last executing test programs: 3m33.943133649s ago: executing program 2 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa4, 0x100008b}, 0x0) socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x10000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20) readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) 3m28.703717268s ago: executing program 2 (id=72): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfa, 0x56b, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$tun(r0, &(0x7f00000003c0)={@void, @void, @llc={@snap={0xaa, 0x1, "c4", "969095", 0x890d, "93f9b95efbcb0372359eb8631e760594c6296c5f8c15ae0aa33e854f757be329750435331d2c4efdfaabb5158aad54d656d290ee4efb1c8781454f16a4bf17"}}}, 0x47) 3m28.002690216s ago: executing program 2 (id=75): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty}}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000180)={[{@usrjquota}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790020000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 3m21.53453769s ago: executing program 2 (id=90): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) 3m21.387529729s ago: executing program 2 (id=91): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122cc"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 3m20.838521927s ago: executing program 2 (id=93): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095000000000000000d58d3223f1c3aebbced6b862ea798030e098d26c77fa072ad94e185"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) setsockopt$packet_int(r4, 0x107, 0x8, 0x0, 0x0) getpid() setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 3m2.946988836s ago: executing program 32 (id=93): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095000000000000000d58d3223f1c3aebbced6b862ea798030e098d26c77fa072ad94e185"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) setsockopt$packet_int(r4, 0x107, 0x8, 0x0, 0x0) getpid() setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 2m43.557578669s ago: executing program 5 (id=181): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) 2m41.768085292s ago: executing program 5 (id=184): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="550a0000000000006311300000000000180000000000000000000000000000009500000000000000c8012f7d343577bc5489bea3ca16da006176dc78b8da072a924eaf875ca8460ae6b76fc6d4db013097f0c39ed90a4ffc2b65d4e0b2b338a5ad658c4394a3e9f481a7b2391c6ed42c2ab53302b40d59b3cfac4fbb397c396d6c8709b3f45bd0d78c66b85c199d4cee73394b744e963f9fa4fe26cff0ad5f5559adc7b2ed92113d45a1540a14ecee2cd3d1dff654d6bb8423"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m38.885672411s ago: executing program 3 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa4, 0x100008b}, 0x0) socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x10000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20) readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) 2m38.83174747s ago: executing program 5 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) socket$key(0xf, 0x3, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) 2m36.498468151s ago: executing program 5 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m36.053021599s ago: executing program 5 (id=200): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfa, 0x56b, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$tun(r0, &(0x7f00000003c0)={@void, @void, @llc={@snap={0xaa, 0x1, "c4", "969095", 0x890d, "93f9b95efbcb0372359eb8631e760594c6296c5f8c15ae0aa33e854f757be329750435331d2c4efdfaabb5158aad54d656d290ee4efb1c8781454f16a4bf17"}}}, 0x47) 2m35.596436078s ago: executing program 5 (id=203): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="550a0000000000006311300000000000180000000000000000000000000000009500000000000000c8012f7d343577bc5489bea3ca16da006176dc78b8da072a924eaf875ca8460ae6b76fc6d4db013097f0c39ed90a4ffc2b65d4e0b2b338a5ad658c4394a3e9f481a7b2391c6ed42c2ab53302b40d59b3cfac4fbb397c396d6c8709b3f45bd0d78c66b85c199d4cee73394b744e963f9fa4fe26cff0ad5f5559adc7b2ed92113d45a1540a14ecee2cd3d1dff654d6bb8423"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m30.331457207s ago: executing program 3 (id=210): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x8, 0x0, 0x4000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff0200"/51], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2m29.223467602s ago: executing program 3 (id=214): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xff08, 0x0, 0x0, 0x1, 0x0, "5f330000a90100f9"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x1a) 2m28.7829643s ago: executing program 3 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x1fffe, {0xaaaaaaaaaaaa0202}}}, 0x14) 2m27.647577776s ago: executing program 3 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x405c5504, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfff) syz_emit_ethernet(0xf8, &(0x7f0000000300)={@local, @broadcast, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "62ba5b", 0xba, 0x21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', {[@hopopts={0x1d}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x2, 0x0, 0x0, 0x5, 0x2, "dcd357", 0xfb, "b57f6a"}, "0d61712a2f1a2b45e26b3e16b70ef1db9c132ea5d99d131c68407d9126a99d4fc23f3a0130ef4379697b4c74e3add4461045c5a79d37a7801395a983e9cb4a7c1445d47973cd6d91dcdaa7f2502c95bcbd085eeeff386ac90df2059635fac3fd5cde6fc6006d33567403d772599198856329063bd7be28fcab6d9d4fba630e39d161bc2945ddd55377efb4003ab3f25098d2e7bd6cc20ac51386dee7c41ad6166420"}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x0) 2m24.454426084s ago: executing program 3 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m20.486030447s ago: executing program 33 (id=203): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="550a0000000000006311300000000000180000000000000000000000000000009500000000000000c8012f7d343577bc5489bea3ca16da006176dc78b8da072a924eaf875ca8460ae6b76fc6d4db013097f0c39ed90a4ffc2b65d4e0b2b338a5ad658c4394a3e9f481a7b2391c6ed42c2ab53302b40d59b3cfac4fbb397c396d6c8709b3f45bd0d78c66b85c199d4cee73394b744e963f9fa4fe26cff0ad5f5559adc7b2ed92113d45a1540a14ecee2cd3d1dff654d6bb8423"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m8.649151571s ago: executing program 34 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 15.584659312s ago: executing program 1 (id=586): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 15.119804811s ago: executing program 1 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000500)=""/38, 0x26) getdents(r0, 0x0, 0x58) 14.194599177s ago: executing program 4 (id=590): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) r3 = syz_open_pts(r2, 0x8000) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 14.079084007s ago: executing program 1 (id=591): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "449bab59"}, @main=@item_4={0x3, 0x0, 0x0, "0d34b68a"}, @local=@item_4={0x3, 0x2, 0x0, "0f4b99cb"}]}}, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/26, 0x1a}], 0x1, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12.902669382s ago: executing program 7 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}}, 0x0) 12.778971281s ago: executing program 7 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000001) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='kmem_cache_free\x00') r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000300)={r0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 11.579652577s ago: executing program 7 (id=599): r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 11.390680585s ago: executing program 7 (id=600): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioprio_get$pid(0x2, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) 10.889272774s ago: executing program 4 (id=602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000008000000040000000500000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001800"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) faccessat2(r5, &(0x7f00000000c0)='./file1\x00', 0x7, 0x300) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) bind$netlink(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000068000100feffffff00000b00000000000000"], 0x2c}}, 0x0) r9 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0) 10.736051353s ago: executing program 6 (id=603): r0 = syz_io_uring_setup(0x728e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="f80000000000000019010000100000000e60ff463cf87a199c591c93fd4d503b099db590a2b7dc8914b2ba3ed069b38a6cf88b8eb4c4c92505afff841f35d511835b5ce018a6bbc39db4ce3f01a3cff957248132208030cea9f26f5d4215b6a25a7e7a0ce06c530b117748ac26d45ac48ffad4a5b686999b0d5feea9772d18461a055a31b3c08a03275351c0ec9acc6e82596ce596860e90f279d9003356ec80cae1a416f285ef6ce62cc47c5cd5aceb8cd12e50f9ea358bf2330bc4ea5bb9dbfa6045917b6dcc5b5169ed3601d7f0eb2194065e620fc6eeb02587010c87b07f6489c55f3182493590f32049b2bb91088d7d4866"], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 10.198909751s ago: executing program 6 (id=606): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6ed, &(0x7f0000000dc0)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000000d00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000b40)=""/240, 0xf0}], 0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_script(r1, &(0x7f0000000280), 0xfea7) ftruncate(r0, 0x2006e2) 9.826408999s ago: executing program 4 (id=609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) r5 = memfd_secret(0x0) ftruncate(r5, 0x51a9497) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48845}, 0x4044040) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7.649996481s ago: executing program 4 (id=610): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), 0x0) socket$alg(0x26, 0x5, 0x0) setresgid(0x0, 0x0, 0xee01) prlimit64(0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x78}}, 0x0) 7.514531741s ago: executing program 1 (id=611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x34}}, 0x24004081) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB="c0c4612e417f000000000000004c2d0c471a40e53b0555bd608d582e6a03dc6205c4bc8a193f47774d10bb071f5a49d5cd755f2eeaae1edd506de6b357b6c6228a3d235161e0b17c3bc4caa4bfa8970539720d8f9a2d15308944cb2ee05e861e73faa7763526b4666ffcb0a5f482", @ANYRESHEX=0x0, @ANYBLOB=',discard,errors=continue,errors=continue,\x00'], 0x1, 0x152d, &(0x7f0000001f80)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file1'}, 0xb) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x2, 0x1}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180900000000000000000000ca00000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r7 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.228750032s ago: executing program 4 (id=613): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESOCT, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x2, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r4, &(0x7f0000000880)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000440)=@random={'trusted.', '\x00'}, 0x0, 0x0, 0x0) flistxattr(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5, 0x0, 0x401}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @loopback, 0x0, 0x0, 0x80000d7, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 4.82132602s ago: executing program 6 (id=615): syz_mount_image$minix(&(0x7f00000003c0), &(0x7f0000000040)='./bus\x00', 0x280085e, &(0x7f0000000100)=ANY=[], 0xa, 0x229, &(0x7f00000005c0)="$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") truncate(0x0, 0x1bff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x4, 0x200072}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x457) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) io_setup(0x101, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 4.625529929s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x9) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005001a00"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x4000a, 0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, &(0x7f00007d0000)) getpid() r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) 4.270992517s ago: executing program 0 (id=619): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x80002005}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) write$FUSE_LK(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0x0, 0xffffffff, 0x2, r4}}}, 0x28) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x518, 0x4, 0x7}, 0x10) 4.098670187s ago: executing program 1 (id=620): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) 3.260352973s ago: executing program 6 (id=621): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x3, 0xfffffff9]}, @timestamp_prespec={0x44, 0x1c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@broadcast}]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.43864841s ago: executing program 0 (id=622): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0xe0002009}) ppoll(&(0x7f00000001c0)=[{r5, 0x94b1}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000380)={[{@bsdgroups}, {@minixdf}, {@nogrpid}, {@commit={'commit', 0x3d, 0x8}}]}, 0xa, 0x4f6, &(0x7f0000001180)="$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") r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r6, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) recvmmsg(r7, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) 1.253842496s ago: executing program 0 (id=623): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x1}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) msgctl$IPC_SET(r0, 0x1, 0x0) msgctl$IPC_STAT(r0, 0x2, 0x0) 1.236633246s ago: executing program 4 (id=624): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.166596095s ago: executing program 6 (id=625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x240540c6, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r1) 1.166332615s ago: executing program 7 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) dup3(r3, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000002840)={0xff}, &(0x7f0000002880)={0x0, 0x989680}, 0x0) 1.149499555s ago: executing program 0 (id=627): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) r2 = dup(r0) statx(r2, 0x0, 0x100, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x34000811) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) 983.742594ms ago: executing program 6 (id=628): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xf1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000080)={[{0x9, 0x4e00, "5b7f34c229d9c80205"}]}) 3.683081ms ago: executing program 0 (id=629): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x0) syz_emit_ethernet(0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaabba570ed6e01f70011aa036f86e76f317e01278ddd244314037e67e28174e38ff3fa9f1a92a79e1d406b0a8771a38eabd3342ae7838bf0aaedbd039f9a139ce6fc5dc61c9a87d89281b8dc55264d844baf98ba472da5f7253a40320537ee891bb1"], &(0x7f0000000280)={0x0, 0x4, [0xed3, 0x904, 0x24c, 0x75d]}) pipe(&(0x7f00000003c0)) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="6395", 0x2}], 0x1, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xae) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440), 0x0) 3.466071ms ago: executing program 0 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x9) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005001a00"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x4000a, 