last executing test programs: 11.300900887s ago: executing program 3 (id=281): syz_mount_image$cramfs(&(0x7f0000006600), &(0x7f0000000180)='./file0\x00', 0x200004c, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x144, &(0x7f0000006640)="$eJzs0L9LOnEcx/HXx/t+NSrTyMCGLGjoSMzzxLYIjQSh66BoF/SCQDNykbaGNv8EiUhoOhyiscGsxfBA7J9oOQgKGovPfU4qqKH9/dju+f784jZWLRlBQIKwXikfHhnVqlGc39a17M7V9c0E7z4AI9/ma876dhp4koD2P8A+AYoA7vzA3n7JWC5USvzbTgMygMyY6ArE2lHeQqIl3CYvAJ1p0dQfWtJtXr434DSP+3Qs8jb5ed4rgFoj2jIftnrdXGzpclbCaS46N8VwVv/SI0Zdzc40x8MSdo37C2QY3/cY78b68ZY5sHrapq7pVlJVV5JKQlFSA35b6t35KRwT9zD304twxIeX4+G7TGdu3zI/gM75m14O+EIAng+CQB+/TVitUciH/zfzoaAHkozh8YQQQgghhBBCyJ99BAAA//9M8GT9") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/45, 0x2d) 9.63779963s ago: executing program 3 (id=285): socket$inet6_mptcp(0xa, 0x1, 0x106) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)={0x0, 0x2, {0x0, 0x0, 0x0, 0x2}, 0x1}) 8.212211088s ago: executing program 2 (id=294): socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 7.08363346s ago: executing program 3 (id=298): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x24048084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0xe, 0x4, @local}}}]}]}, 0x6c}}, 0xc0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xe, {0x4, 0x1, 0x6, 0x3f, "470a0c6f4068beab1cdf63f2802b128e109fe9b92a90fbbadaa2ba4b4ef15c4f4a287c4cb38aee9a5023d983971f0da25e9c3e72062a137123feea13f17e4d"}}, 0x4b) 6.993425332s ago: executing program 1 (id=299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x2c, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x101}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 6.819080566s ago: executing program 1 (id=301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x0) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) socket$inet_udp(0x2, 0x2, 0x0) 5.288372066s ago: executing program 3 (id=302): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2046, 0x0, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="a0000000", @ANYBLOB="000829bd7000fcdbdf25060000000e0001006e657464657673"], 0xa0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044040) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000006, 0x10010, r3, 0xa448f000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES32=r3], 0x124}, 0x1, 0x0, 0x0, 0x24040801}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r4, 0xd96cb000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x5edec000) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x3, "7e4c17", 0x7, 0x84}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.287836036s ago: executing program 4 (id=303): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$eJzs3U2MG1fhAPBn73qTTdJ/nP4TuiRpm/DVFuhus1lCIYKmai5ETcUtUsUlStMSkQZEKkGrSvk4cYJWVbhCEadyqAAhtRcU9cSlEo3EpeJQOHAgClIlDlBIjNb7nnf8Ynfs7Ift9e8nvX1+88bz3syOx+OZee8FYGxVm38XFmYqIVx5+7Wjf//c36YXpzzWmqPe/DtZSNVCCJWYnsyW98HEUnzzw5dPdYorYb75N6XDUzda790aQrgY9oWroR52X7n26rvzTx6/dOzy/vfeOHy9WMaJVd0CAAAwPr559fDCrr/8cc+Oj96870jY1Jqezs/rMb0tnvcfiSf+6fy/GtrTlUIomsrmm4yhms030WG+Yjm1bL7JLuVPZcuttfL3tM23qaT8icK0TusNoyztx/VQqc62pavV2dml3+Sh+bt+qjJ77szZZ88PqKLAqvvn/SGEfUK/odFoXGhuwCGoiyDcaWhsH/QRCBhnre/SDvcLb3Mxv7KwMq2lTfZW/o3Hq53fD6tgvff/svJ//OfBln+bMS//l5cccVg9G3VvSuuVPkfbYjq/j5A/v9Tv5z8tL78fUeuxnt3uI4zK/YVu9ZxY53rcqW71z/eLjeprMU7b4etZfvHzk/9PR+V/DHT2r/W6/v/69MCvdS6GfUNQhw0dakNQB6Hn0Bj0AQgYWsvPzS1pRCk/f64vz99Ukr+5JH+6JH9LSf7WknwYZ7994Sfhlcry7/z8N32/18PSdba7Yvx/fdYnvx7Zb/n5c7/9Wmn5+fPEix5dYZ1grbx18sTpR595+trS8/+V1v5/K+7v+2K6Hj9bV+MM6Xphfl299ex/vb2capf57s7qc9dt8zeWStzZPl9l5/JyQuE4s7z8ex9q5s20v297t/rubZ+vns03HcPmrL75+cmW7H3p/CMdV9P2mszWt5atx1RWj3Rc2RHjvB5wJ9L+2O35/7R/zoRa5dkzZ08/EtNpP/3DRG3T4vQDxYX+an3qDqxMr+1/ZkJ7+59trem1auG40Dr9TseLA63ltU+fX0rW8vkPxnT6nvv2xHRz+uyp7559ZrVXHsbc+Rdf+s7Js2dPf9+L9GLaZvHCi7Ijx0Z9chDGx9wLz39v7vyLLz185vmTz51+7vS5g4cOHZyfP/SVgwtzzfP6ueKvfmAjWf7SH3RNAAAAAAAAAAAAgF794NjRa39658vvL7X/X27/l9r/pyd/U/v/H2Xt//N28qlVQGpnv6NDfnPcvbfa6zGVzVeL4f+z+u7MytmVve8TMW6N4xfb/6f29nm/rqk+92TT8/5703xZdwK39ZcylfVB0hovMDbY/1RMX47xLwIMUGW68+QYl/Vvnfb1Zv8UF9aqkqy11J9I2htSPyap/Xe3fp3S8X/HOtSR1bcezQkHvY5AZ/8YxvE/q8V04Ux80PX6+NBoDL4OKw/Dv52FVQyNhlE8gOEw6PE/03XPFJ/7/Tc2L4Y0243H24+Xef+lsBLDPv6k8jfW+J+t8e96Ov516F29rZ/n3kdX+PfPrr9fKDbs7vX4m69/6gd6Z3mZRR/F8tP6PxB6K7/xelZ+fkOoR//Jyt/SY/m3rf/eOyv/v7H8tNke/HSv5S/VuFJtr0d+3Tjd/8uvGyc3s/VPfXv2vf5xv+l3XI9bsXwYZ93Hme11BNvhNCrj/3aTP4fxpZhOB8L0nEP+jdxv/dPzFel7YFe2/ErJ99uojFPczbiP//vVGJd9HtL4v2l/rHdIVwvpWodtO+r7Cmw0Hwzj/b9RDheHoA7CkIbhGAO7GBqNxkA78taL+GANevsP+u7zoMsf9PYvk4//m5/D5+P/VrMfEPn4v/n78/F/8/x8fL08Px//N9+e+fi/ef492XLz64gzJfmfLMnfXZK/Zzl/ulP+3pL331uSv78k/76S/PtL8u8uyZ8oyf9Me37anVr5ny15f+PCx+c/WPL+h0ryN7pme5TCh2rc1h/GWd4+z+cfxke6/9Pt87+zJB8YXT9988ATT//mW/Wl9v9Trd9r6T7ekZiuxd/OP4zp/L53KKQX896J6b9m+cN+vQPGSd5/Rv79/kBJPjC60nNePt8whiqbO0+OcToudOu3qtt5PqPl8zH+Qoy/GOOHYzwb47kYH4jx/DrVj7XxxK9/d/iVyvLv/e1Zfq/Pk+ftgfJ+og72WJ/8+kC/z7Pn/fj1a6Xl32FzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIGpNv8uLMxUQrjy9mtHTxw/M7c45bHWHPXm38lCqtZ6XwiPxHgixj+PL25++PKpYnwrxpUwHyqh0poenrrRKmlrCOFi2BeuhnrYfeXaq+/OP3n80rHL+9974/D1tdsCAAAAsPH9LwAA//8SciNw") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x24048084) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x1000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0xe, 0x4, @local}}}]}]}, 0x6c}}, 0xc0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xe, {0x4, 0x1, 0x6, 0x3f, "470a0c6f4068beab1cdf63f2802b128e109fe9b92a90fbbadaa2ba4b4ef15c4f4a287c4cb38aee9a5023d983971f0da25e9c3e72062a137123feea13f17e4d"}}, 0x4b) 5.263481016s ago: executing program 2 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f0000000540)={&(0x7f00000004c0)="7c0f6ab0825f0bbb0d1d8c175f637818a0572e8f09c80a51bcf6b8b44b6fd4ad7b14cfa6bcfaaa64d6b66cf0ae66a23a4b79adf76ed060c0c6da359a090477e3c0c8404d7ffce4a487", 0x49}) close_range(r3, 0xffffffffffffffff, 0x0) 4.438908873s ago: executing program 1 (id=306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='contention_end\x00', r0}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$video4linux(0x0, 0x3, 0x400) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000080)={0x0, 0x4003, @name="ddac5935faa72d6dc6de279dd26ac35004002955d52925a9eddf9f87e74cd15a"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x14002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x26020480) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r6, 0x358, 0x800000000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) 4.396805394s ago: executing program 0 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0xd0, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x70, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_b, @device_b, @from_mac, {0x4, 0x3}}, 0x2, @random, 0x8086, @val, @val, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x0, 0x2, 0xc, 0xff56}}, @val={0x6, 0x2, 0x46}, @void, @val={0x25, 0x3, {0x0, 0x0, 0xf5}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x7, 0x0, {0x8001, 0xff, 0x0, 0x55, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x3, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x4}}, @void}}, @NL80211_ATTR_PROBE_RESP={0x2b, 0x91, "ba569c8a7dab9c789c89e16f6c59e4d0a3549bb04a345c12d9f1df71e09d2f033a8bfabc9efb04"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x101}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 3.797380155s ago: executing program 2 (id=308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x24}}, 0x40080) 3.55824761s ago: executing program 0 (id=309): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000004000000dd00", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000058f64aabc5cf9858401528d23787e05125c8febd66273ba8a883f9aa7472244c3e25", @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280), 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.445892122s ago: executing program 1 (id=310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 