last executing test programs: 31.398235518s ago: executing program 1 (id=626): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf}], 0x1c) 18.991075757s ago: executing program 3 (id=661): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea1101650005000000", 0x29}], 0x1) 18.662242347s ago: executing program 3 (id=665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) read(r3, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) 18.010070997s ago: executing program 3 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setpgid(r2, r2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) socket$netlink(0x10, 0x3, 0x0) 13.220798787s ago: executing program 3 (id=679): r0 = syz_io_uring_setup(0x6acf, &(0x7f0000000940), &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001c80)={0x2, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0, 0xf00}], 0x0}, 0x20) 13.070654161s ago: executing program 3 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) tkill(r7, 0xb) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) close_range(0xffffffffffffffff, r8, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 12.478089095s ago: executing program 3 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x100000000000003d, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x775800, 0x0) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000300)=""/164, 0xa4, &(0x7f0000000040)=""/54, 0x3, 0x1}}, 0x48) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 8.542207546s ago: executing program 0 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, @void, @value}, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/67, 0x43}], 0x1, 0x0, 0x0) 7.347466135s ago: executing program 0 (id=695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000380)={0x14, 0x15, 0xa, 0x201}, 0x14}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c080}, 0x24040000) 7.264400543s ago: executing program 0 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) setregid(0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) 7.087978089s ago: executing program 1 (id=627): r0 = syz_usb_connect(0x0, 0x188, &(0x7f0000000740)=ANY=[@ANYBLOB="1201100130b67f4010110190a9b20102030109027601010000000009046c"], 0x0) syz_usb_disconnect(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.278031264s ago: executing program 0 (id=697): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = syz_io_uring_setup(0xe2c, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) sendmmsg$inet(r5, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = io_uring_setup(0x1895, &(0x7f00000002c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [], {0x14}}, 0x28}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 5.488933776s ago: executing program 4 (id=701): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r4 = syz_open_procfs(0x0, 0x0) lseek(r4, 0x0, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000020"], 0x34}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f0000000000), 0xd52db71cf93d708d, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) write$cgroup_subtree(r0, 0x0, 0xfe33) 5.366103597s ago: executing program 0 (id=703): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x0, 0x0, 0xd18f}) fcntl$lock(r4, 0x6, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x6c}, 0x1, 0xba01}, 0x0) close(r5) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 4.165526398s ago: executing program 0 (id=705): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x463, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f00000004c0)=""/95, 0x5f}], 0x1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x3000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a6e000/0x2000)=nil, 0x2000, 0x16) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x4020841) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2000011f, &(0x7f0000000300)=ANY=[@ANYBLOB="d1478c30c71dd4ab7db87b0e343b106753acf3ece15d2c997139b95a347200092ee7940380fbe6b65a6dcabde168d798c3f8d2070e0f71c3cc796150af5f46b702b99bc90de6677c2351a2673a7afc9afbae6bf40e9f5473e520b189e21e73304414cbcab0ff50705f2b51ffd83f66b7e79f8b6de6b50380bc7035"], &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x86, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @broadcast}, &(0x7f0000000080)=0xc) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0xe0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 3.962076916s ago: executing program 1 (id=706): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x58ca02a0, 0x0) 3.92437185s ago: executing program 4 (id=707): clock_getres(0xb, &(0x7f0000000000)) clock_nanosleep(0x0, 0x1, &(0x7f0000000040)={0x8000000000000000, 0x1}, &(0x7f0000000080)) clock_nanosleep(0xf, 0x0, &(0x7f00000000c0)={0x4, 0x100000001}, 0x0) clock_settime(0x4, &(0x7f0000000140)={0x2, 0xfffffffffffff112}) clock_settime(0x0, 0x0) clock_settime(0xe, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'macvlan0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'pim6reg1\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000580)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xed\x87\x9d%F\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\nt`\xff\b\xaaF?!\x9f\a\xff\xff\x00\x004\x1deU\x06zS\xc9\xb4\xa7_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95W\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee\x9e\xfa\x00\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x88\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 3.738192627s ago: executing program 1 (id=709): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000a26503206d0414c34000ffff00210902"], 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000000f01f003f0000007d00000001000000", @ANYRES32, @ANYBLOB], 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r3, @ANYBLOB="457b008000000000140012800c0001006d61637674617000140002800800", @ANYRES32=r4], 0x3c}}, 0x0) 3.412635307s ago: executing program 4 (id=710): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) socket$key(0xf, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000300)=0x5, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_sco(r3, &(0x7f0000000040), 0x8) shutdown(r3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f00000001c0)={0x1f, @none}, 0x8) 3.359459892s ago: executing program 2 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x34651}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 3.238277763s ago: executing program 2 (id=712): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32], 0x48) 3.138140302s ago: executing program 2 (id=713): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e000085000000820000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$unix(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001680)='c', 0x1}], 0x1}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) 2.228120976s ago: executing program 2 (id=714): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x6, 0x16, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) open(&(0x7f0000000180)='./bus\x00', 0x109241, 0x0) 2.197028089s ago: executing program 4 (id=716): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x0, 0x0, 0xd18f}) fcntl$lock(r4, 0x6, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x6c}, 0x1, 0xba01}, 0x0) close(r5) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1.52078612s ago: executing program 4 (id=717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f00000003c0), 0x8, 0x10800) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_io_uring_setup(0xcf, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a40)=@newtaction={0x14, 0x30, 0x0, 0x3}, 0x14}}, 0x0) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x1f0, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 526.382142ms ago: executing program 2 (id=718): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 525.563112ms ago: executing program 4 (id=719): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00003074430000000800000006000000000000001426af5fba73019f9e05a7796fe19d7d122736fc8fb176e7848667e4cf90bcdd409492840d6799ea1dbbd454", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 358.240057ms ago: executing program 1 (id=720): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0xb8a9, 0x10100, 0x1}, &(0x7f00000003c0), &(0x7f0000000440)=0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_io_uring_setup(0x5c4, &(0x7f0000000200), &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = dup2(r3, r4) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000008c0)={0x6, {{0x2, 0x0, @multicast1=0xe0000002}}, {{0x2, 0x0, @broadcast}}}, 0x108) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r7, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="04a1f3ef7bed6f6f0711fe0897fa25eafc9e", @ANYBLOB="00000080000000000000000000000000004000000055c7e2805840ad5a9bab01ccad7c198f7a9fd83bcaf41e2d6556dfa6099cca53c182b4f8a88ef6d4e8a3af7282393a4992d8a17204000000006f9ab74b00"/99], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa000000000000000014000200020000706401010100000000000000000d0001007564703a73797a3200080000e3157dd4b99d329e2acec1f86532e19b36a05afbd3c9d165af274f44a24ce1d8d996c7297f15ee714da358cb983ca7fb19ce7e279c699ea58c6dee5296222b1381aa6c76238743ebfcacf9b4cca6866fa6"], 0x54}}, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000280)=0x0) sched_setaffinity(r10, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4107}, {0x14, 0x18, {0x401, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x4040080) kernel console output (not intermixed with test programs): 254.072391][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.079536][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.118243][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.133128][ T7137] loop2: detected capacity change from 0 to 256 [ 254.137628][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.156159][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.168277][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.177603][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.186613][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.225150][ T7132] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 254.266606][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.314748][ T7137] loop2: detected capacity change from 0 to 16 [ 254.336156][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.372405][ T7137] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 254.458025][ T7148] loop4: detected capacity change from 0 to 128 [ 254.467005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.484051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.500538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.515038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.560835][ T7148] EXT4-fs (loop4): Ignoring removed nobh option [ 254.596091][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.604537][ T7148] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 254.623735][ T7148] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038 (0x7fffffff) [ 254.793188][ T7127] chnl_net:caif_netlink_parms(): no params data found [ 254.836347][ T7158] vivid-008: disconnect [ 254.853532][ T7155] loop2: detected capacity change from 0 to 2048 [ 254.901425][ T7147] vivid-008: reconnect [ 254.956351][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.963644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.971777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.982060][ T7155] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.013326][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.021642][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.040242][ T7127] device bridge_slave_0 entered promiscuous mode [ 255.045996][ T6876] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024 [ 255.052891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.073722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.097210][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.102684][ T6876] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 255.131498][ T6876] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024 [ 255.153580][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.163629][ T6876] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 255.176803][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.194372][ T7127] device bridge_slave_1 entered promiscuous mode [ 255.201581][ T6876] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024 [ 255.225816][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.243335][ T6876] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 255.247383][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.264513][ T7146] loop1: detected capacity change from 0 to 32768 [ 255.271786][ T6876] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024 [ 255.291724][ T6876] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 255.315305][ T6876] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024 [ 255.315688][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.358021][ T6876] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 255.383234][ T4555] Bluetooth: hci0: command 0x040f tx timeout [ 255.391476][ T7061] device veth0_vlan entered promiscuous mode [ 255.403373][ T7146] ERROR: (device loop1): diNewExt: no free extents [ 255.403373][ T7146] [ 255.453679][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.461693][ T7146] ERROR: (device loop1): remounting filesystem as read-only [ 255.473493][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.483603][ T7146] ialloc: diAlloc returned -5! [ 255.515985][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.565822][ T7061] device veth1_vlan entered promiscuous mode [ 255.620894][ T7127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.678293][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.713293][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719588][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.736650][ T7127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.783105][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 255.804775][ T7172] loop1: detected capacity change from 0 to 64 [ 255.911942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.930531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 256.010969][ T7168] loop2: detected capacity change from 0 to 32768 [ 256.043566][ T7168] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.515 (7168) [ 