0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, &(0x7f00007d0000)) getpid() r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) 0s ago: executing program 7 (id=631): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4040014}, 0x4040048) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0) kernel console output (not intermixed with test programs): k [ 62.751920][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.787100][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.797890][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.808238][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.818399][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.827452][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.836853][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.845529][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.854355][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.861982][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.870250][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.879485][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.888334][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.895646][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.904369][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.913317][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.921727][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.928837][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.937708][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.947022][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.955273][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.969763][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.984037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.032873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.046603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.055673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.065732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.076044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.084807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.094054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.102622][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.109685][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.117904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.126983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.135976][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.142669][ T4222] Bluetooth: hci0: command 0x041b tx timeout [ 63.143103][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.149426][ T4222] Bluetooth: hci3: command 0x041b tx timeout [ 63.160245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.168420][ T4222] Bluetooth: hci2: command 0x041b tx timeout [ 63.171336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.176712][ T4222] Bluetooth: hci1: command 0x041b tx timeout [ 63.186904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.199663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.208915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.219325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.227788][ T4222] Bluetooth: hci4: command 0x041b tx timeout [ 63.229322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.242882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.251299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.260019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.268969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.278531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.288065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.297696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.317827][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.330017][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.348110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.356869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.366296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.375458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.385418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.394082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.417085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.428611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.464400][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.474450][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.502532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.512867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.521388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.533622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.552475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.560014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.568483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.577381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.588435][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.659730][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.669552][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.679384][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.688235][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.698263][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.708042][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.717902][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.728479][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.743475][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.751759][ T4177] device veth0_vlan entered promiscuous mode [ 63.790291][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.808498][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.823112][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.831045][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.851878][ T4177] device veth1_vlan entered promiscuous mode [ 63.864395][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.873035][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.880568][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.889433][ T4175] device veth0_vlan entered promiscuous mode [ 63.898976][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.941379][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.953058][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.961965][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.987557][ T4175] device veth1_vlan entered promiscuous mode [ 64.001609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.016410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.028498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.044483][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.057067][ T4174] device veth0_vlan entered promiscuous mode [ 64.081142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.091156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.100563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.109427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.118167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.127208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.135382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.154171][ T4177] device veth0_macvtap entered promiscuous mode [ 64.166951][ T4174] device veth1_vlan entered promiscuous mode [ 64.193020][ T4175] device veth0_macvtap entered promiscuous mode [ 64.201427][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.211039][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.224086][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.234111][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.243761][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.256170][ T4177] device veth1_macvtap entered promiscuous mode [ 64.274738][ T4175] device veth1_macvtap entered promiscuous mode [ 64.293738][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.301977][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.311252][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.319773][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.329349][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.375262][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.383833][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.393088][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.401934][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.411200][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.420352][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.432450][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.441461][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.450657][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.461122][ T4176] device veth0_vlan entered promiscuous mode [ 64.468838][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.479814][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.491396][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.518921][ T4176] device veth1_vlan entered promiscuous mode [ 64.527423][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.536551][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.545769][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.557320][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.567965][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.577239][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.590479][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.601943][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.623395][ T4174] device veth0_macvtap entered promiscuous mode [ 64.631243][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.641462][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.650716][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.660373][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.670257][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.682202][ T4177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.691073][ T4177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.700692][ T4177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.709744][ T4177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.741214][ T4175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.750396][ T4175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.759554][ T4175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.768397][ T4175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.790318][ T4174] device veth1_macvtap entered promiscuous mode [ 64.808505][ T4176] device veth0_macvtap entered promiscuous mode [ 64.821358][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.829997][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.839403][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.849003][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.858226][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.867140][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.875889][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.885159][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.896191][ T4178] device veth0_vlan entered promiscuous mode [ 64.934149][ T4176] device veth1_macvtap entered promiscuous mode [ 64.969526][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.986954][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.997241][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.008381][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.020188][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.038674][ T4178] device veth1_vlan entered promiscuous mode [ 65.051110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.060399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.068781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.078306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.088518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.099593][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.111671][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.121763][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.133503][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.145260][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.168275][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.179167][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.189511][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.200305][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.210296][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.221859][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.232251][ T4220] Bluetooth: hci1: command 0x040f tx timeout [ 65.238616][ T4220] Bluetooth: hci2: command 0x040f tx timeout [ 65.240501][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.245137][ T4220] Bluetooth: hci3: command 0x040f tx timeout [ 65.258280][ T4220] Bluetooth: hci0: command 0x040f tx timeout [ 65.288245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.299301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.303600][ T4220] Bluetooth: hci4: command 0x040f tx timeout [ 65.311637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.323905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.336279][ T4176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.345182][ T4176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.354324][ T4176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.363384][ T4176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.380403][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.391488][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.401725][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.413210][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.423349][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.434120][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.445741][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.460731][ T4174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.471620][ T4174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.480670][ T4174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.489563][ T4174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.515078][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.524267][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.540364][ T4178] device veth0_macvtap entered promiscuous mode [ 65.551923][ T4178] device veth1_macvtap entered promiscuous mode [ 