3.397484903s ago: executing program 3 (id=311): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bd992d40431950220100010203010902120001000000000904"], 0x0) 3.329276005s ago: executing program 2 (id=312): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0xfffffffffffffffc}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x10000000, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 3.203335047s ago: executing program 4 (id=313): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r5], 0x4) 3.200385867s ago: executing program 2 (id=314): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@user_xattr}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0xb}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0xfc, 0x0, &(0x7f0000000100)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3.06147049s ago: executing program 0 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 3.06112494s ago: executing program 0 (id=316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x0) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) socket$inet_udp(0x2, 0x2, 0x0) 2.881216133s ago: executing program 4 (id=317): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x242800, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.776834606s ago: executing program 4 (id=318): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="07ef28bd7000fbdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x41094) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000540)={0x1, 0x1, 0x1000, 0x32, &(0x7f0000000240)="af3f037935d45192ded6e845777f980098af8adebed3f4e87b3ba60cf8c2a5cdffca39c1312ff47a8a02ab975209df4300e0", 0x93, 0x0, &(0x7f0000000380)="3375fb011365c59f45d06c5ac9c4c1921bec567b6f28125821a38aeba6175aaefeba175607072d44396b1d60ddc4296d403aefeb719d50105c02de90f832dfa1b93922acd2aa0fb976a755ed50493c7f07286a20a1927135f8c914613443321dfab467a43723bfe691bf4c4b61f1fc64bae6a6db0289c303219e4bb618fdac57402f083669abb0a9693cb32c991713a1fe90c6"}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) 1.657339767s ago: executing program 0 (id=319): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="1a000000020000", 0x7) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005c80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x12, r6, {0x0, 0xfff3}, {0xe, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x9, 0x1, '^'}, 0x9) 1.656973167s ago: executing program 1 (id=320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='contention_end\x00', r0}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$video4linux(0x0, 0x3, 0x400) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000080)={0x0, 0x4003, @name="ddac5935faa72d6dc6de279dd26ac35004002955d52925a9eddf9f87e74cd15a"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x14002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x26020480) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0x800000000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) 1.632861338s ago: executing program 4 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 1.5483294s ago: executing program 4 (id=322): socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 1.51792112s ago: executing program 3 (id=323): socket$inet6_mptcp(0xa, 0x1, 0x106) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)={0x0, 0x2, {0x0, 0x0, 0x0, 0x2}, 0x1}) 173.122237ms ago: executing program 1 (id=324): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x24048084) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x1000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0xe, 0x4, @local}}}]}]}, 0x6c}}, 0xc0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xe, {0x4, 0x1, 0x6, 0x3f, "470a0c6f4068beab1cdf63f2802b128e109fe9b92a90fbbadaa2ba4b4ef15c4f4a287c4cb38aee9a5023d983971f0da25e9c3e72062a137123feea13f17e4d"}}, 0x4b) 112.194168ms ago: executing program 0 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd6a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x2, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0x9}, 0xb, 0xfffffffd, 0x80008, 0x5, 0x6, 0x1, 0x7, 0xf, 0x8, 0x9, {0xffff1c72, 0x3, 0x1000, 0x102, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008820}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=326): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 48.054739][ T4173] cgroup: Unknown subsys name 'net' [ 48.244543][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.455297][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.193498][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.227862][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 51.250600][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 51.258916][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 51.321336][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.377321][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.384482][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.392878][ T4185] device bridge_slave_0 entered promiscuous mode [ 51.424891][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.432115][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.440185][ T4185] device bridge_slave_1 entered promiscuous mode [ 51.460332][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.467382][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.475693][ T4186] device bridge_slave_0 entered promiscuous mode [ 51.507316][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.514566][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.522615][ T4193] device bridge_slave_0 entered promiscuous mode [ 51.530659][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.537708][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.546001][ T4186] device bridge_slave_1 entered promiscuous mode [ 51.554692][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.578259][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.585787][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.593709][ T4193] device bridge_slave_1 entered promiscuous mode [ 51.607871][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.617330][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.624530][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.632243][ T4194] device bridge_slave_0 entered promiscuous mode [ 51.663563][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.678146][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.685376][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.693178][ T4194] device bridge_slave_1 entered promiscuous mode [ 51.701056][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.708102][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.716117][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.730951][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.753162][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.760394][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.768264][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.776758][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.787975][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.805174][ T4185] team0: Port device team_slave_0 added [ 51.837227][ T4185] team0: Port device team_slave_1 added [ 51.844709][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.869798][ T4186] team0: Port device team_slave_0 added [ 51.883234][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.894154][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.905462][ T4193] team0: Port device team_slave_0 added [ 51.913125][ T4193] team0: Port device team_slave_1 added [ 51.920241][ T4186] team0: Port device team_slave_1 added [ 51.947714][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.972045][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.978985][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.005232][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.019778][ T4194] team0: Port device team_slave_0 added [ 52.047438][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.054517][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.080460][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.097377][ T4194] team0: Port device team_slave_1 added [ 52.108897][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.116535][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.142704][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.154418][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.161523][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.187429][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.200009][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.206946][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.233353][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.254085][ T4184] team0: Port device team_slave_0 added [ 52.267917][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.275420][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.301526][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.327570][ T4184] team0: Port device team_slave_1 added [ 52.356523][ T4185] device hsr_slave_0 entered promiscuous mode [ 52.364014][ T4185] device hsr_slave_1 entered promiscuous mode [ 52.371217][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.378157][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.404212][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.438880][ T4193] device hsr_slave_0 entered promiscuous mode [ 52.445679][ T4193] device hsr_slave_1 entered promiscuous mode [ 52.452453][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.460865][ T4193] Cannot create hsr debugfs directory [ 52.473117][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.480319][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.506391][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.517826][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.525039][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.550951][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.594280][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.601447][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.627469][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.680576][ T4186] device hsr_slave_0 entered promiscuous mode [ 52.687224][ T4186] device hsr_slave_1 entered promiscuous mode [ 52.693876][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.701843][ T4186] Cannot create hsr debugfs directory [ 52.721923][ T4194] device hsr_slave_0 entered promiscuous mode [ 52.728548][ T4194] device hsr_slave_1 entered promiscuous mode [ 52.735097][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.743157][ T4194] Cannot create hsr debugfs directory [ 52.765374][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.772499][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.778993][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.786654][ T4184] Cannot create hsr debugfs directory [ 52.830415][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 52.839281][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 52.909569][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 52.919568][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 52.925651][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.074126][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.085458][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.098459][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.113132][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.149573][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.160273][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.173512][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.191186][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.239025][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.251055][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.260473][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.272863][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.319215][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.363354][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.372708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.383380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.392248][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.413165][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.422138][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.431443][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.438571][ T3085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.447407][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.456711][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.465097][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.472157][ T3085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.481913][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.490567][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.522257][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.531226][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.540588][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.555062][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.579672][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.589079][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.602367][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.611136][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.621716][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.633088][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.643319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.652249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.670720][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.684394][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.695355][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.705272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.714749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.723834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.732233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.744506][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.767663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.783314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.796201][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.803314][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.827523][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.842507][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.859612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.868202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.876974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.886499][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.893597][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.903108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.911811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.919680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.927268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.936085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.945140][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.952236][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.960146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.968651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.977327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.985759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.994424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.002923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.011582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.021592][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.030791][