][ T5057] F2FS-fs (loop1): invalid crc value [ 125.127171][ T5057] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.172803][ T5057] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.180044][ T5057] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.192029][ T5055] tipc: Resetting bearer [ 125.213091][ T4303] tipc: Node number set to 3407353449 [ 125.269521][ T5055] tipc: Disabling bearer [ 125.568857][ T25] audit: type=1804 audit(1753282752.640:6): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.200" name="/newroot/50/file1" dev="fuse" ino=1 res=1 errno=0 [ 126.895650][ T25] audit: type=1800 audit(1753282753.970:7): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.200" name="/" dev="fuse" ino=1 res=0 errno=0 [ 127.067012][ T5089] loop2: detected capacity change from 0 to 64 [ 127.929761][ T4246] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.054651][ T4246] usb 4-1: Using ep0 maxpacket: 8 [ 129.334016][ T5109] loop2: detected capacity change from 0 to 64 [ 129.411369][ T4246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.551130][ T4246] usb 4-1: config 0 has no interfaces? [ 129.574392][ T5105] loop4: detected capacity change from 0 to 8192 [ 130.211097][ T4246] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 130.220151][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.357195][ T5113] loop0: detected capacity change from 0 to 40427 [ 130.390143][ T5115] loop1: detected capacity change from 0 to 512 [ 130.412041][ T4246] usb 4-1: Product: syz [ 130.417705][ T5113] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 130.418429][ T4246] usb 4-1: Manufacturer: syz [ 130.425575][ T5113] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 130.461057][ T5113] F2FS-fs (loop0): invalid crc value [ 130.484473][ T5119] tipc: Started in network mode [ 130.489832][ T5119] tipc: Node identity d293ec7ce7df, cluster identity 4711 [ 130.498109][ T5113] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.540061][ T5115] EXT4-fs (loop1): Ignoring removed oldalloc option [ 130.552277][ T4246] usb 4-1: config 0 descriptor?? [ 130.567054][ T5119] tipc: Enabled bearer , priority 0 [ 130.567178][ T5115] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 130.584270][ T5113] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 130.591404][ T5113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.655229][ T4246] usb 4-1: can't set config #0, error -71 [ 130.705735][ T5119] tipc: Resetting bearer [ 130.744247][ T4246] usb 4-1: USB disconnect, device number 2 [ 130.793130][ T5127] device syzkaller0 entered promiscuous mode [ 130.799429][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 131.239729][ T25] audit: type=1804 audit(1753282758.310:8): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.217" name="/newroot/41/file1" dev="fuse" ino=1 res=1 errno=0 [ 131.314981][ T5118] tipc: Resetting bearer [ 131.359566][ T5118] tipc: Disabling bearer [ 131.398751][ T5135] loop2: detected capacity change from 0 to 64 [ 133.013025][ T5139] loop3: detected capacity change from 0 to 32768 [ 133.025123][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.031442][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.058111][ T25] audit: type=1800 audit(1753282760.120:9): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.217" name="/" dev="fuse" ino=1 res=0 errno=0 [ 133.106662][ T5139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.221 (5139) [ 133.211359][ T5139] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 133.220615][ T5139] BTRFS info (device loop3): turning on sync discard [ 133.227344][ T5139] BTRFS info (device loop3): setting nodatacow, compression disabled [ 133.235446][ T5139] BTRFS info (device loop3): turning on flush-on-commit [ 133.242431][ T5139] BTRFS info (device loop3): enabling all of the rescue options [ 133.250061][ T5139] BTRFS info (device loop3): ignoring data csums [ 133.256408][ T5139] BTRFS info (device loop3): ignoring bad roots [ 133.262668][ T5139] BTRFS info (device loop3): disabling log replay at mount time [ 133.270327][ T5139] BTRFS info (device loop3): using free space tree [ 133.276854][ T5139] BTRFS info (device loop3): has skinny extents [ 134.302822][ T5163] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.330031][ T5163] process 'syz.4.224' launched '/dev/fd/9' with NULL argv: empty string added [ 135.294007][ T5139] BTRFS error (device loop3): open_ctree failed: -12 [ 136.802995][ T5201] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.811996][ T5201] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.820711][ T5201] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.829540][ T5201] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.893493][ T5201] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 137.416226][ T5204] loop3: detected capacity change from 0 to 40427 [ 137.480602][ T5208] loop4: detected capacity change from 0 to 64 [ 137.495745][ T5204] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 137.504819][ T5204] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 137.515614][ T5204] F2FS-fs (loop3): invalid crc value [ 137.615653][ T5204] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.734994][ T5204] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 137.742142][ T5204] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.841707][ T5236] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.506915][ T5235] sched: RT throttling activated [ 141.480623][ T5254] loop1: detected capacity change from 0 to 64 [ 141.791732][ T5249] loop2: detected capacity change from 0 to 512 [ 141.962950][ T5249] EXT4-fs (loop2): Mount option "noload" incompatible with ext2 [ 143.007304][ T5276] loop0: detected capacity change from 0 to 4096 [ 143.144600][ T5281] loop2: detected capacity change from 0 to 32768 [ 143.229791][ T5281] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 143.238141][ T5281] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 143.389564][ T5281] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 143.408186][ T4253] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 143.779397][ T4253] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 144.545180][ T5276] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 144.563203][ T5276] ntfs3: loop0: Failed to load $Extend. [ 144.821831][ T4253] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1042ms [ 144.850439][ T4253] gfs2: fsid=syz:syz.0: jid=0: Done [ 144.938771][ T5281] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 146.613227][ T4303] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 146.703291][ T5328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.255'. [ 146.756597][ T5328] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 146.927824][ T5326] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.022269][ T5334] loop2: detected capacity change from 0 to 64 [ 147.051519][ T4303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.077123][ T4303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.109268][ T4303] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 147.215231][ T4303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.256965][ T4303] usb 2-1: config 0 descriptor?? [ 147.356084][ T5340] overlayfs: upper fs needs to support d_type. [ 147.365891][ T5340] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 147.373441][ T5340] overlayfs: failed to set xattr on upper [ 147.379208][ T5340] overlayfs: ...falling back to index=off,metacopy=off. [ 147.386933][ T5340] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 147.963009][ T4188] Trying to free block not in datazone [ 147.991550][ T4188] Trying to free block not in datazone [ 147.997415][ T4188] Trying to free block not in datazone [ 148.034275][ T4188] Trying to free block not in datazone [ 148.039747][ T4188] Trying to free block not in datazone [ 148.058945][ T4188] minix_free_block (loop2:6): bit already cleared [ 148.076029][ T4188] Trying to free block not in datazone [ 148.132264][ T4188] Trying to free block not in datazone [ 148.282958][ T4303] usbhid 2-1:0.0: can't add hid device: -71 [ 148.295914][ T4303] usbhid: probe of 2-1:0.0 failed with error -71 [ 148.917701][ T4303] usb 2-1: USB disconnect, device number 2 [ 149.076992][ T5356] loop2: detected capacity change from 0 to 64 [ 149.999903][ T5362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.264'. [ 150.512946][ T5368] loop1: detected capacity change from 0 to 64 [ 150.666959][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.674761][ T5362] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.415362][ T5395] loop3: detected capacity change from 0 to 64 [ 154.869778][ T5407] loop1: detected capacity change from 0 to 64 [ 154.988851][ T5410] overlayfs: upper fs needs to support d_type. [ 154.997201][ T5410] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.004272][ T5410] overlayfs: failed to set xattr on upper [ 155.010028][ T5410] overlayfs: ...falling back to index=off,metacopy=off. [ 