65.578319][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.578603][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.598113][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.603376][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.614917][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.624881][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.639072][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.675956][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.686384][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.712886][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.729944][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.739847][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.750878][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.761019][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.771841][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.781737][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.793641][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.805129][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.812973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.820839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.830363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.866792][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.872922][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.891380][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.902361][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.913486][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.917985][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.923790][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.943897][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.954067][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.965070][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.977327][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.994037][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.002955][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.011763][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.033308][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.034056][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.057064][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.060352][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.074230][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.083255][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.110663][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.190489][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.204725][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.213049][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.221819][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.250050][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.267610][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.297744][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.339258][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.374637][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.387895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.406144][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.421084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.488277][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.538123][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.639947][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.657936][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.380178][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.396277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.449877][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 67.456132][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 67.471467][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 67.477719][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 67.484224][ T4180] Bluetooth: hci4: command 0x0419 tx timeout [ 67.612843][ T4263] loop3: detected capacity change from 0 to 512 [ 67.635525][ T4268] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.751913][ T4263] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4: inode #1: comm syz.3.4: iget: illegal inode # [ 67.791799][ T4263] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 67.808941][ T4263] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.828162][ T4263] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4: inode #1: comm syz.3.4: iget: illegal inode # [ 67.848342][ T4263] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 67.883068][ T4263] EXT4-fs (loop3): 1 orphan inode deleted [ 67.888830][ T4263] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 67.912212][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.915622][ T4279] overlayfs: failed to resolve './file0': -2 [ 68.048635][ T4268] kvm [4267]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 68.090871][ T4268] kvm [4267]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 68.238336][ T4268] kvm [4267]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 69.140986][ T13] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 69.152343][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 69.163889][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 69.206480][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.264686][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.280064][ T4268] kvm [4267]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 69.300709][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.336580][ T13] usb 1-1: config 0 descriptor?? [ 69.383550][ T4265] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.691908][ T4295] loop4: detected capacity change from 0 to 512 [ 69.772267][ T4180] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.781045][ T4295] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.14: inode #1: comm syz.4.14: iget: illegal inode # [ 69.802607][ T4295] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.14: error while reading EA inode 1 err=-117 [ 69.824366][ T4295] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.14: inode #1: comm syz.4.14: iget: illegal inode # [ 69.841670][ T4295] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.14: error while reading EA inode 1 err=-117 [ 69.854693][ T4295] EXT4-fs (loop4): 1 orphan inode deleted [ 69.860572][ T4295] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 69.868768][ T13] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 69.892461][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.915298][ T13] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 69.949161][ T13] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 70.147206][ T4180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.152610][ T1325] usb 4-1: Using ep0 maxpacket: 16 [ 70.173362][ T4180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.199559][ T4180] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 70.224486][ T4180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.263692][ T4180] usb 2-1: config 0 descriptor?? [ 70.319184][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.350542][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.376684][ T1325] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 70.406588][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.423784][ T1325] usb 4-1: config 0 descriptor?? [ 70.744251][ T4180] sony 0003:1345:3008.0002: item fetching failed at offset 2/5 [ 70.762434][ T4180] sony 0003:1345:3008.0002: parse failed [ 70.768139][ T4180] sony: probe of 0003:1345:3008.0002 failed with error -22 [ 70.889747][ T1325] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 70.908544][ T1325] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 70.926813][ T1325] appleir 0003:05AC:8241.0003: item fetching failed at offset 2/5 [ 70.957593][ T1325] appleir 0003:05AC:8241.0003: parse failed [ 70.988243][ T1325] appleir: probe of 0003:05AC:8241.0003 failed with error -22 [ 71.057534][ T1325] usb 2-1: USB disconnect, device number 2 [ 71.136600][ T7] usb 4-1: USB disconnect, device number 2 [ 71.226530][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.233926][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.478418][ T4306] loop2: detected capacity change from 0 to 512 [ 71.489522][ T4183] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 71.615407][ T4306] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.632258][ T4306] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.309743][ T26] audit: type=1326 audit(1734664723.046:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec87306d29 code=0x7ffc0000 [ 73.471411][ T4321] capability: warning: `syz.1.19' uses 32-bit capabilities (legacy support in use) [ 74.579637][ T26] audit: type=1326 audit(1734664723.046:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec87306d29 code=0x7ffc0000 [ 74.702058][ C0] sched: RT throttling activated [ 74.729256][ T1325] usb 1-1: USB disconnect, device number 2 [ 74.785912][ T26] audit: type=1326 audit(1734664723.316:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fec87306d29 code=0x7ffc0000 [ 74.950820][ T26] audit: type=1326 audit(1734664723.316:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec87306d29 code=0x7ffc0000 [ 75.091808][ T26] audit: type=1326 audit(1734664723.316:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec87306d29 code=0x7ffc0000 [ 75.227355][ T26] audit: type=1326 audit(1734664723.976:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fec87306d29 code=0x7ffc0000 [ 75.355240][ T26] audit: type=1326 audit(1734664723.976:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec87306d29 code=0x7ffc0000 [ 75.537827][ T26] audit: type=1326 audit(1734664723.976:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec87306d29 code=0x7ffc0000 [ 76.792136][ T26] audit: type=1326 audit(1734664723.986:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fec87306d29 code=0x7ffc0000 [ 76.870823][ T26] audit: type=1326 audit(1734664723.986:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec87306d29 code=0x7ffc0000 [ 77.170824][ T4334] loop0: detected capacity change from 0 to 512 [ 78.321354][ T4334] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.535615][ T4334] EXT4-fs (loop0): 1 orphan inode deleted [ 78.541393][ T4334] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.611319][ T4334] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.782273][ T1325] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.542346][ T1325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.582171][ T1325] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.682422][ T1325] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.721133][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.251708][ T1325] usb 5-1: SerialNumber: syz [ 81.501485][ T1325] usb 5-1: 0:2 : does not exist [ 81.533369][ T1325] usb 5-1: unit 255 not found! [ 81.787716][ T1325] usb 5-1: USB disconnect, device number 2 [ 82.084717][ T4281] udevd[4281]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.536318][ T23] cfg80211: failed to load regulatory.db [ 82.603999][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.612674][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.628541][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.635777][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.643890][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.650989][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.660180][ T4368] device bridge0 entered promiscuous mode [ 83.073127][ T4386] loop2: detected capacity change from 0 to 256 [ 84.808648][ T4386] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 85.764112][ T4401] loop0: detected capacity change from 0 to 512 [ 85.944924][ T4401] EXT4-fs (loop0): 1 orphan inode deleted [ 85.967735][ T4401] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.054083][ T4401] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.021556][ T4421] loop3: detected capacity change from 0 to 512 [ 88.234567][ T4421] EXT4-fs (loop3): 1 orphan inode deleted [ 88.241617][ T4421] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.276438][ T4421] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.973077][ T4446] loop3: detected capacity change from 0 to 256 [ 90.178680][ T4446] FAT-fs (loop3): Unrecognized mount option "iocharset" or missing value [ 94.836109][ T4488] loop1: detected capacity change from 0 to 512 [ 94.926370][ T4490] loop3: detected capacity change from 0 to 512 [ 95.024447][ T4488] EXT4-fs (loop1): 1 orphan inode deleted [ 95.055319][ T4488] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.112342][ T4488] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.040501][ T4490] EXT4-fs (loop3): 1 orphan inode deleted [ 97.119364][ T4490] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.154159][ T4502] loop2: detected capacity change from 0 to 1024 [ 97.195997][ T4490] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.249903][ T4502] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.525569][ T4543] loop4: detected capacity change from 0 to 256 [ 100.992261][ T4543] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 103.838252][ T4567] loop1: detected capacity change from 0 to 1024 [ 103.897216][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.904672][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.915871][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.923023][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.930381][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.937528][ T4559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.945761][ T4559] device bridge0 entered promiscuous mode [ 104.201980][ T4574] loop4: detected capacity change from 0 to 512 [ 104.209941][ T4567] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.805619][ T4574] EXT4-fs (loop4): 1 orphan inode deleted [ 105.083552][ T4574] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.097342][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.362462][ T4574] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.843280][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.850501][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.859955][ T4613] device bridge0 left promiscuous mode [ 108.209646][ T4620] loop1: detected capacity change from 0 to 256 [ 108.374658][ T4620] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 109.020972][ T4623] loop4: detected capacity change from 0 to 512 [ 109.329002][ T4623] EXT4-fs (loop4): 1 orphan inode deleted [ 109.335733][ T4623] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.402205][ T4623] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.430496][ T4631] loop3: detected capacity change from 0 to 1024 [ 110.832625][ T4631] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.259716][ T4643] loop4: detected capacity change from 0 to 512 [ 111.627576][ T4643] EXT4-fs (loop4): 1 orphan inode deleted [ 111.661122][ T4643] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.751070][ T4643] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.305234][ T4679] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.312657][ T4679] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.820649][ T4685] loop3: detected capacity change from 0 to 512 [ 116.174536][ T4685] EXT4-fs (loop3): 1 orphan inode deleted [ 116.212293][ T4685] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.324836][ T4685] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.701026][ T4699] loop4: detected capacity change from 0 to 1024 [ 118.107758][ T4699] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.242413][ T4708] loop3: detected capacity change from 0 to 512 [ 118.578739][ T4708] EXT4-fs (loop3): 1 orphan inode deleted [ 118.642955][ T4708] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.719612][ T4708] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.658220][ T4736] loop4: detected capacity change from 0 to 2048 [ 123.004579][ T4736] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 123.063223][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.070332][ T4743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.077787][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.084966][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.093273][ T4743] device bridge0 entered promiscuous mode [ 123.509375][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.210398][ T4766] loop3: detected capacity change from 0 to 512 [ 126.419464][ T4766] EXT4-fs (loop3): 1 orphan inode deleted [ 126.444398][ T4766] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.552307][ T4766] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.437229][ T4787] loop4: detected capacity change from 0 to 256 [ 128.188750][ T1325] Bluetooth: hci5: command 0x0409 tx timeout [ 128.733927][ T4787] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 128.752669][ T4782] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.760421][ T4782] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.772582][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.779664][ T4786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.787110][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.794221][ T4786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.802464][ T4786] device bridge0 entered promiscuous mode [ 129.203856][ T4763] chnl_net:caif_netlink_parms(): no params data found [ 129.365685][ T4763] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.379729][ T4763] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.388915][ T4763] device bridge_slave_0 entered promiscuous mode [ 129.405486][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.421371][ T4763] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.432768][ T4763] device bridge_slave_1 entered promiscuous mode [ 129.479489][ T4763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.498750][ T4763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.544938][ T4763] team0: Port device team_slave_0 added [ 129.561178][ T4763] team0: Port device team_slave_1 added [ 129.594202][ T4763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.601358][ T4763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.636906][ T4763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.654624][ T4763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.661782][ T4763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.695804][ T4763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.809889][ T4763] device hsr_slave_0 entered promiscuous mode [ 129.817206][ T4763] device hsr_slave_1 entered promiscuous mode [ 129.834049][ T4763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.841640][ T4763] Cannot create hsr debugfs directory [ 131.702152][ T1107] Bluetooth: hci5: command 0x041b tx timeout [ 132.200280][ T4763] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.243083][ T4763] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.294897][ T4763] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.401529][ T4763] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.445423][ T4815] loop4: detected capacity change from 0 to 1024 [ 132.769693][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.776194][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.823223][ T4815] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.916623][ T4177] syz-executor (4177) used greatest stack depth: 19448 bytes left [ 133.130887][ T4763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.245666][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.256026][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.285916][ T4763] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.422681][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.452444][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.482634][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.489722][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.520540][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.624580][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.654750][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.691537][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.698702][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.762762][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.782462][ T4183] Bluetooth: hci5: command 0x040f tx timeout [ 133.794621][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.878748][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.898454][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.913354][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.945312][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.952470][ T4832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.959880][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.967015][ T4832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.974700][ T4832] device bridge0 entered promiscuous mode [ 133.997363][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.021868][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.121851][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.169339][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.205700][ T4763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.219350][ T4835] loop4: detected capacity change from 0 to 512 [ 134.258242][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.287191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.309503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.426105][ T4835] EXT4-fs (loop4): 1 orphan inode deleted [ 134.442805][ T4835] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.505095][ T4835] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.790262][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.807280][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.949610][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.484263][ T4763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.862649][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 136.004577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.043060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.086236][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.108887][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.134427][ T4763] device veth0_vlan entered promiscuous mode [ 136.150036][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.167324][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.194888][ T4763] device veth1_vlan entered promiscuous mode [ 136.278762][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.295966][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.331104][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.377012][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.407485][ T4763] device veth0_macvtap entered promiscuous mode [ 136.435251][ T4763] device veth1_macvtap entered promiscuous mode [ 136.482611][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.514398][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.562067][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.580060][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.638905][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.711281][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.775697][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.175158][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.621604][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.724656][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.737299][ T4763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.749115][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.775730][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.822460][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.904373][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.978160][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.985463][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.993109][ T4874] device bridge0 left promiscuous mode [ 138.005137][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.012326][ T4874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.019718][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.026827][ T4874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.034937][ T4874] device bridge0 entered promiscuous mode [ 138.109225][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.190138][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.301463][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.562186][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.623172][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.706677][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.790023][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.892556][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.965011][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.052051][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.083592][ T4763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.091448][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.113931][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.308855][ T4763] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.327960][ T4763] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.341617][ T4763] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.353009][ T4763] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.024752][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.063948][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.120919][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.165013][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.195584][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.226775][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.557797][ T4902] loop5: detected capacity change from 0 to 512 [ 140.752464][ T4902] EXT4-fs (loop5): 1 orphan inode deleted [ 140.758254][ T4902] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.783417][ T4902] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.749675][ T4908] kvm [4907]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xff000002ad [ 141.811352][ T4908] kvm [4907]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x1ff00000000 [ 141.847027][ T4908] kvm [4907]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x1ff000000c2 [ 142.268806][ T4934] loop4: detected capacity change from 0 to 256 [ 143.723460][ T4934] FAT-fs (loop4): Unrecognized mount option "iocharset" or missing value [ 145.547140][ T4940] loop3: detected capacity change from 0 to 1024 [ 146.316554][ T4940] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.017522][ T4975] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.024830][ T4975] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.102286][ T4975] device bridge0 left promiscuous mode [ 149.114740][ T4982] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.714049][ T4997] loop5: detected capacity change from 0 to 1024 [ 149.849294][ T4997] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.922730][ T5004] loop1: detected capacity change from 0 to 512 [ 150.033585][ T5004] EXT4-fs (loop1): 1 orphan inode deleted [ 150.065682][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.091185][ T5004] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.244967][ T5004] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.367789][ T4992] loop4: detected capacity change from 0 to 256 [ 150.806466][ T4992] FAT-fs (loop4): Unrecognized mount option "iocharset" or missing value [ 151.205440][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.574800][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.715518][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.790735][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.809729][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.818479][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.746394][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 156.863765][ T13] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 158.878203][ T5093] loop1: detected capacity change from 0 to 512 [ 159.087917][ T5093] EXT4-fs (loop1): 1 orphan inode deleted [ 159.102185][ T5093] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.102306][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.120396][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.137218][ T5093] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.232447][ T5096] device bridge0 left promiscuous mode [ 163.307636][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.315128][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.165484][ T154] device hsr_slave_0 left promiscuous mode [ 164.285144][ T154] device hsr_slave_1 left promiscuous mode [ 164.318294][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.354735][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.374361][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.381788][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.389788][ T154] device bridge_slave_1 left promiscuous mode [ 164.397495][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.451736][ T154] device bridge_slave_0 left promiscuous mode [ 164.497032][ T5157] overlayfs: failed to resolve './file0': -2 [ 164.740179][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.250271][ T154] device veth1_macvtap left promiscuous mode [ 165.273442][ T154] device veth0_macvtap left promiscuous mode [ 165.312820][ T154] device veth1_vlan left promiscuous mode [ 165.318908][ T154] device veth0_vlan left promiscuous mode [ 166.558548][ T5175] loop1: detected capacity change from 0 to 256 [ 166.690626][ T5175] FAT-fs (loop1): Unrecognized mount option "iocharset" or missing value [ 169.525882][ T154] team0 (unregistering): Port device team_slave_1 removed [ 169.584497][ T154] team0 (unregistering): Port device team_slave_0 removed [ 169.638019][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.657911][ T5194] loop1: detected capacity change from 0 to 512 [ 169.676858][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.728583][ T5194] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.790129][ T154] bond0 (unregistering): Released all slaves [ 169.790977][ T5194] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.022222][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 171.464075][ T5192] loop4: detected capacity change from 0 to 40427 [ 171.843229][ T5192] ======================================================= [ 171.843229][ T5192] WARNING: The mand mount option has been deprecated and [ 171.843229][ T5192] and is ignored by this kernel. Remove the mand [ 171.843229][ T5192] option from the mount to silence this warning. [ 171.843229][ T5192] ======================================================= [ 172.109844][ T4797] Bluetooth: hci4: command 0x041b tx timeout [ 172.155888][ T5192] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 172.168162][ T5192] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 