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.039063][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.046134][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.059970][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.076873][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.087584][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.122001][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.135941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.149959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.159266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.170879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.179215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.186882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.194959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.203904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.214590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.231011][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.244694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.256278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.265870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.275401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.285368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.302683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.311580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.322561][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.338809][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.357022][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.377874][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.389075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.404747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.427326][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.448200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.462378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.470908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.478532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.489308][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.498220][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.507556][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.527335][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.536404][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.545673][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.552772][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.585152][ T4193] device veth0_vlan entered promiscuous mode [ 54.613139][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.623433][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.632450][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.643826][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.652464][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.660973][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.667997][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.676143][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.687860][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.697515][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.710225][ T4193] device veth1_vlan entered promiscuous mode [ 54.726564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.736425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.745394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.754464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.791028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.802132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.810867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.819137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.828191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.839540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.846976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.856236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.864420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.874285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.882121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.891424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.900814][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.908605][ T4185] device veth0_vlan entered promiscuous mode [ 54.915330][ T4175] Bluetooth: hci1: command 0x041b tx timeout [ 54.921767][ T4185] device veth1_vlan entered promiscuous mode [ 54.932661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.940292][ T4175] Bluetooth: hci0: command 0x041b tx timeout [ 54.942581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.959114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.978561][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.991375][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 55.002477][ T4261] Bluetooth: hci3: command 0x041b tx timeout [ 55.008089][ T4193] device veth0_macvtap entered promiscuous mode [ 55.017494][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 55.021463][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.036257][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.052759][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.061326][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.070989][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.079277][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.087890][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.096395][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.104368][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.112050][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.120618][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.131686][ T4193] device veth1_macvtap entered promiscuous mode [ 55.143055][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.158459][ T4185] device veth0_macvtap entered promiscuous mode [ 55.166949][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.177365][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.185678][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.194478][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.204296][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.213383][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.220475][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.228039][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.237782][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.246180][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.253254][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.261007][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.277385][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.306939][ T4185] device veth1_macvtap entered promiscuous mode [ 