155.017723][ T5410] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 155.411762][ T4190] Trying to free block not in datazone [ 155.417369][ T4190] Trying to free block not in datazone [ 155.451177][ T4190] Trying to free block not in datazone [ 155.457239][ T4190] Trying to free block not in datazone [ 155.477030][ T4190] Trying to free block not in datazone [ 155.561369][ T4190] minix_free_block (loop3:6): bit already cleared [ 155.581281][ T4190] Trying to free block not in datazone [ 155.588876][ T4190] Trying to free block not in datazone [ 157.220067][ T5434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.227719][ T5434] IPv6: NLM_F_CREATE should be set when creating new route [ 157.981417][ T5464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.287'. [ 158.023123][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 158.252627][ T5472] loop0: detected capacity change from 0 to 64 [ 160.461039][ T5518] ksmbd: Unknown IPC event: 6, ignore. [ 163.875824][ T5532] loop3: detected capacity change from 0 to 1 [ 163.956311][ T5532] Dev loop3: unable to read RDB block 1 [ 164.025833][ T5532] loop3: unable to read partition table [ 164.047106][ T5532] loop3: partition table beyond EOD, truncated [ 164.887056][ T5532] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.069708][ T5542] loop1: detected capacity change from 0 to 64 [ 167.259256][ T5546] loop0: detected capacity change from 0 to 4096 [ 167.421133][ T5546] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 167.502419][ T5546] ntfs3: loop0: Failed to load $Extend. [ 169.171937][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 170.915801][ T5597] loop3: detected capacity change from 0 to 64 [ 174.942398][ T5639] loop0: detected capacity change from 0 to 64 [ 175.657369][ T5187] Bluetooth: hci0: command 0x0406 tx timeout [ 175.671014][ T5187] Bluetooth: hci2: command 0x0406 tx timeout [ 175.677288][ T5187] Bluetooth: hci3: command 0x0406 tx timeout [ 175.683559][ T5187] Bluetooth: hci4: command 0x0406 tx timeout [ 175.689597][ T5187] Bluetooth: hci1: command 0x0406 tx timeout [ 178.129314][ T5676] loop4: detected capacity change from 0 to 64 [ 180.328858][ T5710] loop2: detected capacity change from 0 to 4096 [ 180.526453][ T5710] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 180.694943][ T5710] ntfs3: loop2: Failed to load $Extend. [ 181.331458][ T5717] loop4: detected capacity change from 0 to 64 [ 183.752954][ T4231] hid-generic 0003:8000:0002.0001: item fetching failed at offset 0/1 [ 183.811575][ T4231] hid-generic: probe of 0003:8000:0002.0001 failed with error -22 [ 186.112376][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.346578][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.362039][ T5752] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.376550][ T5752] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.386495][ T5752] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.400839][ T5752] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.634581][ T5791] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 188.741398][ T5795] loop3: detected capacity change from 0 to 64 [ 188.803469][ T5799] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 188.818559][ T5791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.818845][ T4327] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.838969][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 189.062515][ T9] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 189.847282][ T5811] overlayfs: upper fs needs to support d_type. [ 189.855045][ T5811] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 189.862071][ T5811] overlayfs: failed to set xattr on upper [ 189.867782][ T5811] overlayfs: ...falling back to index=off,metacopy=off. [ 189.874903][ T5811] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 189.951234][ T4301] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 190.343949][ T4190] Trying to free block not in datazone [ 190.349643][ T4190] Trying to free block not in datazone [ 190.396205][ T4190] Trying to free block not in datazone [ 190.436861][ T4190] Trying to free block not in datazone [ 190.466734][ T4190] Trying to free block not in datazone [ 190.489736][ T4190] minix_free_block (loop3:6): bit already cleared [ 190.507592][ T4190] Trying to free block not in datazone [ 190.526714][ T4190] Trying to free block not in datazone [ 190.761293][ T4301] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 