172.171446][ T5178] chnl_net:caif_netlink_parms(): no params data found [ 172.222317][ T5192] F2FS-fs (loop4): invalid crc value [ 172.306700][ T5192] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.591720][ T5192] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 172.609872][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.629644][ T5192] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.650256][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.677869][ T5178] device bridge_slave_0 entered promiscuous mode [ 172.737964][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.766845][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.784418][ T5178] device bridge_slave_1 entered promiscuous mode [ 172.823455][ T5241] kvm: emulating exchange as write [ 172.986540][ T5178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.018558][ T5178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.218414][ T5178] team0: Port device team_slave_0 added [ 173.268782][ T5178] team0: Port device team_slave_1 added [ 173.442748][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.450470][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.612409][ T5178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.666661][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.688344][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.942021][ T5178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.039272][ T5269] loop4: detected capacity change from 0 to 256 [ 174.182496][ T2306] Bluetooth: hci4: command 0x040f tx timeout [ 175.723527][ T5269] FAT-fs (loop4): Unrecognized mount option "iocharset" or missing value [ 176.425268][ T4797] Bluetooth: hci4: command 0x0419 tx timeout [ 177.005416][ T5178] device hsr_slave_0 entered promiscuous mode [ 177.104749][ T5178] device hsr_slave_1 entered promiscuous mode [ 177.736825][ T5178] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.835157][ T5178] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 177.894057][ T5178] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 177.931129][ T5178] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 178.289781][ T5178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.367100][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.423011][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.495699][ T5178] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.597403][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.622875][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.672310][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.679438][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.733944][ T5279] chnl_net:caif_netlink_parms(): no params data found [ 178.780988][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.795575][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.824565][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.852438][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.859554][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.900928][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.940264][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.989302][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.015598][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.035171][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.213732][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.231382][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.257360][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.330945][ T5301] overlayfs: failed to resolve './file0': -2 [ 179.447270][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.931374][ T2306] Bluetooth: hci5: command 0x0409 tx timeout [ 179.968152][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.983256][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.995442][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.207011][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.262228][ T5279] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.300724][ T5279] device bridge_slave_0 entered promiscuous mode [ 180.346024][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.378329][ T5279] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.413545][ T5279] device bridge_slave_1 entered promiscuous mode [ 180.494012][ T5279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.540184][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.555643][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.581452][ T5279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.607679][ T5178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.728563][ T5279] team0: Port device team_slave_0 added [ 180.764808][ T5279] team0: Port device team_slave_1 added [ 180.866080][ T5279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.900153][ T5279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.012148][ T5279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.071894][ T5279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.099627][ T5279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.180840][ T5279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.265981][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.348446][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.370784][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.441309][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.488228][ T5279] device hsr_slave_0 entered promiscuous mode [ 181.505115][ T5279] device hsr_slave_1 entered promiscuous mode [ 181.557541][ T5279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.605317][ T5279] Cannot create hsr debugfs directory [ 181.651616][ T5178] device veth0_vlan entered promiscuous mode [ 181.738038][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.802841][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.832714][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.879036][ T5178] device veth1_vlan entered promiscuous mode [ 181.899633][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.920732][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.954041][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.985905][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.022641][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 182.146417][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.164278][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.195463][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.252544][ T5178] device veth0_macvtap entered promiscuous mode [ 182.365522][ T5178] device veth1_macvtap entered promiscuous mode [ 182.453488][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.543351][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.591015][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.617619][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.637877][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.658750][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.685130][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.700950][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.738653][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.757791][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.795792][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.835153][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.862108][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.885238][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.916331][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.932146][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.963837][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.994591][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.027011][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.052134][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.091348][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.147453][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.161379][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.178314][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.197680][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.224133][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.243108][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.285492][ T5178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.316048][ T5178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.345709][ T5178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.362955][ T5178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.678385][ T5279] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 183.704478][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.724957][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.776966][ T5279] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.802939][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.824526][ T5279] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.898518][ T5279] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.919181][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.935468][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.970523][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.102697][ T2306] Bluetooth: hci5: command 0x040f tx timeout [ 184.479530][ T5383] loop4: detected capacity change from 0 to 256 [ 185.942150][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 185.965218][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 186.005523][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 186.163752][ T5383] FAT-fs (loop4): Unrecognized mount option "iocharset" or missing value [ 186.183842][ T2306] Bluetooth: hci5: command 0x0419 tx timeout [ 187.012334][ T5393] loop1: detected capacity change from 0 to 512 [ 187.071030][ T5279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.157858][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.202688][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.244899][ T5279] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.343020][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.372569][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.398460][ T5393] EXT4-fs (loop1): 1 orphan inode deleted [ 187.422066][ T5393] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.445855][ T4980] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.453020][ T4980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.467794][ T5393] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.500483][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.741042][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.032158][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.078359][ T4980] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.085568][ T4980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.176511][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.260688][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.313424][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.325588][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.336027][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.349652][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.359874][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.370096][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.380120][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.412581][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.441020][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.545892][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.240270][ T154] device hsr_slave_0 left promiscuous mode [ 189.271816][ T154] device hsr_slave_1 left promiscuous mode [ 189.334012][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.341559][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.374474][ T5451] loop1: detected capacity change from 0 to 512 [ 189.386744][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.409670][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.453097][ T154] device bridge_slave_1 left promiscuous mode [ 189.492427][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.492530][ T5451] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.543549][ T154] device bridge_slave_0 left promiscuous mode [ 189.549790][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.588710][ T5451] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.277: bad orphan inode 16 [ 189.609262][ T154] device veth1_macvtap left promiscuous mode [ 189.615870][ T154] device veth0_macvtap left promiscuous mode [ 189.622879][ T154] device veth1_vlan left promiscuous mode [ 189.629830][ T154] device veth0_vlan left promiscuous mode [ 189.717201][ T5451] ext4_test_bit(bit=15, block=4) = 0 [ 189.727077][ T5451] EXT4-fs (loop1): 1 orphan inode deleted [ 189.749527][ T5451] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,nodelalloc,bsdgroups,noload,block_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 189.890416][ T5464] loop4: detected capacity change from 0 to 256 [ 189.946156][ T5464] FAT-fs (loop4): Unrecognized mount option "iocharset" or missing value [ 190.966542][ T5485] loop1: detected capacity change from 0 to 512 [ 191.090367][ T5485] EXT4-fs (loop1): 1 orphan inode deleted [ 191.106116][ T5485] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.152794][ T154] team0 (unregistering): Port device team_slave_1 removed [ 191.211928][ T5485] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.247173][ T154] team0 (unregistering): Port device team_slave_0 removed [ 191.379074][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.472601][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.145611][ T154] bond0 (unregistering): Released all slaves [ 192.241881][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.254473][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.284744][ T5483] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.292068][ T5483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.300127][ T5483] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.307623][ T5483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.320950][ T5483] device bridge0 entered promiscuous mode [ 192.342124][ T5279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.163260][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.173467][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.432139][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.481971][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.530810][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.873855][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.071796][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.124049][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.252220][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.126661][ T5279] device veth0_vlan entered promiscuous mode [ 195.237827][ T5279] device veth1_vlan entered promiscuous mode [ 195.603788][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.710241][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.806513][ T5279] device veth0_macvtap entered promiscuous mode [ 196.172756][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.657058][ T5279] device veth1_macvtap entered promiscuous mode [ 196.808122][ T5279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.843338][ T5557] loop1: detected capacity change from 0 to 512 [ 196.880152][ T5279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.991398][ T5279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.223084][ T5279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.417713][ T5279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.664207][ T5279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.674161][ T5279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.712348][ T5279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.764526][ T5279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.814348][ T5279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.856448][ T5279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.254752][ T5279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.297680][ T5557] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.344789][ T5557] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.372239][ T5279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.457376][ T5279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.468171][ T5279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.478126][ T5279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.488678][ T5279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.498625][ T5279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.510629][ T5279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.520591][ T5279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.560372][ T5279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.609702][ T5279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.626653][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.645634][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.069452][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.135968][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.255724][ T5279] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.282399][ T5279] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.291226][ T5279] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.318494][ T5279] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.695469][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.808934][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.845729][ T4980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.880351][ T5597] loop1: detected capacity change from 0 to 512 [ 199.910151][ T4980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.912451][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.018387][ T5597] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.303: inode #1: comm syz.1.303: iget: illegal inode # [ 200.020111][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.054203][ T5597] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.303: error while reading EA inode 1 err=-117 [ 200.099718][ T5597] EXT4-fs (loop1): 1 orphan inode deleted [ 200.112305][ T5597] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,min_batch_time=0x00000000000000dd,minixdf,max_batch_time=0x0000000000000002,nodiscard,data_err=abort,,errors=continue. Quota mode: none. [ 200.894175][ T5627] loop7: detected capacity change from 0 to 512 [ 201.044758][ T5629] loop6: detected capacity change from 0 to 1024 [ 201.106121][ T5627] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.134450][ T5627] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.286302][ T5629] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 203.157570][ T5673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.319'. [ 203.229917][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 203.418775][ T5675] loop7: detected capacity change from 0 to 8192 [ 203.578497][ T5675] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.588638][ T5279] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 204.675089][ T5279] FAT-fs (loop7): Filesystem has been set read-only [ 204.679105][ T5700] loop6: detected capacity change from 0 to 512 [ 204.712309][ T4799] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 204.910450][ T5700] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.992225][ T5700] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.082440][ T4799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.098893][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.132086][ T4799] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 205.141154][ T4799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.386444][ T4799] usb 5-1: config 0 descriptor?? [ 205.825280][ T5728] loop7: detected capacity change from 0 to 1024 [ 206.475213][ T5728] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 206.484380][ T5728] EXT4-fs (loop7): orphan cleanup on readonly fs [ 206.491385][ T5728] __quota_error: 11 callbacks suppressed [ 206.491399][ T5728] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 206.494755][ T4799] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 206.497932][ T5728] EXT4-fs warning (device loop7): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 206.511053][ T4799] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input9 [ 206.514607][ T5728] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 206.529622][ T5728] EXT4-fs (loop7): 1 truncate cleaned up [ 206.529649][ T5728] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.630531][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.768325][ T4799] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 206.792725][ T4799] usb 5-1: USB disconnect, device number 3 [ 206.926076][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.117811][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.346374][ T5750] loop6: detected capacity change from 0 to 1024 [ 207.805476][ T5750] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.995597][ T5776] loop1: detected capacity change from 0 to 256 [ 208.128953][ T5776] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 208.779896][ T5796] loop4: detected capacity change from 0 to 512 [ 209.688318][ T5796] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.723269][ T5796] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.750875][ T5818] loop7: detected capacity change from 0 to 2048 [ 212.274952][ T5818] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.285988][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.293511][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.798942][ T5849] loop6: detected capacity change from 0 to 1024 [ 213.922762][ T5849] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.373216][ T5863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.428175][ T5871] netlink: 96 bytes leftover after parsing attributes in process `syz.4.355'. [ 215.546785][ T5873] Zero length message leads to an empty skb [ 215.569751][ T5865] loop7: detected capacity change from 0 to 8192 [ 215.654873][ T5865] loop7: p1 p3 [ 215.660853][ T5865] loop7: p1 size 8388608 extends beyond EOD, truncated [ 215.822713][ T5865] loop7: p3 size 589824 extends beyond EOD, truncated [ 216.711960][ T5336] udevd[5336]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 216.752547][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 216.815538][ T154] device hsr_slave_0 left promiscuous mode [ 216.852399][ T154] device hsr_slave_1 left promiscuous mode [ 216.898097][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.910859][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.951403][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.011045][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.022389][ T154] device bridge_slave_1 left promiscuous mode [ 217.028648][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.122942][ T154] device bridge_slave_0 left promiscuous mode [ 217.129206][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.223552][ T5912] loop4: detected capacity change from 0 to 256 [ 217.355113][ T5908] loop6: detected capacity change from 0 to 1024 [ 218.265145][ T154] device veth1_macvtap left promiscuous mode [ 218.271245][ T154] device veth0_macvtap left promiscuous mode [ 218.350534][ T5912] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 218.663920][ T5908] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.710953][ T154] device veth1_vlan left promiscuous mode [ 218.757838][ T154] device veth0_vlan left promiscuous mode [ 219.808841][ T23] hid-generic 0004:0008:0001.0006: item fetching failed at offset 0/2 [ 219.837551][ T23] hid-generic: probe of 0004:0008:0001.0006 failed with error -22 [ 221.017359][ T154] team0 (unregistering): Port device team_slave_1 removed [ 221.083438][ T154] team0 (unregistering): Port device team_slave_0 removed [ 221.117199][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.177300][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.192712][ T2306] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 221.401383][ T154] bond0 (unregistering): Released all slaves [ 221.419872][ T23] Bluetooth: hci2: command 0x1003 tx timeout [ 221.426119][ T4193] Bluetooth: hci2: sending frame failed (-49) [ 221.576201][ T5949] process 'syz.6.373' launched './file1' with NULL argv: empty string added [ 221.682158][ T2306] usb 1-1: Using ep0 maxpacket: 32 [ 222.398181][ T2306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 222.417056][ T2306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 222.428587][ T2306] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 222.437929][ T2306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.478366][ T2306] usb 1-1: config 0 descriptor?? [ 222.502449][ T5939] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 222.528305][ T2306] hub 1-1:0.0: USB hub found [ 222.565461][ T5959] loop1: detected capacity change from 0 to 16 [ 222.649689][ T5959] erofs: (device loop1): mounted with root inode @ nid 36. [ 222.812312][ T2306] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 223.117505][ T2306] usbhid 1-1:0.0: can't add hid device: -71 [ 223.133660][ T2306] usbhid: probe of 1-1:0.0 failed with error -71 [ 223.182948][ T2306] usb 1-1: USB disconnect, device number 3 [ 223.391591][ T5959] usb usb8: usbfs: process 5959 (syz.1.377) did not claim interface 0 before use [ 223.412897][ T5981] loop6: detected capacity change from 0 to 512 [ 223.450567][ T5981] EXT4-fs (loop6): 1 orphan inode deleted [ 223.464647][ T5985] loop4: detected capacity change from 0 to 256 [ 223.468127][ T2306] Bluetooth: hci2: command 0x1001 tx timeout [ 223.482204][ T5981] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.490269][ T4193] Bluetooth: hci2: sending frame failed (-49) [ 223.525798][ T5981] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.560933][ T5985] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 224.850012][ T6008] loop4: detected capacity change from 0 to 512 [ 224.912258][ T6008] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 224.956847][ T6008] EXT4-fs (loop4): 1 truncate cleaned up [ 224.962636][ T6008] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 225.206350][ T6021] loop6: detected capacity change from 0 to 256 [ 226.998636][ T2306] Bluetooth: hci2: command 0x1009 tx timeout [ 227.130059][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.140975][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.149513][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.181533][ T6026] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 229.301949][ T6043] loop1: detected capacity change from 0 to 512 [ 230.400004][ T6059] loop6: detected capacity change from 0 to 256 [ 230.409709][ T6043] EXT4-fs (loop1): 1 orphan inode deleted [ 230.433240][ T6043] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 230.494986][ T6043] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.511396][ T6063] loop7: detected capacity change from 0 to 512 [ 230.630251][ T6059] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 230.657398][ T6063] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 230.657398][ T6063] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 230.657398][ T6063] [ 230.709536][ T6063] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 230.709536][ T6063] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 230.709536][ T6063] [ 230.732227][ T6063] EXT4-fs (loop7): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 232.405250][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.844505][ T6092] loop1: detected capacity change from 0 to 16 [ 232.901843][ T6093] netlink: 80 bytes leftover after parsing attributes in process `syz.4.402'. [ 233.687694][ T6118] loop1: detected capacity change from 0 to 512 [ 233.875069][ T6124] loop6: detected capacity change from 0 to 512 [ 233.907747][ T6118] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.408: inode #1: comm syz.1.408: iget: illegal inode # [ 233.913764][ T6118] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.408: error while reading EA inode 1 err=-117 [ 233.914282][ T6118] EXT4-fs (loop1): 1 orphan inode deleted [ 233.914307][ T6118] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,min_batch_time=0x00000000000000dd,minixdf,max_batch_time=0x0000000000000002,nodiscard,data_err=abort,,errors=continue. Quota mode: none. [ 234.027021][ T6124] EXT4-fs (loop6): 1 orphan inode deleted [ 234.027051][ T6124] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.027155][ T6124] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.619810][ T6145] loop4: detected capacity change from 0 to 16 [ 234.776895][ T6145] erofs: (device loop4): mounted with root inode @ nid 36. [ 235.135122][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 235.144631][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 235.153911][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 235.163060][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 311295 of nid 36 [ 235.173130][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 235.182266][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 235.192311][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 235.202191][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 235.211870][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 235.221073][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 235.230526][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 235.239670][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 235.249824][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 235.258957][ T6152] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 235.268518][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 235.277695][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36 [ 235.287784][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 235.296907][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 249855 of nid 36 [ 235.306981][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 235.316108][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 245759 of nid 36 [ 235.326326][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 235.335473][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 241663 of nid 36 [ 