256.084931][ T7168] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 256.102774][ T7168] BTRFS info (device loop2): setting nodatacow, compression disabled [ 256.124809][ T7168] BTRFS info (device loop2): max_inline at 0 [ 256.130823][ T7168] BTRFS info (device loop2): enabling disk space caching [ 256.147794][ T7127] team0: Port device team_slave_0 added [ 256.150828][ T7168] BTRFS info (device loop2): turning off barriers [ 256.163074][ T7168] BTRFS info (device loop2): turning on flush-on-commit [ 256.169461][ T7061] device veth0_macvtap entered promiscuous mode [ 256.183716][ T7168] BTRFS info (device loop2): doing ref verification [ 256.190349][ T7168] BTRFS info (device loop2): force clearing of disk cache [ 256.223329][ T7168] BTRFS info (device loop2): enabling ssd optimizations [ 256.240579][ T7168] BTRFS info (device loop2): max_inline at 4096 [ 256.263209][ T7168] BTRFS info (device loop2): disk space caching is enabled [ 256.280737][ T7168] BTRFS info (device loop2): has skinny extents [ 256.333151][ T7177] loop1: detected capacity change from 0 to 4096 [ 256.364465][ T7127] team0: Port device team_slave_1 added [ 256.407701][ T7177] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 256.421449][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.443780][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.464061][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.489853][ T7061] device veth1_macvtap entered promiscuous mode [ 256.511669][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.519788][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.547684][ T7127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.561902][ T7168] BTRFS info (device loop2): clearing free space tree [ 256.570891][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.578195][ T7168] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 256.586283][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.593282][ T7168] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 256.631257][ T7127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.702608][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.743300][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.782467][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.802891][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.813272][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.824495][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.834634][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.845405][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.855597][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.868337][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.878647][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.889480][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.901310][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.951272][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.968647][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.017059][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.455106][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.466670][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.479445][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.483174][ T3680] Bluetooth: hci0: command 0x0419 tx timeout [ 257.490378][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.506333][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.518224][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.528420][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.538738][ T7206] loop2: detected capacity change from 0 to 4096 [ 257.539392][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.555842][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.566337][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.576244][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.587582][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.598822][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.681820][ T7211] loop1: detected capacity change from 0 to 128 [ 257.689127][ T7206] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 257.706438][ T7206] ntfs3: loop2: ino=0, Correct links count -> 1. [ 257.752443][ T7211] EXT4-fs (loop1): Ignoring removed nobh option [ 257.753634][ T7127] device hsr_slave_0 entered promiscuous mode [ 257.778404][ T7206] ntfs3: loop2: MFT: r=0, expect seq=1 instead of 0! [ 257.780600][ T7211] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 257.815600][ T7127] device hsr_slave_1 entered promiscuous mode [ 257.815649][ T7206] ntfs3: loop2: Failed to load $MFT. [ 257.829909][ T7211] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038 (0x7fffffff) [ 257.836319][ T7127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.863083][ T2988] Bluetooth: hci2: command 0x041b tx timeout [ 257.881164][ T7127] Cannot create hsr debugfs directory [ 257.891822][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.901746][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.042755][ T7061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.052080][ T7061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.061196][ T7227] vivid-002: disconnect [ 258.064408][ T7061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.105260][ T7061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.119596][ T7209] vivid-002: reconnect [ 258.211262][ T5899] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /41/mnt/lost+found: directory fails checksum at offset 1024 [ 258.275887][ T5899] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 258.312402][ T5899] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /41/mnt/lost+found: directory fails checksum at offset 1024 [ 258.328993][ T5899] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 258.344273][ T5899] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /41/mnt/lost+found: directory fails checksum at offset 1024 [ 258.403114][ T5899] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 258.417750][ T5899] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /41/mnt/lost+found: directory fails checksum at offset 1024 [ 258.434482][ T5899] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 258.460421][ T5899] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /41/mnt/lost+found: directory fails checksum at offset 1024 [ 258.497919][ T5899] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 258.739801][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.753688][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.776766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.848498][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.860739][ T7203] chnl_net:caif_netlink_parms(): no params data found [ 258.872124][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.922304][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.278616][ T7246] loop0: detected capacity change from 0 to 32768 [ 259.317091][ T7246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.490 (7246) [ 259.369724][ T7246] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 259.378527][ T7246] BTRFS info (device loop0): setting nodatacow, compression disabled [ 259.383094][ T3677] Bluetooth: hci4: command 0x0409 tx timeout [ 259.386909][ T7246] BTRFS info (device loop0): max_inline at 0 [ 259.398661][ T7246] BTRFS info (device loop0): enabling disk space caching [ 259.405751][ T7246] BTRFS info (device loop0): turning off barriers [ 259.412168][ T7246] BTRFS info (device loop0): turning on flush-on-commit [ 259.419180][ T7246] BTRFS info (device loop0): doing ref verification [ 259.426551][ T7246] BTRFS info (device loop0): force clearing of disk cache [ 259.433923][ T7246] BTRFS info (device loop0): enabling ssd optimizations [ 259.440913][ T7246] BTRFS info (device loop0): max_inline at 4096 [ 259.447206][ T7246] BTRFS info (device loop0): disk space caching is enabled [ 259.454465][ T7246] BTRFS info (device loop0): has skinny extents [ 259.496515][ T7236] loop2: detected capacity change from 0 to 32768 [ 259.577004][ T7236] ERROR: (device loop2): diNewExt: no free extents [ 259.577004][ T7236] [ 259.605085][ T7236] ERROR: (device loop2): remounting filesystem as read-only [ 259.612443][ T7236] ialloc: diAlloc returned -5! [ 259.701091][ T7246] BTRFS info (device loop0): clearing free space tree [ 259.708279][ T7246] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 259.717995][ T7246] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 259.771075][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.813909][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.893007][ T7203] device bridge_slave_0 entered promiscuous mode [ 259.967190][ T3559] Bluetooth: hci2: command 0x040f tx timeout [ 260.053622][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.060710][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.105861][ T7203] device bridge_slave_1 entered promiscuous mode [ 260.442472][ T7291] cifs: Bad value for 'port' [ 260.462958][ T3559] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.514960][ T7203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.544395][ T7203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.567238][ T7127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.614002][ T7127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.712193][ T7127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.725919][ T7127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.750324][ T7203] team0: Port device team_slave_0 added [ 260.774014][ T7203] team0: Port device team_slave_1 added [ 260.845899][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.856273][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.869850][ T3559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.894564][ T7203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.902218][ T3559] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 260.936377][ T3559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.972463][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.987403][ T3559] usb 3-1: config 0 descriptor?? [ 260.992904][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.019332][ T7203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.126018][ T7311] loop0: detected capacity change from 0 to 4096 [ 261.168864][ T7311] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 261.216997][ T7311] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 261.229029][ T7203] device hsr_slave_0 entered promiscuous mode [ 261.245022][ T7203] device hsr_slave_1 entered promiscuous mode [ 261.251936][ T7203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.262377][ T7203] Cannot create hsr debugfs directory [ 261.427876][ T7278] chnl_net:caif_netlink_parms(): no params data found [ 261.468989][ T7127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.476251][ T3671] Bluetooth: hci4: command 0x041b tx timeout [ 261.485740][ T3559] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 261.497764][ T3559] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 261.510138][ T3559] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 261.523547][ T3559] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 261.534825][ T3559] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 261.565421][ T3559] corsair 0003:1B1C:1B3E.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 261.618651][ T155] device hsr_slave_0 left promiscuous mode [ 261.628125][ T155] device hsr_slave_1 left promiscuous mode [ 261.648488][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.656624][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.665390][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.673369][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.693529][ T155] device bridge_slave_1 left promiscuous mode [ 261.699879][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.708959][ T155] device bridge_slave_0 left promiscuous mode [ 261.715572][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.728164][ T155] device hsr_slave_0 left promiscuous mode [ 261.735514][ T155] device hsr_slave_1 left promiscuous mode [ 261.741851][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.750003][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.758222][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.766201][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.774529][ T155] device bridge_slave_1 left promiscuous mode [ 261.781448][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.790895][ T155] device bridge_slave_0 left promiscuous mode [ 261.797625][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.811492][ T155] device veth1_macvtap left promiscuous mode [ 261.817716][ T155] device veth0_macvtap left promiscuous mode [ 261.824113][ T155] device veth1_vlan left promiscuous mode [ 261.829914][ T155] device veth0_vlan left promiscuous mode [ 261.837184][ T155] device veth1_macvtap left promiscuous mode [ 261.843432][ T155] device veth0_macvtap left promiscuous mode [ 261.849451][ T155] device veth1_vlan left promiscuous mode [ 261.856112][ T155] device veth0_vlan left promiscuous mode [ 261.863326][ T4871] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 262.023172][ T3680] Bluetooth: hci2: command 0x0419 tx timeout [ 262.097864][ T155] team0 (unregistering): Port device team_slave_1 removed [ 262.113230][ T4871] usb 1-1: Using ep0 maxpacket: 32 [ 262.119470][ T155] team0 (unregistering): Port device team_slave_0 removed [ 262.133280][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.148025][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.211987][ T155] bond0 (unregistering): Released all slaves [ 262.262989][ T3680] Bluetooth: hci3: command 0x0409 tx timeout [ 262.334492][ T155] team0 (unregistering): Port device team_slave_1 removed [ 262.348058][ T155] team0 (unregistering): Port device team_slave_0 removed [ 262.363180][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.380393][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.393175][ T4871] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 262.407843][ T4871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.422519][ T4871] usb 1-1: Product: syz [ 262.431667][ T4871] usb 1-1: Manufacturer: syz [ 262.446415][ T4871] usb 1-1: SerialNumber: syz [ 262.459278][ T4871] usb 1-1: config 0 descriptor?? [ 262.469334][ T155] bond0 (unregistering): Released