190.773186][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.981378][ T4301] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 191.014504][ T4301] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 191.070192][ T4301] usb 1-1: Manufacturer: syz [ 191.152631][ T4301] usb 1-1: config 0 descriptor?? [ 191.310971][ T4301] rc_core: IR keymap rc-hauppauge not found [ 191.317337][ T4301] Registered IR keymap rc-empty [ 191.340752][ T4301] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 191.402477][ T4301] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 191.570936][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 193.268145][ T4301] usb 1-1: USB disconnect, device number 2 [ 193.434478][ T5843] tipc: Enabled bearer , priority 0 [ 193.444416][ T5843] device syzkaller0 entered promiscuous mode [ 193.483527][ T5843] tipc: Resetting bearer [ 193.617869][ T5842] tipc: Resetting bearer [ 193.645136][ T5842] tipc: Disabling bearer [ 194.301518][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.307952][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.971019][ T4253] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 197.001050][ T4253] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.038796][ T4253] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.171034][ T4253] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.180102][ T4253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.398748][ T5884] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 198.702941][ T5889] loop3: detected capacity change from 0 to 64 [ 198.985702][ T5891] overlayfs: upper fs needs to support d_type. [ 198.994012][ T5891] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 199.001202][ T5891] overlayfs: failed to set xattr on upper [ 199.006954][ T5891] overlayfs: ...falling back to index=off,metacopy=off. [ 199.014687][ T5891] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 199.660190][ T4190] Trying to free block not in datazone [ 199.676466][ T4190] Trying to free block not in datazone [ 199.720951][ T4190] Trying to free block not in datazone [ 199.726454][ T4190] Trying to free block not in datazone [ 199.749910][ T4190] Trying to free block not in datazone [ 199.774983][ T4190] minix_free_block (loop3:6): bit already cleared [ 199.931103][ T4253] usb 2-1: can't set config #27, error -71 [ 199.939299][ T4253] usb 2-1: USB disconnect, device number 3 [ 199.958320][ T4190] Trying to free block not in datazone [ 199.983198][ T4190] Trying to free block not in datazone [ 200.518305][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 201.878279][ T5927] loop1: detected capacity change from 0 to 64 [ 202.240449][ T5938] overlayfs: upper fs needs to support d_type. [ 202.256280][ T5938] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 202.265624][ T5938] overlayfs: failed to set xattr on upper [ 202.271464][ T5938] overlayfs: ...falling back to index=off,metacopy=off. [ 202.279205][ T5938] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 202.935403][ T4181] Trying to free block not in datazone [ 202.973477][ T4181] Trying to free block not in datazone [ 202.979050][ T4181] Trying to free block not in datazone [ 203.036087][ T4181] Trying to free block not in datazone [ 203.071054][ T4181] Trying to free block not in datazone [ 203.096719][ T4181] minix_free_block (loop1:6): bit already cleared [ 203.115607][ T4181] Trying to free block not in datazone [ 203.160235][ T4181] Trying to free block not in datazone [ 203.335566][ T5950] netlink: set zone limit has 8 unknown bytes [ 205.587100][ T5976] loop4: detected capacity change from 0 to 64 [ 205.594210][ T5974] loop0: detected capacity change from 0 to 256 [ 205.765946][ T5974] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.869858][ T5974] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 205.935572][ T5974] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 206.026220][ T5980] overlayfs: upper fs needs to support d_type. [ 206.034986][ T5980] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 206.042038][ T5980] overlayfs: failed to set xattr on upper [ 206.047794][ T5980] overlayfs: ...falling back to index=off,metacopy=off. [ 206.055504][ T5980] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 206.595503][ T4182] Trying to free block not in datazone [ 206.622273][ T4182] Trying to free block not in datazone [ 206.627755][ T4182] Trying to free block not in datazone [ 206.718660][ T4182] Trying to free block not in datazone [ 206.724235][ T4182] Trying to free block not in datazone [ 206.729689][ T4182] minix_free_block (loop4:6): bit already cleared [ 206.736209][ T4182] Trying to free block not in datazone [ 206.741905][ T4182] Trying to free block not in datazone [ 206.765853][ T5983] ------------[ cut here ]------------ [ 206.780952][ T5983] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 206.788410][ T5983] WARNING: CPU: 1 PID: 5983 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 206.853433][ T5983] Modules linked in: [ 206.875238][ T5983] CPU: 1 PID: 5983 Comm: syz.2.439 Not tainted 5.15.189-syzkaller #0 [ 206.956217][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.976067][ T5983] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 207.006016][ T5983] Code: 88 8e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 80 64 18 8b 4c 89 e6 89 ea e8 95 c8 6f 00 <0f> 0b e9 07 fd ff ff e8 b9 24 4a f8 0f 0b e9 b1 fe ff ff e8 ad 24 [ 207.074935][ T5983] RSP: 0018:ffffc90003b2f4c8 EFLAGS: 00010246 [ 207.093463][ T5983] RAX: 49fe54216ea2b800 RBX: 0000000000400000 RCX: 0000000000080000 [ 207.396356][ T5983] RDX: ffffc90005129000 RSI: 00000000000074a2 RDI: 00000000000074a3 [ 207.729011][ T5983] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed1017224f24 [ 207.762848][ T5983] R10: ffffed1017224f24 R11: 1ffff11017224f23 R12: ffff88805ff70000 [ 207.790102][ T5983] R13: ffff88805ff71290 R14: ffff888077b88da0 R15: ffff88805ff72298 [ 207.827262][ T5983] FS: 00007eff396126c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 207.836728][ T5983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.843989][ T5983] CR2: 00007fa9dd9c4178 CR3: 000000005819f000 CR4: 00000000003506f0 [ 207.852677][ T5983] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.860660][ T5983] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.874604][ T5983] Call Trace: [ 207.877904][ T5983] [ 207.880825][ T5983] ? netif_carrier_on+0xc1/0x120 [ 207.886059][ T5983] ieee80211_ocb_leave+0x26f/0x320 [ 207.891239][ T5983] __cfg80211_leave_ocb+0x219/0x3f0 [ 207.896443][ T5983] cfg80211_leave_ocb+0x53/0x70 [ 207.903692][ T5983] cfg80211_change_iface+0x4f1/0xeb0 [ 207.908991][ T5983] nl80211_set_interface+0x598/0x7d0 [ 207.914355][ T5983] ? nl80211_dump_interface+0x5c0/0x5c0 [ 207.919905][ T5983] ? mutex_lock_nested+0x17/0x20 [ 207.925083][ T5983] genl_rcv_msg+0xbc6/0xf40 [ 207.929591][ T5983] ? genl_bind+0x370/0x370 [ 207.934080][ T5983] ? verify_lock_unused+0x140/0x140 [ 207.939279][ T5983] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 207.944530][ T5983] ? dev_queue_xmit+0x20/0x20 [ 207.949208][ T5983] ? nl80211_dump_interface+0x5c0/0x5c0 [ 207.954820][ T5983] netlink_rcv_skb+0x1e0/0x430 [ 207.959598][ T5983] ? genl_bind+0x370/0x370 [ 207.964046][ T5983] ? netlink_ack+0xb60/0xb60 [ 207.968642][ T5983] ? __lock_acquire+0x7c60/0x7c60 [ 207.973742][ T5983] ? preempt_count_add+0x8d/0x190 [ 207.978883][ T5983] ? down_read+0x1aa/0x2e0 [ 207.983363][ T5983] genl_rcv+0x24/0x40 [ 207.987345][ T5983] netlink_unicast+0x774/0x920 [ 207.992173][ T5983] netlink_sendmsg+0x8ab/0xbc0 [ 207.996946][ T5983] ? netlink_getsockopt+0x560/0x560 [ 208.002186][ T5983] ? aa_sock_msg_perm+0x94/0x150 [ 208.007126][ T5983] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 208.012617][ T5983] ? security_socket_sendmsg+0x7c/0xa0 [ 208.018172][ T5983] __sys_sendto+0x423/0x580 [ 208.024317][ T5983] ? __ia32_sys_getpeername+0x80/0x80 [ 208.029729][ T5983] ? __lock_acquire+0x7c60/0x7c60 [ 208.034979][ T5983] ? lock_chain_count+0x20/0x20 [ 208.039835][ T5983] ? vtime_user_exit+0x2dc/0x400 [ 208.044818][ T5983] __x64_sys_sendto+0xda/0xf0 [ 208.049499][ T5983] do_syscall_64+0x4c/0xa0 [ 208.053974][ T5983] ? clear_bhb_loop+0x30/0x80 [ 208.058652][ T5983] ? clear_bhb_loop+0x30/0x80 [ 208.063363][ T5983] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.069256][ T5983] RIP: 0033:0x7eff3b7ac83c [ 208.073723][ T5983] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 208.093370][ T5983] RSP: 002b:00007eff39610e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 208.101929][ T5983] RAX: ffffffffffffffda RBX: 00007eff39610fa0 RCX: 00007eff3b7ac83c [ 208.109906][ T5983] RDX: 0000000000000024 RSI: 00007eff39610ff0 RDI: 0000000000000009 [ 208.117926][ T5983] RBP: 0000000000000000 R08: 00007eff39610e74 R09: 000000000000000c [ 208.126732][ T5983] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 208.135031][ T5983] R13: 0000000000000000 R14: 00007eff39610ff0 R15: 0000000000000000 [ 208.143149][ T5983] [ 208.146207][ T5983] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.153471][ T5983] CPU: 0 PID: 5983 Comm: syz.2.439 Not tainted 5.15.189-syzkaller #0 [ 208.161508][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.171539][ T5983] Call Trace: [ 208.174796][ T5983] [ 208.177705][ T5983] dump_stack_lvl+0x168/0x230 [ 208.182363][ T5983] ? show_regs_print_info+0x20/0x20 [ 208.187541][ T5983] ? load_image+0x3b0/0x3b0 [ 208.192030][ T5983] panic+0x2c9/0x7f0 [ 208.195907][ T5983] ? bpf_jit_dump+0xd0/0xd0 [ 208.200390][ T5983] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 208.206794][ T5983] __warn+0x248/0x2b0 [ 208.210756][ T5983] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 208.217152][ T5983] report_bug+0x1b7/0x2e0 [ 208.221463][ T5983] handle_bug+0x3a/0x70 [ 208.225593][ T5983] exc_invalid_op+0x16/0x40 [ 208.230070][ T5983] asm_exc_invalid_op+0x16/0x20 [ 208.234903][ T5983] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 208.241909][ T5983] Code: 88 8e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 80 64 18 8b 4c 89 e6 89 ea e8 95 c8 6f 00 <0f> 0b e9 07 fd ff ff e8 b9 24 4a f8 0f 0b e9 b1 fe ff ff e8 ad 24 [ 208.261491][ T5983] RSP: 0018:ffffc90003b2f4c8 EFLAGS: 00010246 [ 208.267542][ T5983] RAX: 49fe54216ea2b800 RBX: 0000000000400000 RCX: 0000000000080000 [ 208.275504][ T5983] RDX: ffffc90005129000 RSI: 00000000000074a2 RDI: 00000000000074a3 [ 208.283451][ T5983] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed1017224f24 [ 208.291401][ T5983] R10: ffffed1017224f24 R11: 1ffff11017224f23 R12: ffff88805ff70000 [ 208.299376][ T5983] R13: ffff88805ff71290 R14: ffff888077b88da0 R15: ffff88805ff72298 [ 208.307334][ T5983] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 208.313725][ T5983] ? netif_carrier_on+0xc1/0x120 [ 208.318653][ T5983] ieee80211_ocb_leave+0x26f/0x320 [ 208.323765][ T5983] __cfg80211_leave_ocb+0x219/0x3f0 [ 208.328945][ T5983] cfg80211_leave_ocb+0x53/0x70 [ 208.333777][ T5983] cfg80211_change_iface+0x4f1/0xeb0 [ 208.339045][ T5983] nl80211_set_interface+0x598/0x7d0 [ 208.344323][ T5983] ? nl80211_dump_interface+0x5c0/0x5c0 [ 208.349860][ T5983] ? mutex_lock_nested+0x17/0x20 [ 208.354782][ T5983] genl_rcv_msg+0xbc6/0xf40 [ 208.359273][ T5983] ? genl_bind+0x370/0x370 [ 208.363670][ T5983] ? verify_lock_unused+0x140/0x140 [ 208.368849][ T5983] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 208.374032][ T5983] ? dev_queue_xmit+0x20/0x20 [ 208.378690][ T5983] ? nl80211_dump_interface+0x5c0/0x5c0 [ 208.384239][ T5983] netlink_rcv_skb+0x1e0/0x430 [ 208.388992][ T5983] ? genl_bind+0x370/0x370 [ 208.393385][ T5983] ? netlink_ack+0xb60/0xb60 [ 208.397953][ T5983] ? __lock_acquire+0x7c60/0x7c60 [ 208.402957][ T5983] ? preempt_count_add+0x8d/0x190 [ 208.407957][ T5983] ? down_read+0x1aa/0x2e0 [ 208.412354][ T5983] genl_rcv+0x24/0x40 [ 208.416309][ T5983] netlink_unicast+0x774/0x920 [ 208.421061][ T5983] netlink_sendmsg+0x8ab/0xbc0 [ 208.425812][ T5983] ? netlink_getsockopt+0x560/0x560 [ 208.430994][ T5983] ? aa_sock_msg_perm+0x94/0x150 [ 208.435943][ T5983] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 208.441208][ T5983] ? security_socket_sendmsg+0x7c/0xa0 [ 208.446647][ T5983] __sys_sendto+0x423/0x580 [ 208.451136][ T5983] ? __ia32_sys_getpeername+0x80/0x80 [ 208.456518][ T5983] ? __lock_acquire+0x7c60/0x7c60 [ 208.461546][ T5983] ? lock_chain_count+0x20/0x20 [ 208.466375][ T5983] ? vtime_user_exit+0x2dc/0x400 [ 208.471292][ T5983] __x64_sys_sendto+0xda/0xf0 [ 208.475949][ T5983] do_syscall_64+0x4c/0xa0 [ 208.480343][ T5983] ? clear_bhb_loop+0x30/0x80 [ 208.484995][ T5983] ? clear_bhb_loop+0x30/0x80 [ 208.489651][ T5983] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.495522][ T5983] RIP: 0033:0x7eff3b7ac83c [ 208.499916][ T5983] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 208.519497][ T5983] RSP: 002b:00007eff39610e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 208.527886][ T5983] RAX: ffffffffffffffda RBX: 00007eff39610fa0 RCX: 00007eff3b7ac83c [ 208.535836][ T5983] RDX: 0000000000000024 RSI: 00007eff39610ff0 RDI: 0000000000000009 [ 208.543785][ T5983] RBP: 0000000000000000 R08: 00007eff39610e74 R09: 000000000000000c [ 208.551732][ T5983] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 208.559681][ T5983] R13: 0000000000000000 R14: 00007eff39610ff0 R15: 0000000000000000 [ 208.567641][ T5983] [ 208.570854][ T5983] Kernel Offset: disabled [ 208.575343][ T5983] Rebooting in 86400 seconds..