235.345522][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 235.354638][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 235.363819][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 233471 of nid 36 [ 235.374040][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 235.383156][ T6152] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 54 of nid 36 [ 235.392716][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 235.401822][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 225279 of nid 36 [ 235.411874][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 235.420990][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 235.430343][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 235.439486][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 235.448624][ T6152] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 235.457975][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 235.467112][ T6152] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 47 of nid 36 [ 235.476571][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 235.485755][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 235.494829][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 235.505011][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 235.514476][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 235.523620][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 235.532848][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 235.542135][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36 [ 235.552199][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 235.561246][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 235.571359][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 235.580519][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 235.590608][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 235.599712][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 167935 of nid 36 [ 235.610465][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 235.619721][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 235.628854][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 159743 of nid 36 [ 235.638955][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 235.648127][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 235.657999][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 147455 of nid 36 [ 235.668219][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 235.677324][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 143359 of nid 36 [ 235.687428][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 235.697350][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 28 @ nid 36 [ 235.707217][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 114687 of nid 36 [ 235.717286][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 235.726386][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 235.735504][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 235.744639][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 102399 of nid 36 [ 235.754725][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 235.763945][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 235.773058][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 235.782382][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 235.791452][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 235.800872][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 235.810598][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 11 @ nid 36 [ 235.819713][ T6152] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 235.829717][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 235.838924][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 235.847984][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 36 [ 235.857007][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 235.866189][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 36 [ 235.875320][ T6152] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 235.884714][ T6152] attempt to access beyond end of device [ 235.884714][ T6152] loop4: rw=524288, want=1049280, limit=16 [ 235.896213][ T6152] attempt to access beyond end of device [ 235.896213][ T6152] loop4: rw=524288, want=6536, limit=16 [ 235.907412][ T6152] attempt to access beyond end of device [ 235.907412][ T6152] loop4: rw=524288, want=34359736344, limit=16 [ 235.919759][ T6152] attempt to access beyond end of device [ 235.919759][ T6152] loop4: rw=524288, want=736, limit=16 [ 235.931049][ T6152] attempt to access beyond end of device [ 235.931049][ T6152] loop4: rw=524288, want=536576872, limit=16 [ 235.942711][ T6152] attempt to access beyond end of device [ 235.942711][ T6152] loop4: rw=524288, want=13478624040, limit=16 [ 235.954496][ T6152] attempt to access beyond end of device [ 235.954496][ T6152] loop4: rw=524288, want=790400, limit=16 [ 235.966160][ T6152] attempt to access beyond end of device [ 235.966160][ T6152] loop4: rw=524288, want=88, limit=16 [ 235.977127][ T6152] attempt to access beyond end of device [ 235.977127][ T6152] loop4: rw=524288, want=1183616, limit=16 [ 235.988562][ T6152] attempt to access beyond end of device [ 235.988562][ T6152] loop4: rw=524288, want=312, limit=16 [ 236.318877][ T6172] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 236.845733][ T6177] loop1: detected capacity change from 0 to 512 [ 237.704771][ T6177] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 237.772233][ T6177] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.092006][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 238.101138][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 238.110270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 238.119470][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 238.128459][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 238.137570][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 238.146557][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 238.155656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 238.164731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 238.215930][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 239.651023][ T6216] loop7: detected capacity change from 0 to 1024 [ 239.919591][ T6216] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.118386][ T6228] loop6: detected capacity change from 0 to 256 [ 241.180037][ T6247] loop6: detected capacity change from 0 to 256 [ 242.360516][ T6265] loop1: detected capacity change from 0 to 512 [ 242.402570][ T6268] syz.0.439 uses obsolete (PF_INET,SOCK_PACKET) [ 242.502912][ T6274] loop6: detected capacity change from 0 to 256 [ 242.560413][ T6265] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 242.606507][ T6279] loop4: detected capacity change from 0 to 1024 [ 242.623954][ T6265] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.635508][ T6274] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 242.900412][ T6279] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.900071][ T6303] netlink: 36 bytes leftover after parsing attributes in process `syz.6.443'. [ 245.499792][ T6333] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 245.532393][ T6333] netlink: 'syz.4.453': attribute type 2 has an invalid length. [ 245.580589][ T6338] loop1: detected capacity change from 0 to 512 [ 245.756462][ T6338] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.808377][ T6338] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.663228][ T26] audit: type=1326 audit(1734664896.386:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba787f2d29 code=0x7fc00000 [ 249.017935][ T6392] loop7: detected capacity change from 0 to 1024 [ 249.283584][ T6392] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.278014][ T6423] loop6: detected capacity change from 0 to 512 [ 250.476372][ T6423] EXT4-fs (loop6): 1 orphan inode deleted [ 250.477060][ T13] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 250.530461][ T6423] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 250.645674][ T6423] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.722164][ T13] usb 1-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice=6b.64 [ 251.737337][ T6454] loop7: detected capacity change from 0 to 512 [ 251.754237][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.783009][ T13] usb 1-1: Product: syz [ 251.810465][ T13] usb 1-1: Manufacturer: syz [ 251.828323][ T13] usb 1-1: SerialNumber: syz [ 251.906866][ T6454] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.002903][ T6454] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.280886][ T13] usb 1-1: USB disconnect, device number 4 [ 252.600178][ T5336] udevd[5336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.737500][ T4287] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 252.913253][ T6491] loop7: detected capacity change from 0 to 1024 [ 254.012344][ T4287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.107428][ T6491] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.118437][ T4287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.301387][ T6508] loop4: detected capacity change from 0 to 512 [ 254.352394][ T4287] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.384304][ T4287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.464539][ T6508] EXT4-fs (loop4): 1 orphan inode deleted [ 254.470709][ T4287] usb 2-1: Product: syz [ 254.472164][ T6508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.481924][ T4287] usb 2-1: Manufacturer: syz [ 254.830858][ T6508] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.262049][ T4287] usb 2-1: SerialNumber: syz [ 255.432301][ T4287] usb 2-1: can't set config #1, error -71 [ 255.453751][ T4287] usb 2-1: USB disconnect, device number 3 [ 255.557144][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.563595][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.934391][ T6549] loop4: detected capacity change from 0 to 512 [ 259.177043][ T6549] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.196191][ T6549] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.095313][ T6583] loop7: detected capacity change from 0 to 512 [ 262.410016][ T6576] loop6: detected capacity change from 0 to 32768 [ 262.479597][ T6583] EXT4-fs (loop7): 1 orphan inode deleted [ 262.485754][ T6576] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.503 (6576) [ 262.504778][ T6583] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.545999][ T6583] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.786235][ T26] audit: type=1326 audit(1734664912.526:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e3b0d29 code=0x7ffc0000 [ 263.277336][ T26] audit: type=1326 audit(1734664913.016:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157e3b0d29 code=0x7ffc0000 [ 263.299572][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.536708][ T26] audit: type=1326 audit(1734664913.016:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e3b0d29 code=0x7ffc0000 [ 263.635403][ T26] audit: type=1326 audit(1734664913.016:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e3b0d29 code=0x7ffc0000 [ 263.701939][ T6613] loop1: detected capacity change from 0 to 4096 [ 263.708961][ T26] audit: type=1326 audit(1734664913.246:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157e3b0d29 code=0x7ffc0000 [ 263.758599][ T26] audit: type=1326 audit(1734664913.246:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e3b0d29 code=0x7ffc0000 [ 263.782870][ T6576] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 264.042528][ T6576] BTRFS info (device loop6): force zlib compression, level 3 [ 264.051885][ T6613] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 264.063930][ T6576] BTRFS info (device loop6): max_inline at 4096 [ 265.033464][ T6576] BTRFS info (device loop6): using free space tree [ 265.099536][ T26] audit: type=1326 audit(1734664913.246:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e3b0d29 code=0x7ffc0000 [ 265.126792][ T6576] BTRFS info (device loop6): has skinny extents [ 265.133908][ T26] audit: type=1326 audit(1734664913.246:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f157e3b0d29 code=0x7ffc0000 [ 265.316333][ T6648] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 265.328372][ T26] audit: type=1326 audit(1734664913.246:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e3b0d29 code=0x7ffc0000 [ 265.404666][ T26] audit: type=1326 audit(1734664913.246:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e3b0d29 code=0x7ffc0000 [ 265.498829][ T6576] BTRFS error (device loop6): open_ctree failed [ 266.718097][ T6670] loop7: detected capacity change from 0 to 1024 [ 266.816646][ T6675] loop4: detected capacity change from 0 to 512 [ 266.992186][ T6670] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.751632][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 268.751652][ T26] audit: type=1804 audit(1734664917.366:39): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.518" name="/newroot/36/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 268.833205][ T6675] EXT4-fs (loop4): 1 orphan inode deleted [ 269.049689][ T6675] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 269.172306][ T6675] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.306462][ T2306] libceph: connect (1)[c::]:6789 error -101 [ 271.322858][ T2306] libceph: mon0 (1)[c::]:6789 connect error [ 271.336139][ T6714] ceph: No mds server is up or the cluster is laggy [ 271.339676][ T2306] libceph: connect (1)[c::]:6789 error -101 [ 271.360064][ T2306] libceph: mon0 (1)[c::]:6789 connect error [ 271.786770][ T6731] loop4: detected capacity change from 0 to 64 [ 272.107492][ T6715] loop1: detected capacity change from 0 to 32768 [ 272.566837][ T6715] [ 272.566837][ T6715] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.566837][ T6715] [ 272.644105][ T6743] loop6: detected capacity change from 0 to 128 [ 272.794964][ T6715] ERROR: (device loop1): diWrite: ixpxd invalid [ 272.794964][ T6715] [ 272.837221][ T6715] ERROR: (device loop1): txCommit: [ 272.837221][ T6715] [ 273.042505][ T26] audit: type=1800 audit(1734664922.776:40): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.525" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 273.053062][ T6756] loop7: detected capacity change from 0 to 128 [ 273.229047][ T4176] [ 273.229047][ T4176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.229047][ T4176] [ 273.276629][ T4176] [ 273.276629][ T4176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.276629][ T4176] [ 274.662165][ T4797] Bluetooth: hci4: command 0x0406 tx timeout [ 274.860269][ T6777] loop7: detected capacity change from 0 to 256 [ 275.437099][ T6785] loop4: detected capacity change from 0 to 4096 [ 279.052320][ T6785] ntfs3: loop4: try to read out of volume at offset 0x3fffffc7000 [ 279.257337][ T4797] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 280.109922][ T4797] Bluetooth: hci5: Injecting HCI hardware error event [ 280.119200][ T4193] Bluetooth: hci5: hardware error 0x00 [ 280.317057][ T26] audit: type=1326 audit(1734664930.026:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba787f2d29 code=0x7ffc0000 [ 280.339223][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.737825][ T26] audit: type=1326 audit(1734664930.226:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.6.