all slaves [ 262.504835][ T4871] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 262.559314][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.567225][ T3678] usb 3-1: USB disconnect, device number 19 [ 262.568100][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.621291][ T7127] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.687170][ T7203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.703271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.712123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.721899][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.729080][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.750061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.773221][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.781049][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.789980][ T7278] device bridge_slave_0 entered promiscuous mode [ 262.820708][ T7203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.834772][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.842008][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.850968][ T7278] device bridge_slave_1 entered promiscuous mode [ 262.877868][ T7278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.897227][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.906882][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.915819][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.922968][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.944053][ T7278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.957553][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.975455][ T7203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.991542][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.030638][ T7203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.045630][ T7278] team0: Port device team_slave_0 added [ 263.061850][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.079853][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.103379][ T7278] team0: Port device team_slave_1 added [ 263.142151][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.152410][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.164199][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.232154][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.270532][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.280880][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.290215][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.301546][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.310916][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.319670][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.346450][ T7278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.404799][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.421989][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.455261][ T7278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.474669][ T7203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.517191][ T7203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.543098][ T3680] Bluetooth: hci4: command 0x040f tx timeout [ 263.574263][ T7203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.619852][ T7278] device hsr_slave_0 entered promiscuous mode [ 263.654264][ T7278] device hsr_slave_1 entered promiscuous mode [ 263.661144][ T7278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.669710][ T7278] Cannot create hsr debugfs directory [ 263.676400][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.684817][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.697695][ T7127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.706113][ T7203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.780767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.803889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.862209][ T7346] loop2: detected capacity change from 0 to 32768 [ 263.869868][ T7127] device veth0_vlan entered promiscuous mode [ 263.929844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.938700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.975339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.993878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.998129][ T7346] XFS (loop2): Mounting V5 Filesystem [ 264.003342][ T7127] device veth1_vlan entered promiscuous mode [ 264.039785][ T7278] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.132451][ T7346] XFS (loop2): Ending clean mount [ 264.146156][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.161757][ T7346] XFS (loop2): Quotacheck needed: Please wait. [ 264.169527][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.179006][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.188244][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.207656][ T7127] device veth0_macvtap entered promiscuous mode [ 264.229203][ T7278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.257862][ T7346] XFS (loop2): Quotacheck: Done. [ 264.274356][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.283877][ T7127] device veth1_macvtap entered promiscuous mode [ 264.342966][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 264.472675][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.501698][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.542899][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.563433][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.573370][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.584149][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.594246][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.606980][ T4871] gspca_ov534_9: reg_w failed -110 [ 264.612128][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.622005][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.640694][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.662108][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.768514][ T6248] XFS (loop2): Unmounting Filesystem [ 264.877190][ T7278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.914855][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.933419][ T4871] gspca_ov534_9: Unknown sensor 0000 [ 264.933486][ T4871] ov534_9: probe of 1-1:0.0 failed with error -22 [ 264.952431][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.984269][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.004196][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.023335][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.032064][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.044734][ T7203] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.068332][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.100499][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.128891][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.161104][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.185091][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.202886][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.222008][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.246336][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.262255][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.283880][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.308555][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.334866][ T7278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.389414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.403644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.431819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.454124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.484547][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.491669][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.514799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.532428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.551175][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.558325][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.575150][ T7127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.584273][ T7127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.594448][ T7127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.603285][ T7127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.623113][ T3678] Bluetooth: hci4: command 0x0419 tx timeout [ 265.643084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.651154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.676944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.705258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.718919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.727774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.767297][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.791111][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.811598][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.822284][ T7371] loop2: detected capacity change from 0 to 32768 [ 265.830958][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.840255][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.848729][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.873422][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.936983][ T7371] ERROR: (device loop2): diNewExt: no free extents [ 265.936983][ T7371] [ 265.983868][ T7371] ERROR: (device loop2): remounting filesystem as read-only [ 265.994855][ T7371] ialloc: diAlloc returned -5! [ 266.018474][ T7278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.038302][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.072399][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.081976][ T7278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.104009][ T7278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.124378][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.136603][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.147766][ T7278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.155133][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.231465][ T3970] usb 1-1: USB disconnect, device number 12 [ 266.237685][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.324013][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.397935][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.437427][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.466182][ T3615] Bluetooth: hci3: command 0x040f tx timeout [ 266.566263][ T7278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.611163][ T7278] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.730033][ T7278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.738659][ T7388] loop2: detected capacity change from 0 to 32768 [ 266.751882][ T7278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.776957][ T7388] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.537 (7388) [ 266.793631][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.802064][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.833610][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.848870][ T7388] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 266.857776][ T7388] BTRFS info (device loop2): setting nodatacow, compression disabled [ 266.860287][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.866032][ T7388] BTRFS info (device loop2): max_inline at 0 [ 266.880130][ T7388] BTRFS info (device loop2): enabling disk space caching [ 266.881462][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.887214][ T7388] BTRFS info (device loop2): turning off barriers [ 266.887233][ T7388] BTRFS info (device loop2): turning on flush-on-commit [ 266.894273][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.901332][ T7388] BTRFS info (device loop2): doing ref verification [ 266.921520][ T7388] BTRFS info (device loop2): force clearing of disk cache [ 266.923024][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.928768][ T7388] BTRFS info (device loop2): enabling ssd optimizations [ 266.943760][ T7388] BTRFS info (device loop2): max_inline at 4096 [ 266.950014][ T7388] BTRFS info (device loop2): disk space caching is enabled [ 266.957277][ T7388] BTRFS info (device loop2): has skinny extents [ 266.969818][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.978460][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.985566][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.994593][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.004779][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.014417][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.023681][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.032519][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.042379][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.051124][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.060447][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.083750][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.102045][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.116467][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.124630][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.133257][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.203023][ T7381] loop3: detected capacity change from 0 to 40427 [ 267.220159][ T7412] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.540'. [ 267.239476][ T7412] netlink: 52 bytes leftover after parsing attributes in process `syz.0.540'. [ 267.263423][ T7388] BTRFS info (device loop2): clearing free space tree [ 267.270262][ T7388] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 267.279970][ T7388] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 267.370948][ T7381] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 267.411803][ T7381] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 267.461704][ T7381] F2FS-fs (loop3): invalid crc value [ 267.501249][ T7420] fuse: Unknown parameter 'use00000000000000000000' [ 267.530519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.546636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.602972][ T7381] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.634985][ T7278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.726515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.737112][ T7381] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 267.739021][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.775357][ T7381] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 267.831120][ T26] audit: type=1804 audit(1728285586.229:24): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.507" name="/newroot/0/bus/bus" dev="loop3" ino=455 res=1 errno=0 [ 268.105931][ T7278] device veth0_vlan entered promiscuous mode [ 268.156129][ T7381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.507'. [ 268.178829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.188536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.197375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.208528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.750382][ T3673] Bluetooth: hci3: command 0x0419 tx timeout [ 268.784914][ T7278] device veth1_vlan entered promiscuous mode [ 268.796450][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.805748][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.844115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.871667][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.911263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.919471][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.953817][ T7203] device veth0_vlan entered promiscuous mode [ 269.025934][ T7278] device veth0_macvtap entered promiscuous mode [ 269.045432][ T7203] device veth1_vlan entered promiscuous mode [ 269.053732][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.083890][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.092585][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.142462][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.165276][ T7278] device veth1_macvtap entered promiscuous mode [ 269.193465][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.209667][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.290589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.301386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.323508][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.352087][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.372974][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.392833][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.403810][ T7443] loop2: detected capacity change from 0 to 40427 [ 269.413459][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.443150][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.469884][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.481075][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.490989][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.501763][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.511755][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.522626][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.542222][ T7443] F2FS-fs (loop2): Found nat_bits in checkpoint [ 269.549716][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.576061][ T7203] device veth0_macvtap entered promiscuous mode [ 269.585548][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.603540][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.611476][ T7443] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 269.612384][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.630421][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.656886][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.685864][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.713100][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.722991][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.742924][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.752750][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.763327][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.774248][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.796609][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.812943][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.823764][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.836099][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.849667][ T6248] attempt to access beyond end of device [ 269.849667][ T6248] loop2: rw=2049, want=45104, limit=40427 [ 269.878122][ T7203] device veth1_macvtap entered promiscuous mode [ 269.893010][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.901487][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.946379][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.968405][ T7278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.984549][ T7278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.003249][ T7278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.020908][ T7278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.143037][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.183139][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.203137][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.222924][ T21] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 270.241928][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.262187][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.282920][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.302918][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.322850][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.343791][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.363673][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.379499][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.390494][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.400856][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.411749][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.423908][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.444640][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.454700][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.469856][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.497877][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.517954][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.533845][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.552286][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.572219][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.582620][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.595288][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.605867][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.631777][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.642156][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.653495][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.664577][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.678819][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.690152][ T21] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 270.699725][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.710548][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.710688][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.742472][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.758370][ T7203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.773992][ T21] usb 1-1: config 0 descriptor?? [ 270.788668][ T7203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.806265][ T7203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.821262][ T7203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.875925][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.888290][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.663001][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 271.669085][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 271.716314][ T21] usb 1-1: USB disconnect, device number 13 [ 271.739934][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.778412][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.041502][ T7478] loop2: detected capacity change from 0 to 32768 [ 272.065966][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.075824][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.095821][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.139279][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.155019][ T7478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.551 (7478) [ 272.185253][ T7482] FAULT_INJECTION: forcing a failure. [ 272.185253][ T7482] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 272.224239][ T7064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.241355][ T7482] CPU: 0 PID: 7482 Comm: syz.0.553 Not tainted 5.15.167-syzkaller #0 [ 272.249457][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.249984][ T7064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.259519][ T7482] Call Trace: [ 272.259530][ T7482] [ 272.259537][ T7482] dump_stack_lvl+0x1e3/0x2d0 [ 272.259562][ T7482] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 272.259579][ T7482] ? panic+0x860/0x860 [ 272.259599][ T7482] ? __lock_acquire+0x1295/0x1ff0 [ 272.259623][ T7482] should_fail+0x38a/0x4c0 [ 272.270979][ T7478] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 272.273076][ T7482] _copy_from_user+0x2d/0x170 [ 272.273104][ T7482] __copy_msghdr_from_user+0xaf/0x7c0 [ 272.277835][ T7478] BTRFS info (device loop2): setting nodatacow, compression disabled [ 272.283384][ T7482] ? __ia32_sys_shutdown+0x60/0x60 [ 272.283420][ T7482] ___sys_sendmsg+0x166/0x2e0 [ 272.283442][ T7482] ? __sys_sendmsg+0x260/0x260 [ 272.283493][ T7482] ? __fdget+0x191/0x220 [ 272.283514][ T7482] __sys_sendmmsg+0x2bf/0x560 [ 272.283539][ T7482] ? __ia32_sys_sendmsg+0x80/0x80 [ 272.283566][ T7482] ? __lock_acquire+0x1ff0/0x1ff0 [ 272.283592][ T7482] ? print_irqtrace_events+0x210/0x210 [ 272.287685][ T7478] BTRFS info (device loop2): max_inline at 0 [ 272.292651][ T7482] ? vtime_user_exit+0x2d1/0x400 [ 272.297076][ T7478] BTRFS info (device loop2): enabling disk space caching [ 272.305686][ T7482] ? syscall_enter_from_user_mode+0x2e/0x240 [ 272.305714][ T7482] __x64_sys_sendmmsg+0x9c/0xb0 [ 272.310358][ T7478] BTRFS info (device loop2): turning off barriers [ 272.315703][ T7482] do_syscall_64+0x3b/0xb0 [ 272.315722][ T7482] ? clear_bhb_loop+0x15/0x70 [ 272.324118][ T7478] BTRFS info (device loop2): turning on flush-on-commit [ 272.328842][ T7482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.328867][ T7482] RIP: 0033:0x7f2bfa203ff9 [ 272.328890][ T7482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.328905][ T7482] RSP: 002b:00007f2bf867c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.328926][ T7482] RAX: ffffffffffffffda RBX: 00007f2bfa3bbf80 RCX: 00007f2bfa203ff9 [ 272.328940][ T7482] RDX: 0000000000000001 RSI: 00000000200080c0 RDI: 0000000000000004 [ 272.328951][ T7482] RBP: 00007f2bf867c090 R08: 0000000000000000 R09: 0000000000000000 [ 272.328962][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.328973][ T7482] R13: 0000000000000000 R14: 00007f2bfa3bbf80 R15: 00007ffcbd421918 [ 272.329000][ T7482] [ 272.331014][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.333907][ T7478] BTRFS info (device loop2): doing ref verification [ 272.346937][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.347470][ T7478] BTRFS info (device loop2): force clearing of disk cache [ 272.347523][ T7478] BTRFS info (device loop2): enabling ssd optimizations [ 272.352772][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.357857][ T7478] BTRFS info (device loop2): max_inline at 4096 [ 272.385422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.387196][ T7478] BTRFS info (device loop2): disk space caching is enabled [ 272.518827][ T7474] loop3: detected capacity change from 0 to 32768 [ 272.524466][ T7478] BTRFS info (device loop2): has skinny extents [ 272.669231][ T145] device hsr_slave_0 left promiscuous mode [ 272.707036][ T145] device hsr_slave_1 left promiscuous mode [ 272.757647][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.767726][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.785543][ T7474] ERROR: (device loop3): diNewExt: no free extents [ 272.785543][ T7474] [ 272.813332][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.821241][ T7474] ERROR: (device loop3): remounting filesystem as read-only [ 272.823651][ T7493] loop1: detected capacity change from 0 to 2048 [ 272.835695][ T7474] ialloc: diAlloc returned -5! [ 273.441874][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.492866][ T7503] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.510863][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.527'. [ 273.593330][ T145] device bridge_slave_1 left promiscuous mode [ 273.599766][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.608882][ T7478] BTRFS info (device loop2): clearing free space tree [ 273.615957][ T7478] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 273.626579][ T7478] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 273.706514][ T7528] loop0: detected capacity change from 0 to 4096 [ 273.738080][ T145] device bridge_slave_0 left promiscuous mode [ 273.745206][ T7526] loop4: detected capacity change from 0 to 1024 [ 273.751819][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.783546][ T7528] ntfs3: Unknown parameter 'case' [ 273.812261][ T145] device hsr_slave_0 left promiscuous mode [ 273.890637][ T145] device hsr_slave_1 left promiscuous mode [ 273.901457][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.965768][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.984716][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.003943][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.033099][ T145] device bridge_slave_1 left promiscuous mode [ 274.041556][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.208446][ T7544] loop4: detected capacity change from 0 to 512 [ 274.281934][ T7544] EXT4-fs (loop4): Unrecognized mount option "smackfsfloor=·(/(+#:" or missing value [ 274.500123][ T145] device bridge_slave_0 left promiscuous mode [ 274.521471][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.575133][ T145] device veth1_macvtap left promiscuous mode [ 274.591314][ T145] device veth0_macvtap left promiscuous mode [ 274.622644][ T145] device veth1_vlan left promiscuous mode [ 274.642103][ T145] device veth0_vlan left promiscuous mode [ 274.666130][ T145] device veth1_macvtap left promiscuous mode [ 274.682133][ T145] device veth0_macvtap left promiscuous mode [ 274.711855][ T145] device veth1_vlan left promiscuous mode [ 274.722628][ T7552] netlink: 56 bytes leftover after parsing attributes in process `syz.2.563'. [ 274.729339][ T145] device veth0_vlan left promiscuous mode [ 274.738895][ T7555] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 274.765636][ T7552] loop2: detected capacity change from 0 to 512 [ 274.860811][ T7556] netlink: 48 bytes leftover after parsing attributes in process `syz.0.567'. [ 274.977060][ T7552] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2 [ 275.631144][ T7552] loop2: detected capacity change from 0 to 65536 [ 276.073742][ T7559] loop1: detected capacity change from 0 to 32768 [ 276.101836][ T7571] loop2: detected capacity change from 0 to 64 [ 276.635849][ T145] team0 (unregistering): Port device team_slave_1 removed [ 276.695056][ T145] team0 (unregistering): Port device team_slave_0 removed [ 276.733321][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.803615][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.115597][ T7585] loop1: detected capacity change from 0 to 32768 [ 277.147522][ T7585] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.573 (7585) [ 277.215925][ T145] bond0 (unregistering): Released all slaves [ 277.252968][ T7585] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 277.261768][ T7585] BTRFS info (device loop1): setting nodatacow, compression disabled [ 277.270159][ T7585] BTRFS info (device loop1): max_inline at 0 [ 277.276201][ T7585] BTRFS info (device loop1): enabling disk space caching [ 277.283260][ T7585] BTRFS info (device loop1): turning off barriers [ 277.289692][ T7585] BTRFS info (device loop1): turning on flush-on-commit [ 277.296693][ T7585] BTRFS info (device loop1): doing ref verification [ 277.303362][ T7585] BTRFS info (device loop1): force clearing of disk cache [ 277.311461][ T7585] BTRFS info (device loop1): enabling ssd optimizations [ 277.318482][ T7585] BTRFS info (device loop1): max_inline at 4096 [ 277.324843][ T7585] BTRFS info (device loop1): disk space caching is enabled [ 277.332051][ T7585] BTRFS info (device loop1): has skinny extents [ 277.513035][ T7569] loop3: detected capacity change from 0 to 40427 [ 277.521426][ T7585] BTRFS info (device loop1): clearing free space tree [ 277.528346][ T7585] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 277.538111][ T7585] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 277.563253][ T7574] loop0: detected capacity change from 0 to 32768 [ 277.636961][ T7574] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.572 (7574) [ 277.657276][ T7569] F2FS-fs (loop3): invalid crc value [ 277.693032][ T7574] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 277.707007][ T7569] F2FS-fs (loop3): Mismatch valid blocks 4 vs. 5 [ 277.725740][ T7574] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 277.733041][ T7569] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 277.766821][ T7574] BTRFS info (device loop0): use lzo compression, level 0 [ 277.787104][ T7574] BTRFS info (device loop0): using free space tree [ 277.807819][ T7574] BTRFS info (device loop0): has skinny extents [ 278.322700][ T145] team0 (unregistering): Port device team_slave_1 removed [ 278.424476][ T145] team0 (unregistering): Port device team_slave_0 removed [ 278.463014][ T7574] BTRFS info (device loop0): enabling ssd optimizations [ 278.471786][ T7633] loop3: detected capacity change from 0 to 2048 [ 278.488578][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.525805][ T26] audit: type=1800 audit(1728285596.929:25): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.572" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 278.605617][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.435155][ T7569] loop3: detected capacity change from 0 to 1024 [ 279.543449][ T7644] loop1: detected capacity change from 0 to 64 [ 279.565262][ T7569] hfsplus: unable to parse mount options [ 280.025689][ T7590] loop2: detected capacity change from 0 to 65536 [ 280.181974][ T145] bond0 (unregistering): Released all slaves [ 280.332728][ T7569] tipc: Enabling of bearer <Žz:l> rejected, media not registered [ 280.476080][ T7657] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 280.788274][ T7662] loop1: detected capacity change from 0 to 1024 [ 280.880462][ T3968] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 281.773010][ T3968] usb 4-1: Using ep0 maxpacket: 16 [ 281.849787][ T7664] hfsplus: b-tree write err: -5, ino 4 [ 281.924927][ T3968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.961028][ T7653] loop0: detected capacity change from 0 to 40427 [ 281.982831][ T3968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.022920][ T3968] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 282.074810][ T3968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.099967][ T7671] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 282.102899][ T3968] usb 4-1: config 0 descriptor?? [ 282.285219][ T7676] loop1: detected capacity change from 0 to 128 [ 282.344993][ T7676] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 282.414723][ T7676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.489885][ T7653] loop0: detected capacity change from 0 to 512 [ 282.561324][ T7653] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.602116][ T3968] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 282.621010][ T7653] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 282.650821][ T7653] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.579: invalid indirect mapped block 2683928664 (level 1) [ 282.669799][ T3968] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 283.390798][ T7653] EXT4-fs (loop0): 1 truncate cleaned up [ 283.482905][ T7653] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,noinit_itable,acl,jqfmt=vfsv0,usrjquota=.,,errors=continue. Quota mode: writeback. [ 283.699503][ T7658] autofs4:pid:7658:autofs_fill_super: called with bogus options [ 284.471166][ T7689] loop0: detected capacity change from 0 to 1764 [ 284.825320][ T3956] usb 4-1: USB disconnect, device number 10 [ 286.039307][ T7709] capability: warning: `syz.1.594' uses 32-bit capabilities (legacy support in use) [ 286.191844][ T7711] loop1: detected capacity change from 0 to 512 [ 286.260943][ T7696] loop3: detected capacity change from 0 to 32768 [ 286.308752][ T7696] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.592 (7696) [ 286.342958][ T7711] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.595: inode #1: comm syz.1.595: iget: illegal inode # [ 286.362092][ T7711] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.595: error while reading EA inode 1 err=-117 [ 286.377739][ T7711] EXT4-fs (loop1): 1 orphan inode deleted [ 286.383577][ T7711] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,journal_dev=0x0000000000007fff,noinit_itable,minixdf,resgid=0x0000000000000000,grpquota,init_itable,journal_dev=0x000000007fffffff,nodiscard,,errors=continue. Quota mode: writeback. [ 286.460686][ T7686] loop2: detected capacity change from 0 to 32768 [ 286.484627][ T7696] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 286.502915][ T7696] BTRFS info (device loop3): using free space tree [ 286.519727][ T7696] BTRFS info (device loop3): has skinny extents [ 286.531614][ T7686] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.589 (7686) [ 286.545313][ T7711] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.595: invalid indirect mapped block 234881024 (level 0) [ 286.578075][ T7686] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 286.597897][ T7686] BTRFS info (device loop2): force zlib compression, level 3 [ 286.615096][ T7686] BTRFS info (device loop2): using free space tree [ 286.661671][ T7686] BTRFS info (device loop2): has skinny extents [ 286.691597][ T7706] chnl_net:caif_netlink_parms(): no params data found [ 286.793029][ T7696] BTRFS info (device loop3): enabling ssd optimizations [ 286.878381][ T7696] overlayfs: './file1' not a directory [ 286.907369][ T7706] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.909086][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 286.922576][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.932463][ T7706] device bridge_slave_0 entered promiscuous mode [ 286.942174][ T7706] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.949628][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.957893][ T7706] device bridge_slave_1 entered promiscuous mode [ 287.233621][ T7686] BTRFS error (device loop2): open_ctree failed [ 287.318448][ T7706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.345305][ T7765] loop1: detected capacity change from 0 to 512 [ 287.421509][ T7706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.602907][ T3956] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 287.645558][ T7765] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.701552][ T7765] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 287.785084][ T7774] loop3: detected capacity change from 0 to 256 [ 287.802645][ T7706] team0: Port device team_slave_0 added [ 287.848618][ T7706] team0: Port device team_slave_1 added [ 287.875594][ T3956] usb 2-1: Using ep0 maxpacket: 16 [ 287.916600][ T7774] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.934194][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.941166][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.967603][ T4868] Bluetooth: hci5: command 0x1003 tx timeout [ 287.973283][ T7774] FAT-fs (loop3): Filesystem has been set read-only [ 287.974826][ T3583] Bluetooth: hci5: sending frame failed (-49) [ 287.980326][ T7774] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 288.032994][ T3956] usb 2-1: config 0 has an invalid interface number: 5 but max is 0 [ 288.041810][ T3956] usb 2-1: config 0 has no interface number 0 [ 288.070208][ T7774] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 288.080610][ T26] audit: type=1800 audit(1728285606.489:26): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.597" name="file1" dev="loop3" ino=1048667 res=0 errno=0 [ 288.102979][ T4868] Bluetooth: hci6: command 0x0409 tx timeout [ 288.114744][ T7706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.136120][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.150397][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.183115][ T3956] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 288.192182][ T3956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 288.209849][ T7706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.240874][ T3956] usb 2-1: SerialNumber: syz [ 288.263286][ T3956] usb 2-1: config 0 descriptor?? [ 288.302574][ T7706] device hsr_slave_0 entered promiscuous mode [ 288.313911][ T7706] device hsr_slave_1 entered promiscuous mode [ 288.336388][ T7706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.345798][ T7706] Cannot create hsr debugfs directory [ 288.433639][ T7706] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.499653][ T7706] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.530317][ T3677] usb 2-1: USB disconnect, device number 16 [ 288.589448][ T7706] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.600139][ T7774] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 288.647133][ T7774] x_tables: duplicate underflow at hook 1 [ 288.659763][ T7706] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.816293][ T7706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.825743][ T7706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 288.835129][ T7706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 288.844170][ T7706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.912392][ T7706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.935396][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.943934][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.954157][ T7706] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.972295][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.981202][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.992038][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.999147][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.021206][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.029423][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.038447][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.047401][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.054516][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.098366][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.113663][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.136210][ T7780] FAULT_INJECTION: forcing a failure. [ 289.136210][ T7780] name failslab, interval 1, probability 0, space 0, times 1 [ 289.149417][ T7780] CPU: 1 PID: 7780 Comm: syz.3.601 Not tainted 5.15.167-syzkaller #0 [ 289.157491][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 289.167530][ T7780] Call Trace: [ 289.170810][ T7780] [ 289.173723][ T7780] dump_stack_lvl+0x1e3/0x2d0 [ 289.178389][ T7780] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 289.184001][ T7780] ? panic+0x860/0x860 [ 289.188058][ T7780] ? read_lock_is_recursive+0x10/0x10 [ 289.193421][ T7780] ? do_raw_spin_lock+0x14a/0x370 [ 289.198441][ T7780] ? __fput+0x8e0/0x8e0 [ 289.202580][ T7780] should_fail+0x38a/0x4c0 [ 289.207000][ T7780] should_failslab+0x5/0x20 [ 289.211490][ T7780] slab_pre_alloc_hook+0x53/0xc0 [ 289.216412][ T7780] kmem_cache_alloc_node+0x49/0x2c0 [ 289.221592][ T7780] ? __alloc_skb+0xdd/0x590 [ 289.226087][ T7780] __alloc_skb+0xdd/0x590 [ 289.230424][ T7780] qrtr_endpoint_unregister+0x385/0x840 [ 289.235952][ T7780] ? qrtr_endpoint_register+0x4b0/0x4b0 [ 289.241477][ T7780] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 289.248051][ T7780] ? ima_file_free+0xeb/0x3c0 [ 289.252720][ T7780] qrtr_tun_release+0x3a/0x50 [ 289.257375][ T7780] ? qrtr_tun_open+0x1b0/0x1b0 [ 289.262120][ T7780] __fput+0x3fe/0x8e0 [ 289.266091][ T7780] task_work_run+0x129/0x1a0 [ 289.270664][ T7780] exit_to_user_mode_loop+0x106/0x130 [ 289.276017][ T7780] exit_to_user_mode_prepare+0xb1/0x140 [ 289.281544][ T7780] syscall_exit_to_user_mode+0x5d/0x240 [ 289.287074][ T7780] do_syscall_64+0x47/0xb0 [ 289.291505][ T7780] ? clear_bhb_loop+0x15/0x70 [ 289.296161][ T7780] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.302038][ T7780] RIP: 0033:0x7ff70bd01ff9 [ 289.306439][ T7780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.326045][ T7780] RSP: 002b:00007ff70a159038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 289.334540][ T7780] RAX: 0000000000000000 RBX: 00007ff70beba058 RCX: 00007ff70bd01ff9 [ 289.342626][ T7780] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 289.350581][ T7780] RBP: 00007ff70a159090 R08: 0000000000000000 R09: 0000000000000000 [ 289.358533][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.366488][ T7780] R13: 0000000000000000 R14: 00007ff70beba058 R15: 00007ffd33c43d98 [ 289.374463][ T7780] [ 289.408393][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.466753][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.654981][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.678129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.687145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.317740][ T2988] Bluetooth: hci5: command 0x1001 tx timeout [ 293.334922][ T3583] Bluetooth: hci5: sending frame failed (-49) [ 293.341337][ T2988] Bluetooth: hci6: command 0x041b tx timeout [ 293.437890][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.454589][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.482215][ T7706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.514475][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.784137][ T7797] loop2: detected capacity change from 0 to 40427 [ 293.812571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.829384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.866229][ T7797] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 293.874190][ T7797] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 293.954634][ T7797] F2FS-fs (loop2): Found nat_bits in checkpoint [ 294.021575][ T7797] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 294.028771][ T7797] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 294.322416][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.358858][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.394116][ T7706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.396991][ T7795] loop3: detected capacity change from 0 to 32768 [ 294.464045][ T7795] jfs: Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ" or missing value [ 294.495213][ T7800] loop1: detected capacity change from 0 to 32768 [ 294.559349][ T7795] loop3: detected capacity change from 0 to 2048 [ 294.592331][ T7800] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 scanned by syz.1.606 (7800) [ 294.654298][ T7800] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 294.664286][ T7800] BTRFS info (device loop1): using free space tree [ 294.670801][ T7800] BTRFS info (device loop1): has skinny extents [ 294.725915][ T7808] chnl_net:caif_netlink_parms(): no params data found [ 294.813452][ T7800] BTRFS info (device loop1): enabling ssd optimizations [ 294.858124][ T145] device hsr_slave_0 left promiscuous mode [ 294.865586][ T145] device hsr_slave_1 left promiscuous mode [ 294.882775][ T7800] overlayfs: './file1' not a directory [ 294.922858][ T1078] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 294.932291][ T7840] futex_wake_op: syz.2.609 tries to shift op by 32; fix this program [ 294.942526][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.989973][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.064512][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.082265][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.876710][ T1078] usb 4-1: Using ep0 maxpacket: 8 [ 296.041519][ T1078] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.064277][ T3681] Bluetooth: hci6: command 0x040f tx timeout [ 296.096614][ T7844] loop1: detected capacity change from 0 to 1024 [ 296.140611][ T1078] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 296.149822][ T1078] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.160515][ T1078] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 296.169585][ T1078] usb 4-1: config 1 has no interface number 1 [ 296.171557][ T7844] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.176183][ T1078] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 296.199871][ T1078] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 248, changing to 7 [ 296.210968][ T1078] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid maxpacket 33341, setting to 1024 [ 296.225461][ T145] device bridge_slave_1 left promiscuous mode [ 296.231653][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.242145][ T3676] Bluetooth: hci4: command 0x0409 tx timeout [ 296.275006][ T145] device bridge_slave_0 left promiscuous mode [ 296.281237][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.323854][ T145] device hsr_slave_0 left promiscuous mode [ 296.333457][ T145] device hsr_slave_1 left promiscuous mode [ 296.364031][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.386363][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.399889][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.420402][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.429346][ T145] device bridge_slave_1 left promiscuous mode [ 296.432962][ T1078] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.443361][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.461813][ T1078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.470235][ T1078] usb 4-1: Product: syz [ 296.482862][ T1078] usb 4-1: Manufacturer: syz [ 296.487502][ T1078] usb 4-1: SerialNumber: syz [ 296.525292][ T1078] usb 4-1: can't set config #1, error -71 [ 296.549475][ T1078] usb 4-1: USB disconnect, device number 11 [ 296.582128][ T145] device bridge_slave_0 left promiscuous mode [ 296.590916][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.632486][ T145] device veth1_macvtap left promiscuous mode [ 296.652922][ T145] device veth0_macvtap left promiscuous mode [ 296.681634][ T145] device veth1_vlan left promiscuous mode [ 296.702952][ T145] device veth0_vlan left promiscuous mode [ 296.710851][ T145] device veth1_macvtap left promiscuous mode [ 296.722933][ T145] device veth0_macvtap left promiscuous mode [ 296.733403][ T145] device veth1_vlan left promiscuous mode [ 296.743216][ T145] device veth0_vlan left promiscuous mode [ 296.852745][ T7852] loop2: detected capacity change from 0 to 32768 [ 296.892003][ T7852] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.611 (7852) [ 296.941138][ T7852] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 296.958051][ T7852] BTRFS info (device loop2): using free space tree [ 296.967394][ T7852] BTRFS info (device loop2): has skinny extents [ 297.072947][ T1078] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 297.222988][ T7852] BTRFS info (device loop2): enabling ssd optimizations [ 297.308589][ T145] team0 (unregistering): Port device team_slave_1 removed [ 297.322939][ T1078] usb 4-1: Using ep0 maxpacket: 8 [ 297.487216][ T145] team0 (unregistering): Port device team_slave_0 removed [ 297.503021][ T1078] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.783468][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.854595][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.039696][ T145] bond0 (unregistering): Released all slaves [ 298.057232][ T1078] usb 4-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 298.066497][ T1078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.075208][ T1078] usb 4-1: Product: syz [ 298.079596][ T1078] usb 4-1: Manufacturer: syz [ 298.084875][ T1078] usb 4-1: SerialNumber: syz [ 298.103244][ T3968] Bluetooth: hci6: command 0x0419 tx timeout [ 298.265895][ T1075] Bluetooth: hci4: command 0x041b tx timeout [ 298.343153][ T7855] udc-core: couldn't find an available UDC or it's busy [ 298.350119][ T7855] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 298.414090][ T145] team0 (unregistering): Port device team_slave_1 removed [ 298.436714][ T7855] udc-core: couldn't find an available UDC or it's busy [ 298.445138][ T145] team0 (unregistering): Port device team_slave_0 removed [ 298.460730][ T1078] appletouch 4-1:1.0: Failed to read mode from device. [ 298.468429][ T7855] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 298.476540][ T1078] appletouch: probe of 4-1:1.0 failed with error -5 [ 298.533256][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.586961][ T1078] usb 4-1: USB disconnect, device number 12 [ 298.732311][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.568824][ T145] bond0 (unregistering): Released all slaves [ 299.677160][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.695186][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.711773][ T7844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.610'. [ 299.731208][ T7844] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 299.850349][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.881260][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.904184][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.912042][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.008061][ T7706] device veth0_vlan entered promiscuous mode [ 300.046028][ T7892] loop2: detected capacity change from 0 to 40427 [ 300.133026][ T7892] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 300.156516][ T7706] device veth1_vlan entered promiscuous mode [ 300.289769][ T7897] loop3: detected capacity change from 0 to 40427 [ 300.326091][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.342953][ T1078] Bluetooth: hci4: command 0x040f tx timeout [ 300.343275][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.388881][ T7897] F2FS-fs (loop3): invalid crc value [ 300.484795][ T7916] loop1: detected capacity change from 0 to 128 [ 300.505266][ T7808] device bridge_slave_0 entered promiscuous mode [ 300.515434][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.522555][ T7916] EXT4-fs (loop1): Ignoring removed nobh option [ 300.529133][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.539127][ T7897] F2FS-fs (loop3): Found nat_bits in checkpoint [ 300.549406][ T7808] device bridge_slave_1 entered promiscuous mode [ 300.570419][ T7916] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 300.612148][ T7706] device veth0_macvtap entered promiscuous mode [ 300.654207][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 300.662050][ T7916] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038 (0x7fffffff) [ 300.680952][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 300.721694][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.746234][ T7897] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 300.749611][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.801404][ T7706] device veth1_macvtap entered promiscuous mode [ 300.821087][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.829917][ T7919] vivid-002: disconnect [ 300.834388][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.858338][ T7808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.883739][ T7915] vivid-002: reconnect [ 300.886014][ T7808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.930058][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.949041][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.961095][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.981178][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.992645][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.012115][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.022516][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.042928][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.069843][ T7278] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /25/mnt/lost+found: directory fails checksum at offset 1024 [ 301.094459][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.113349][ T7278] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 301.141382][ T7808] team0: Port device team_slave_0 added [ 301.150890][ T7278] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /25/mnt/lost+found: directory fails checksum at offset 1024 [ 301.154256][ T7808] team0: Port device team_slave_1 added [ 301.189505][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.216517][ T7278] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 301.223760][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.249016][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.263870][ T7278] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /25/mnt/lost+found: directory fails checksum at offset 1024 [ 301.265273][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.297497][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.303939][ T7278] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 301.311996][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.339078][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.351149][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.351464][ T7278] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /25/mnt/lost+found: directory fails checksum at offset 1024 [ 301.361066][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.397136][ T7278] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 301.406350][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.428801][ T7278] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /25/mnt/lost+found: directory fails checksum at offset 1024 [ 301.432905][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.470767][ T7278] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 301.489790][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.527845][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.644840][ T7808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.690514][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.723441][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.799496][ T7808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.839185][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.868755][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.896644][ T7706] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.917167][ T7706] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.926623][ T7897] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x3fa/0x630 [ 301.949997][ T7706] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.959059][ T7706] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.976550][ T7127] attempt to access beyond end of device [ 301.976550][ T7127] loop3: rw=2049, want=45104, limit=40427 [ 302.192665][ T7808] device hsr_slave_0 entered promiscuous mode [ 302.200750][ T7808] device hsr_slave_1 entered promiscuous mode [ 302.220804][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.248734][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.342751][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.427520][ T3613] Bluetooth: hci4: command 0x0419 tx timeout [ 302.649545][ T7924] loop2: detected capacity change from 0 to 64 [ 303.176607][ T7926] loop3: detected capacity change from 0 to 1024 [ 303.246222][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.278066][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.324899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.426990][ T7808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.100194][ T7808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.255152][ T7808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.886928][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 304.968611][ T7808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.876344][ T7936] chnl_net:caif_netlink_parms(): no params data found [ 306.023192][ T7848] Bluetooth: hci0: command 0x0409 tx timeout [ 307.218643][ T7963] sched: RT throttling activated [ 307.468533][ T7966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.470135][ T3613] Bluetooth: hci0: command 0x041b tx timeout [ 308.566770][ T7808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.624128][ T7808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.649608][ T7808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.670331][ T7936] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.684626][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.692748][ T7936] device bridge_slave_0 entered promiscuous mode [ 308.708463][ T7808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.722211][ T7936] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.735477][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.755066][ T7936] device bridge_slave_1 entered promiscuous mode [ 308.822966][ T7848] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 308.830994][ T3677] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 308.837232][ T7936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.860379][ T7936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.917036][ T7808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.945018][ T7936] team0: Port device team_slave_0 added [ 308.959237][ T7936] team0: Port device team_slave_1 added [ 308.979879][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.998263][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.038335][ T7808] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.059175][ T7936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.070511][ T7936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.072929][ T7848] usb 3-1: Using ep0 maxpacket: 16 [ 309.106186][ T7936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.124506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.141435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.151658][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.158762][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.176146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.196371][ T7936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.208357][ T7936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.213111][ T3677] usb 5-1: config 1 interface 0 has no altsetting 0 [ 309.253215][ T7848] usb 3-1: config index 0 descriptor too short (expected 57271, got 18) [ 309.258722][ T7936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.261598][ T7848] usb 3-1: config 238 has an invalid descriptor of length 0, skipping remainder of the config [ 309.274917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.300675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.312007][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.313009][ T7848] usb 3-1: config 238 has 0 interfaces, different from the descriptor's value: 16 [ 309.319121][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.345182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.411413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.423065][ T3677] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 309.453163][ T3677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.461234][ T3677] usb 5-1: Product: syz [ 309.467111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.481016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.489450][ T3677] usb 5-1: Manufacturer: syz [ 309.494406][ T3677] usb 5-1: SerialNumber: syz [ 309.502012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.510221][ T7848] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 309.520321][ T7848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.529857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.537794][ T7848] usb 3-1: Product: syz [ 309.541957][ T7848] usb 3-1: Manufacturer: syz [ 309.547388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.555457][ T7848] usb 3-1: SerialNumber: syz [ 309.566870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.575578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.585337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.594155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.615162][ T7936] device hsr_slave_0 entered promiscuous mode [ 309.637038][ T7936] device hsr_slave_1 entered promiscuous mode [ 309.648344][ T7936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.656242][ T7936] Cannot create hsr debugfs directory [ 309.769878][ T7936] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.829612][ T7936] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.878200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.886653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.900578][ T7808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.917455][ T7936] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.939894][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.949391][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.967944][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.977074][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.986228][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.996250][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.011853][ T7808] device veth0_vlan entered promiscuous mode [ 310.028321][ T7808] device veth1_vlan entered promiscuous mode [ 310.079457][ T7936] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.118557][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.127468][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 310.139751][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.149007][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.181316][ T7848] usb 3-1: USB disconnect, device number 20 [ 310.208879][ T7808] device veth0_macvtap entered promiscuous mode [ 310.218041][ T3677] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 310.258119][ T7808] device veth1_macvtap entered promiscuous mode [ 310.321682][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.354666][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.367406][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.379865][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.390033][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.400958][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.462616][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.482074][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.500650][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.512070][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.535676][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.549092][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.558071][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.566612][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.575211][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.583263][ T7848] Bluetooth: hci0: command 0x040f tx timeout [ 310.916591][ T7936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.047666][ T7936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.412748][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.429971][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.440256][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.451606][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.461477][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.766038][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.782324][ T3965] usb 5-1: USB disconnect, device number 13 [ 311.921726][ T3965] usblp0: removed [ 311.945883][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.045104][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.060474][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.071000][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.084374][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.091916][ T7936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.131678][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.146779][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.208850][ T7808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.243462][ T7808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.252329][ T7808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.272112][ T7808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.290029][ T7936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.680711][ T3962] Bluetooth: hci0: command 0x0419 tx timeout [ 313.034808][ T8025] fuse: Unknown parameter '0xffffffffffffffff' [ 313.141203][ T7936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.148573][ T7064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.167710][ T7064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.273484][ T8032] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 313.956875][ T4074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.997552][ T7936] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.054671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.094574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.157724][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.158558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.175200][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.293213][ T3962] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 314.324007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.353582][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.360636][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.689161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 314.703873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.711811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.722926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.731371][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.738448][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.765867][ T3962] usb 5-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 314.800839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.846508][ T3962] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 314.847893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.865897][ T3962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.900419][ T3956] Bluetooth: hci0: command 0x0405 tx timeout [ 314.923084][ T8036] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 314.939424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.949311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.964478][ T3962] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 315.009856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.018862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.030617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.050816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.059360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.069663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.078519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.099681][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 315.111055][ T7936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.169114][ T8058] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 315.234903][ T8058] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 315.280521][ T8058] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 315.384062][ T8069] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.665'. [ 315.545699][ T145] device hsr_slave_0 left promiscuous mode [ 315.552170][ T145] device hsr_slave_1 left promiscuous mode [ 315.741021][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.822262][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.243797][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.255595][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.271750][ T145] device bridge_slave_1 left promiscuous mode [ 316.313205][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.475670][ T145] device bridge_slave_0 left promiscuous mode [ 316.486833][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.521419][ T145] device hsr_slave_0 left promiscuous mode [ 316.935141][ T145] device hsr_slave_1 left promiscuous mode [ 316.946973][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.964567][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.982353][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.990228][ T3960] Bluetooth: hci0: command 0x0405 tx timeout [ 317.003587][ T1078] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 317.023461][ T3960] usb 5-1: USB disconnect, device number 14 [ 317.032569][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.068337][ T145] device bridge_slave_1 left promiscuous mode [ 317.083881][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.129780][ T145] device bridge_slave_0 left promiscuous mode [ 317.136375][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.153974][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.160261][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.201339][ T145] device veth1_macvtap left promiscuous mode [ 317.208274][ T145] device veth0_macvtap left promiscuous mode [ 317.223012][ T145] device veth1_vlan left promiscuous mode [ 317.229276][ T145] device veth0_vlan left promiscuous mode [ 317.243557][ T145] device veth1_macvtap left promiscuous mode [ 317.249744][ T145] device veth0_macvtap left promiscuous mode [ 317.273130][ T145] device veth1_vlan left promiscuous mode [ 317.281919][ T145] device veth0_vlan left promiscuous mode [ 317.393827][ T1078] usb 1-1: config 0 has an invalid interface number: 224 but max is 0 [ 317.412274][ T1078] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.424430][ T1078] usb 1-1: config 0 has no interface number 0 [ 317.607832][ T1078] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 317.743271][ T1078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.824256][ T1078] usb 1-1: Product: syz [ 317.858917][ T1078] usb 1-1: Manufacturer: syz [ 317.963435][ T1078] usb 1-1: SerialNumber: syz [ 318.078327][ T1078] usb 1-1: config 0 descriptor?? [ 318.183989][ T1078] ldusb 1-1:0.224: Interrupt in endpoint not found [ 318.401776][ T3677] usb 1-1: USB disconnect, device number 14 [ 318.797688][ T145] team0 (unregistering): Port device team_slave_1 removed [ 318.819747][ T145] team0 (unregistering): Port device team_slave_0 removed [ 318.870910][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.961655][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.063311][ T1075] Bluetooth: hci0: command 0x0405 tx timeout [ 319.231358][ T145] bond0 (unregistering): Released all slaves [ 319.796927][ T145] team0 (unregistering): Port device team_slave_1 removed [ 319.868636][ T145] team0 (unregistering): Port device team_slave_0 removed [ 319.913380][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.929934][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.572553][ T145] bond0 (unregistering): Released all slaves [ 320.787948][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.846055][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.862202][ T7936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.098855][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.119197][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.520548][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.545422][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.653478][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.661357][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.694996][ T7936] device veth0_vlan entered promiscuous mode [ 323.771470][ T7936] device veth1_vlan entered promiscuous mode [ 323.795726][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.314183][ T1075] Bluetooth: hci3: command 0x1003 tx timeout [ 325.358291][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.363875][ T3956] Bluetooth: hci1: command 0x0406 tx timeout [ 325.366398][ T3583] Bluetooth: hci3: sending frame failed (-49) [ 325.555136][ T7936] device veth0_macvtap entered promiscuous mode [ 325.649946][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.691478][ T7936] device veth1_macvtap entered promiscuous mode [ 325.709411][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.720281][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.733377][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.744911][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.755248][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.765861][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.776028][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.787739][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.799416][ T7936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.811503][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.822323][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.832686][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.843726][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.854496][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.866525][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.876840][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.891299][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.940817][ T7936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.951803][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.962966][ T3956] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 325.975803][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.008857][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.036332][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.074168][ T7936] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.094357][ T7936] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.119199][ T7936] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.139956][ T7936] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.473089][ T3956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.488665][ T3956] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 326.501158][ T3956] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 326.525316][ T3956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.539299][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 326.588054][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.588174][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.604064][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.613754][ T3956] usb 5-1: config 0 descriptor?? [ 326.633483][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.657306][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 326.674715][ T3956] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 326.700284][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.708138][ T3956] dvb-usb: bulk message failed: -22 (3/0) [ 326.785498][ T3956] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 326.837383][ T3956] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 326.862852][ T3956] usb 5-1: media controller created [ 326.868957][ T3956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.384654][ T7848] Bluetooth: hci3: command 0x1001 tx timeout [ 327.394676][ T3583] Bluetooth: hci3: sending frame failed (-49) [ 327.653184][ T3956] dvb-usb: bulk message failed: -22 (6/0) [ 327.663097][ T3956] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 327.711259][ T3956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 327.755082][ T3956] dvb-usb: schedule remote query interval to 150 msecs. [ 327.762051][ T3956] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 327.798201][ T8185] udc-core: couldn't find an available UDC or it's busy [ 327.813471][ T8185] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 327.893018][ T3677] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 327.916466][ T3956] dvb-usb: bulk message failed: -22 (1/0) [ 327.917281][ T1078] usb 5-1: USB disconnect, device number 15 [ 327.923708][ T3956] dvb-usb: error while querying for an remote control event. [ 327.986707][ T1078] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 328.196743][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 328.263617][ T3677] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 328.282275][ T3677] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.318862][ T3677] usb 2-1: config 0 has no interface number 0 [ 328.493030][ T3677] usb 2-1: New USB device found, idVendor=1110, idProduct=9001, bcdDevice=b2.a9 [ 328.531353][ T3677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.554929][ T3677] usb 2-1: Product: syz [ 328.559283][ T3677] usb 2-1: Manufacturer: syz [ 328.806361][ T3677] usb 2-1: SerialNumber: syz [ 329.646307][ T3677] usb 2-1: config 0 descriptor?? [ 329.756090][ T3677] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9001) Rev (0XB2A9): ADI930 [ 329.779625][ T1078] Bluetooth: hci3: command 0x1009 tx timeout [ 329.797166][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.704'. [ 329.913262][ T3677] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 329.942336][ T8221] sp0: Synchronizing with TNC [ 331.672001][ T3677] usb 2-1: device descriptor read/64, error -71 [ 332.265933][ T3677] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 332.389498][ T3677] usb 2-1: device reset changed ep0 maxpacket size! [ 332.405997][ T3677] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 332.424098][ T3677] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 332.438578][ T3677] usb 2-1: USB disconnect, device number 17 [ 332.453435][ T1078] usb 2-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2 [ 332.464165][ T1078] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw [ 332.475482][ T1078] ------------[ cut here ]------------ [ 332.481391][ T1078] sysfs group 'power' not found for kobject 'ueagle-atm!adi930.fw' [ 333.501835][ T3677] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 333.883689][ T1078] WARNING: CPU: 0 PID: 1078 at fs/sysfs/group.c:281 sysfs_remove_group+0x179/0x2a0 [ 333.893606][ T1078] Modules linked in: [ 333.897518][ T1078] CPU: 0 PID: 1078 Comm: kworker/0:2 Not tainted 5.15.167-syzkaller #0 [ 333.906137][ T1078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.922899][ T1078] Workqueue: events request_firmware_work_func SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.942440][ T1078] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 333.948780][ T1078] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 5a a3 cc ff 49 8b 14 24 48 c7 c7 c0 bb 99 8a 4c 89 f6 e8 07 83 4e ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 11 d9 82 ff [ 334.062015][ T1078] RSP: 0018:ffffc90004dff978 EFLAGS: 00010246 [ 334.068562][ T1078] RAX: 87a0ef4f5c0b6300 RBX: ffff8880795b0038 RCX: ffff888021a3bb80 [ 334.077400][ T1078] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 334.085767][ T1078] RBP: dffffc0000000000 R08: ffffffff81668a3c R09: ffffed10172067a8 [ 334.094054][ T1078] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880795b0008 [ 334.102083][ T1078] R13: 1ffffffff15f609c R14: ffffffff8afb04c0 R15: ffff8880247540e8 [ 334.113933][ T1078] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 334.136011][ T1078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.142627][ T1078] CR2: 00007fb4c423e000 CR3: 0000000028a38000 CR4: 00000000003506f0 [ 334.152665][ T1078] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 334.161118][ T1078] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 334.174603][ T1078] Call Trace: [ 334.177913][ T1078] [ 334.180847][ T1078] ? __warn+0x15b/0x300 [ 334.185339][ T3677] usb 2-1: device descriptor read/64, error -71 [ 334.191880][ T1078] ? sysfs_remove_group+0x179/0x2a0 [ 334.197636][ T1078] ? report_bug+0x1b7/0x2e0 [ 334.202161][ T1078] ? handle_bug+0x3d/0x70 [ 334.206913][ T1078] ? exc_invalid_op+0x16/0x40 [ 334.211595][ T1078] ? asm_exc_invalid_op+0x16/0x20 [ 334.217013][ T1078] ? __wake_up_klogd+0xcc/0x100 [ 334.221873][ T1078] ? sysfs_remove_group+0x179/0x2a0 [ 334.227434][ T1078] ? sysfs_remove_group+0x179/0x2a0 [ 334.232637][ T1078] ? dpm_sysfs_add+0xe5/0x270 [ 334.237646][ T1078] dpm_sysfs_add+0x203/0x270 [ 334.242246][ T1078] device_add+0x702/0xfd0 [ 334.246987][ T1078] firmware_fallback_sysfs+0x3f0/0xc90 [ 334.252463][ T1078] _request_firmware+0xbb1/0x1200 [ 334.257834][ T1078] request_firmware_work_func+0x126/0x270 [ 334.263815][ T1078] ? request_firmware_nowait+0x450/0x450 [ 334.269450][ T1078] ? do_raw_spin_unlock+0x137/0x8b0 [ 334.274986][ T1078] process_one_work+0x8a1/0x10c0 [ 334.280298][ T1078] ? worker_detach_from_pool+0x260/0x260 [ 334.286004][ T1078] ? _raw_spin_lock_irqsave+0x120/0x120 [ 334.291546][ T1078] ? kthread_data+0x4e/0xc0 [ 334.296080][ T1078] ? wq_worker_running+0x97/0x170 [ 334.301105][ T1078] worker_thread+0xaca/0x1280 [ 334.306204][ T1078] kthread+0x3f6/0x4f0 [ 334.310267][ T1078] ? rcu_lock_release+0x20/0x20 [ 334.315185][ T1078] ? kthread_blkcg+0xd0/0xd0 [ 334.319775][ T1078] ret_from_fork+0x1f/0x30 [ 334.324266][ T1078] [ 334.327392][ T1078] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 334.334732][ T1078] CPU: 0 PID: 1078 Comm: kworker/0:2 Not tainted 5.15.167-syzkaller #0 [ 334.342944][ T1078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.352988][ T1078] Workqueue: events request_firmware_work_func [ 334.359123][ T1078] Call Trace: [ 334.362410][ T1078] [ 334.365318][ T1078] dump_stack_lvl+0x1e3/0x2d0 [ 334.369974][ T1078] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 334.375582][ T1078] ? panic+0x860/0x860 [ 334.379720][ T1078] ? sysfs_remove_group+0x130/0x2a0 [ 334.384906][ T1078] ? sysfs_remove_group+0x130/0x2a0 [ 334.390192][ T1078] panic+0x318/0x860 [ 334.394083][ T1078] ? __warn+0x16a/0x300 [ 334.398333][ T1078] ? fb_is_primary_device+0xd0/0xd0 [ 334.403525][ T1078] ? ret_from_fork+0x1f/0x30 [ 334.408099][ T1078] ? sysfs_remove_group+0x179/0x2a0 [ 334.413280][ T1078] __warn+0x2b2/0x300 [ 334.417251][ T1078] ? sysfs_remove_group+0x179/0x2a0 [ 334.422433][ T1078] report_bug+0x1b7/0x2e0 [ 334.426756][ T1078] handle_bug+0x3d/0x70 [ 334.430912][ T1078] exc_invalid_op+0x16/0x40 [ 334.435412][ T1078] asm_exc_invalid_op+0x16/0x20 [ 334.440272][ T1078] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 334.446078][ T1078] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 5a a3 cc ff 49 8b 14 24 48 c7 c7 c0 bb 99 8a 4c 89 f6 e8 07 83 4e ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 11 d9 82 ff [ 334.465684][ T1078] RSP: 0018:ffffc90004dff978 EFLAGS: 00010246 [ 334.471736][ T1078] RAX: 87a0ef4f5c0b6300 RBX: ffff8880795b0038 RCX: ffff888021a3bb80 [ 334.479707][ T1078] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 334.487665][ T1078] RBP: dffffc0000000000 R08: ffffffff81668a3c R09: ffffed10172067a8 [ 334.495639][ T1078] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880795b0008 [ 334.503595][ T1078] R13: 1ffffffff15f609c R14: ffffffff8afb04c0 R15: ffff8880247540e8 [ 334.511561][ T1078] ? __wake_up_klogd+0xcc/0x100 [ 334.516404][ T1078] ? sysfs_remove_group+0x179/0x2a0 [ 334.521595][ T1078] ? dpm_sysfs_add+0xe5/0x270 [ 334.526262][ T1078] dpm_sysfs_add+0x203/0x270 [ 334.530857][ T1078] device_add+0x702/0xfd0 [ 334.535188][ T1078] firmware_fallback_sysfs+0x3f0/0xc90 [ 334.540652][ T1078] _request_firmware+0xbb1/0x1200 [ 334.545663][ T1078] request_firmware_work_func+0x126/0x270 [ 334.551386][ T1078] ? request_firmware_nowait+0x450/0x450 [ 334.556992][ T1078] ? do_raw_spin_unlock+0x137/0x8b0 [ 334.562172][ T1078] process_one_work+0x8a1/0x10c0 [ 334.567194][ T1078] ? worker_detach_from_pool+0x260/0x260 [ 334.572813][ T1078] ? _raw_spin_lock_irqsave+0x120/0x120 [ 334.578343][ T1078] ? kthread_data+0x4e/0xc0 [ 334.582916][ T1078] ? wq_worker_running+0x97/0x170 [ 334.587947][ T1078] worker_thread+0xaca/0x1280 [ 334.592653][ T1078] kthread+0x3f6/0x4f0 [ 334.596720][ T1078] ? rcu_lock_release+0x20/0x20 [ 334.601574][ T1078] ? kthread_blkcg+0xd0/0xd0 [ 334.606140][ T1078] ret_from_fork+0x1f/0x30 [ 334.610539][ T1078] [ 334.613739][ T1078] Kernel Offset: disabled [ 334.618400][ T1078] Rebooting in 86400 seconds..