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8d165d29 code=0x7fc00000 [ 280.796273][ T26] audit: type=1326 audit(1734664930.256:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba787f2d29 code=0x7ffc0000 [ 280.927770][ T26] audit: type=1326 audit(1734664930.276:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba787f2d29 code=0x7ffc0000 [ 281.006741][ T6856] loop4: detected capacity change from 0 to 512 [ 281.052067][ T26] audit: type=1326 audit(1734664930.276:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba787f2d29 code=0x7ffc0000 [ 281.137742][ T6864] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 282.007697][ T6856] EXT4-fs (loop4): 1 orphan inode deleted [ 282.042627][ T6856] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.068655][ T6856] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.101744][ T6875] binder: 6868:6875 ioctl c0306201 20000680 returned -14 [ 287.498659][ T6942] loop7: detected capacity change from 0 to 512 [ 287.922474][ T6654] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 287.965806][ T6942] EXT4-fs (loop7): 1 orphan inode deleted [ 288.128964][ T6942] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.299535][ T6942] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.353890][ T6654] usb 5-1: Using ep0 maxpacket: 16 [ 288.948451][ T6654] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 288.965939][ T6654] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 289.045122][ T6654] usb 5-1: Product: syz [ 289.063403][ T6654] usb 5-1: Manufacturer: syz [ 289.078695][ T6654] usb 5-1: SerialNumber: syz [ 289.116959][ T6654] usb 5-1: config 0 descriptor?? [ 290.079566][ T6654] usb 5-1: USB disconnect, device number 4 [ 290.217235][ T6975] device pim6reg1 entered promiscuous mode [ 292.582073][ T6655] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 292.983465][ T6655] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 293.004681][ T6655] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.057879][ T6655] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.119073][ T6655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.159367][ T7018] loop6: detected capacity change from 0 to 512 [ 294.067549][ T6655] usb 2-1: config 0 descriptor?? [ 294.085554][ T7023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.097318][ T6996] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 294.112652][ T4797] Bluetooth: hci4: command 0x0406 tx timeout [ 294.145130][ T6655] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 294.183567][ T7018] EXT4-fs (loop6): 1 orphan inode deleted [ 294.200800][ T7018] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 294.259423][ T7018] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.059702][ T7054] loop9: detected capacity change from 0 to 6 [ 295.106819][ T7054] Dev loop9: unable to read RDB block 6 [ 295.112820][ T7054] loop9: unable to read partition table [ 295.119376][ T7054] loop9: partition table beyond EOD, truncated [ 295.125726][ T7054] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 295.125726][ T7054] ) failed (rc=-5) [ 295.594756][ T7066] loop6: detected capacity change from 0 to 1024 [ 295.606761][ T7054] Dev loop9: unable to read RDB block 6 [ 295.613306][ T7054] loop9: unable to read partition table [ 295.619258][ T7054] loop9: partition table beyond EOD, truncated [ 295.625567][ T7054] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 295.625567][ T7054] ) failed (rc=-5) [ 297.838708][ T150] block nbd0: Attempted send on invalid socket [ 297.846714][ T150] blk_update_request: I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.859595][ T7081] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 298.016969][ T6654] usb 2-1: USB disconnect, device number 4 [ 298.169608][ T7088] loop1: detected capacity change from 0 to 256 [ 298.453922][ T7088] exfat: Bad value for 'uid' [ 300.416184][ T1276] hfsplus: b-tree write err: -5, ino 4 [ 300.937624][ T7101] loop4: detected capacity change from 0 to 512 [ 301.166234][ T7101] EXT4-fs (loop4): 1 orphan inode deleted [ 301.228074][ T7101] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 301.260921][ T7120] loop6: detected capacity change from 0 to 64 [ 301.322247][ T7101] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.779504][ T7134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.131368][ T7134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.509378][ T7134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.533307][ T7134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.611279][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 305.603722][ T7134] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.728615][ T7134] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.822418][ T6654] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 305.909335][ T7134] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.945212][ T7187] [ 305.947605][ T7187] ====================================================== [ 305.954637][ T7187] WARNING: possible circular locking dependency detected [ 305.961715][ T7187] 5.15.175-syzkaller #0 Not tainted [ 305.966933][ T7187] ------------------------------------------------------ [ 305.968545][ T7134] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.973954][ T7187] syz.7.631/7187 is trying to acquire lock: [ 305.973969][ T7187] ffff888077874c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 305.999165][ T7187] [ 305.999165][ T7187] but task is already holding lock: [ 306.006538][ T7187] ffffffff8decdaa8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 306.016232][ T7187] [ 306.016232][ T7187] which lock already depends on the new lock. [ 306.016232][ T7187] [ 306.026665][ T7187] [ 306.026665][ T7187] the existing dependency chain (in reverse order) is: [ 306.035690][ T7187] [ 306.035690][ T7187] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 306.043797][ T7187] lock_acquire+0x1db/0x4f0 [ 306.048916][ T7187] __mutex_lock_common+0x1da/0x25a0 [ 306.054659][ T7187] mutex_lock_nested+0x17/0x20 [ 306.059969][ T7187] rfkill_register+0x30/0x880 [ 306.065198][ T7187] hci_register_dev+0x4dd/0xa50 [ 306.070595][ T7187] vhci_create_device+0x310/0x590 [ 306.076166][ T7187] vhci_write+0x382/0x430 [ 306.081041][ T7187] vfs_write+0xacd/0xe50 [ 306.085825][ T7187] ksys_write+0x1a2/0x2c0 [ 306.090704][ T7187] do_syscall_64+0x3b/0xb0 [ 306.095663][ T7187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.102099][ T7187] [ 306.102099][ T7187] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 306.109953][ T7187] lock_acquire+0x1db/0x4f0 [ 306.115004][ T7187] __mutex_lock_common+0x1da/0x25a0 [ 306.120745][ T7187] mutex_lock_nested+0x17/0x20 [ 306.126136][ T7187] vhci_send_frame+0x8a/0xf0 [ 306.131264][ T7187] hci_send_frame+0x1af/0x2f0 [ 306.136474][ T7187] hci_tx_work+0xb2e/0x1a30 [ 306.141506][ T7187] process_one_work+0x8a1/0x10c0 [ 306.147000][ T7187] worker_thread+0xaca/0x1280 [ 306.152216][ T7187] kthread+0x3f6/0x4f0 [ 306.156837][ T7187] ret_from_fork+0x1f/0x30 [ 306.161788][ T7187] [ 306.161788][ T7187] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 306.171017][ T7187] lock_acquire+0x1db/0x4f0 [ 306.176056][ T7187] __flush_work+0xeb/0x1a0 [ 306.181009][ T7187] hci_dev_do_close+0x20a/0x1070 [ 306.186478][ T7187] hci_unregister_dev+0x2d7/0x580 [ 306.192037][ T7187] vhci_release+0x73/0xc0 [ 306.196904][ T7187] __fput+0x3fe/0x8e0 [ 306.201427][ T7187] task_work_run+0x129/0x1a0 [ 306.206556][ T7187] do_exit+0x6a3/0x2480 [ 306.211247][ T7187] do_group_exit+0x144/0x310 [ 306.216377][ T7187] get_signal+0xc66/0x14e0 [ 306.221336][ T7187] arch_do_signal_or_restart+0xc3/0x1890 [ 306.227591][ T7187] exit_to_user_mode_loop+0x97/0x130 [ 306.233425][ T7187] exit_to_user_mode_prepare+0xb1/0x140 [ 306.239529][ T7187] syscall_exit_to_user_mode+0x5d/0x240 [ 306.245619][ T7187] do_syscall_64+0x47/0xb0 [ 306.250574][ T7187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.257014][ T7187] [ 306.257014][ T7187] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 306.264682][ T7187] lock_acquire+0x1db/0x4f0 [ 306.269747][ T7187] __mutex_lock_common+0x1da/0x25a0 [ 306.275498][ T7187] mutex_lock_nested+0x17/0x20 [ 306.280812][ T7187] bg_scan_update+0xa1/0x4a0 [ 306.285952][ T7187] process_one_work+0x8a1/0x10c0 [ 306.291434][ T7187] worker_thread+0xaca/0x1280 [ 306.292449][ T6654] usb 7-1: too many configurations: 241, using maximum allowed: 8 [ 306.296662][ T7187] kthread+0x3f6/0x4f0 [ 306.309063][ T7187] ret_from_fork+0x1f/0x30 [ 306.314023][ T7187] [ 306.314023][ T7187] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 306.323866][ T7187] validate_chain+0x1649/0x5930 [ 306.329263][ T7187] __lock_acquire+0x1295/0x1ff0 [ 306.334671][ T7187] lock_acquire+0x1db/0x4f0 [ 306.339739][ T7187] __flush_work+0xeb/0x1a0 [ 306.344703][ T7187] __cancel_work_timer+0x519/0x6a0 [ 306.350367][ T7187] hci_request_cancel_all+0xcb/0x300 [ 306.356199][ T7187] hci_dev_do_close+0x51/0x1070 [ 306.361609][ T7187] hci_rfkill_set_block+0x114/0x1a0 [ 306.367350][ T7187] rfkill_set_block+0x1e7/0x430 [ 306.372757][ T7187] rfkill_fop_write+0x5b7/0x790 [ 306.378155][ T7187] vfs_write+0x30c/0xe50 [ 306.382948][ T7187] ksys_write+0x1a2/0x2c0 [ 306.387826][ T7187] do_syscall_64+0x3b/0xb0 [ 306.392791][ T7187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.399237][ T7187] [ 306.399237][ T7187] other info that might help us debug this: [ 306.399237][ T7187] [ 306.409475][ T7187] Chain exists of: [ 306.409475][ T7187] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 306.409475][ T7187] [ 306.425237][ T7187] Possible unsafe locking scenario: [ 306.425237][ T7187] [ 306.432712][ T7187] CPU0 CPU1 [ 306.438178][ T7187] ---- ---- [ 306.443558][ T7187] lock(rfkill_global_mutex); [ 306.448343][ T7187] lock(&data->open_mutex); [ 306.455478][ T7187] lock(rfkill_global_mutex); [ 306.462790][ T7187] lock((work_completion)(&hdev->bg_scan_update)); [ 306.469405][ T7187] [ 306.469405][ T7187] *** DEADLOCK *** [ 306.469405][ T7187] [ 306.477566][ T7187] 1 lock held by syz.7.631/7187: [ 306.482520][ T7187] #0: ffffffff8decdaa8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 306.492659][ T7187] [ 306.492659][ T7187] stack backtrace: [ 306.498565][ T7187] CPU: 1 PID: 7187 Comm: syz.7.631 Not tainted 5.15.175-syzkaller #0 [ 306.506648][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 306.516732][ T7187] Call Trace: [ 306.520029][ T7187] [ 306.522972][ T7187] dump_stack_lvl+0x1e3/0x2d0 [ 306.527676][ T7187] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 306.533371][ T7187] ? print_circular_bug+0x12b/0x1a0 [ 306.538710][ T7187] check_noncircular+0x2f8/0x3b0 [ 306.543704][ T7187] ? add_chain_block+0x850/0x850 [ 306.548670][ T7187] ? lockdep_lock+0x11f/0x2a0 [ 306.553376][ T7187] ? lockdep_hardirqs_on+0x94/0x130 [ 306.558596][ T7187] ? finish_lock_switch+0x8f/0x100 [ 306.563735][ T7187] validate_chain+0x1649/0x5930 [ 306.568611][ T7187] ? __switch_to_asm+0x34/0x60 [ 306.573401][ T7187] ? __schedule+0x12cc/0x45b0 [ 306.578110][ T7187] ? mark_lock+0x98/0x340 [ 306.582462][ T7187] ? reacquire_held_locks+0x660/0x660 [ 306.587861][ T7187] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 306.593866][ T7187] ? release_firmware_map_entry+0x190/0x190 [ 306.599789][ T7187] ? look_up_lock_class+0x77/0x120 [ 306.604926][ T7187] ? register_lock_class+0x100/0x9a0 [ 306.610235][ T7187] ? mark_lock+0x98/0x340 [ 306.614650][ T7187] ? is_dynamic_key+0x1f0/0x1f0 [ 306.619534][ T7187] ? __lock_acquire+0x1295/0x1ff0 [ 306.624585][ T7187] ? mark_lock+0x98/0x340 [ 306.628944][ T7187] __lock_acquire+0x1295/0x1ff0 [ 306.633829][ T7187] lock_acquire+0x1db/0x4f0 [ 306.638356][ T7187] ? __flush_work+0xcf/0x1a0 [ 306.642971][ T7187] ? rcu_lock_release+0x5/0x20 [ 306.647764][ T7187] ? read_lock_is_recursive+0x10/0x10 [ 306.653168][ T7187] ? start_flush_work+0x776/0x820 [ 306.658222][ T7187] __flush_work+0xeb/0x1a0 [ 306.662660][ T7187] ? __flush_work+0xcf/0x1a0 [ 306.667280][ T7187] ? flush_work+0x20/0x20 [ 306.671642][ T7187] ? print_irqtrace_events+0x210/0x210 [ 306.677128][ T7187] ? lock_timer_base+0x260/0x260 [ 306.682085][ T7187] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 306.688104][ T7187] ? __cancel_work_timer+0x467/0x6a0 [ 306.693414][ T7187] __cancel_work_timer+0x519/0x6a0 [ 306.698556][ T7187] ? cancel_work_sync+0x20/0x20 [ 306.703431][ T7187] ? lockdep_hardirqs_on+0x94/0x130 [ 306.708670][ T7187] ? __cancel_work+0x2ef/0x380 [ 306.713461][ T7187] ? cancel_work+0x20/0x20 [ 306.717906][ T7187] hci_request_cancel_all+0xcb/0x300 [ 306.723216][ T7187] hci_dev_do_close+0x51/0x1070 [ 306.728123][ T7187] ? hci_rfkill_set_block+0x101/0x1a0 [ 306.733521][ T7187] ? hci_rfkill_set_block+0x10c/0x1a0 [ 306.738922][ T7187] hci_rfkill_set_block+0x114/0x1a0 [ 306.744146][ T7187] ? rcu_lock_release+0x20/0x20 [ 306.749015][ T7187] rfkill_set_block+0x1e7/0x430 [ 306.753891][ T7187] rfkill_fop_write+0x5b7/0x790 [ 306.758773][ T7187] ? rfkill_fop_read+0x470/0x470 [ 306.763731][ T7187] ? fsnotify_perm+0x64/0x590 [ 306.768428][ T7187] ? security_file_permission+0x75/0xa0 [ 306.773993][ T7187] ? rfkill_fop_read+0x470/0x470 [ 306.778946][ T7187] vfs_write+0x30c/0xe50 [ 306.783230][ T7187] ? file_end_write+0x250/0x250 [ 306.788102][ T7187] ? preempt_schedule_irq+0x136/0x1c0 [ 306.793497][ T7187] ? __fget_files+0x413/0x480 [ 306.798206][ T7187] ? __fdget_pos+0x1e9/0x380 [ 306.802817][ T7187] ? ksys_write+0x77/0x2c0 [ 306.807259][ T7187] ksys_write+0x1a2/0x2c0 [ 306.811615][ T7187] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 306.817279][ T7187] ? __ia32_sys_read+0x80/0x80 [ 306.822066][ T7187] ? syscall_enter_from_user_mode+0x37/0x240 [ 306.828072][ T7187] ? syscall_enter_from_user_mode+0x2e/0x240 [ 306.834080][ T7187] do_syscall_64+0x3b/0xb0 [ 306.838514][ T7187] ? clear_bhb_loop+0x15/0x70 [ 306.843209][ T7187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.849144][ T7187] RIP: 0033:0x7f6bf6b47d29 [ 306.853585][ T7187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.873232][ T7187] RSP: 002b:00007f6bf49b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.881679][ T7187] RAX: ffffffffffffffda RBX: 00007f6bf6d37fa0 RCX: 00007f6bf6b47d29 [ 306.889685][ T7187] RDX: 0000000000000008 RSI: 0000000020000300 RDI: 0000000000000006 [ 306.897693][ T7187] RBP: 00007f6bf6bc3aa8 R08: 0000000000000000 R09: 0000000000000000 [ 306.905686][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.913683][ T7187] R13: 0000000000000000 R14: 00007f6bf6d37fa0 R15: 00007ffca44ab3b8 [ 306.921694][ T7187] [ 307.544405][ T6654] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.553752][ T6654] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.562624][ T6654] usb 7-1: Product: syz [ 307.566890][ T6654] usb 7-1: Manufacturer: syz [ 307.571578][ T6654] usb 7-1: SerialNumber: syz [ 307.643176][ T6654] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.710674][ T4797] usb 7-1: USB disconnect, device number 2 [ 307.742828][ T6654] usb 7-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 307.751797][ T4797] usb 7-1: ath9k_htc: USB layer deinitialized