55.328886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.340040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.355130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.364329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.378587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.387468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.398008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.412791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.424966][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.438367][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.447816][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.462830][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.474416][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.496138][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.510116][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.518653][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.527325][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.547991][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.558663][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.593774][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.603227][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.614244][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.624682][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.653246][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.665467][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.677572][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.685232][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.693123][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.702049][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.711284][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.720932][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.734592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.744196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.763634][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.775982][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.787439][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.822097][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.831213][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.844933][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.854091][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.863221][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.872033][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.885972][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.900456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.908688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.933822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.942642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.971299][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.978755][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.000414][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.020311][ T4194] device veth0_vlan entered promiscuous mode [ 56.057681][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.070810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.083278][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.088415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.100992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.108879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.117706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.133924][ T4194] device veth1_vlan entered promiscuous mode [ 56.158204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.173611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.182067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.217152][ T4186] device veth0_vlan entered promiscuous mode [ 56.224444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.233719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.241912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.252457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.261722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.279470][ T3081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.287433][ T3081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.295095][ T4194] device veth0_macvtap entered promiscuous mode [ 56.315003][ T4186] device veth1_vlan entered promiscuous mode [ 56.325496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.333792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.342814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.352083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.360198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.368665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.382398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.396218][ T4194] device veth1_macvtap entered promiscuous mode [ 56.411982][ T4184] device veth0_vlan entered promiscuous mode [ 56.433499][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.450572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.466165][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.469271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.484483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.508773][ T4184] device veth1_vlan entered promiscuous mode [ 56.525778][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.542749][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.573216][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.585546][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.597539][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.630146][ T4186] device veth0_macvtap entered promiscuous mode [ 56.637386][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.652822][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.664192][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.677712][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.690963][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.692869][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.709234][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.721304][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.729138][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.740312][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.758667][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.777328][ T4184] device veth0_macvtap entered promiscuous mode [ 56.791781][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.804904][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.814422][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.827915][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.846476][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.855565][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.866004][ T4186] device veth1_macvtap entered promiscuous mode [ 56.876764][ T4184] device veth1_macvtap entered promiscuous mode [ 56.898031][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.910725][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.926651][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.942319][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.955043][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.964759][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.978719][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.989808][ T4175] Bluetooth: hci0: command 0x040f tx timeout [ 57.002177][ T4175] Bluetooth: hci1: command 0x040f tx timeout [ 57.070440][ T4175] Bluetooth: hci4: command 0x040f tx timeout [ 57.079055][ T4175] Bluetooth: hci3: command 0x040f tx timeout [ 57.087375][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.100605][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.111276][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.122546][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.127658][ T4175] Bluetooth: hci2: command 0x040f tx timeout [ 57.132816][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.149265][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.161474][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.174240][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.184855][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.331194][ T4302] loop2: detected capacity change from 0 to 256 [ 57.353076][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.566658][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.701756][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.722612][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.734963][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.812403][ T4302] exfat: Deprecated parameter 'utf8' [ 57.817783][ T4302] exfat: Deprecated parameter 'namecase' [ 57.823637][ T4302] exfat: Deprecated parameter 'namecase' [ 57.829277][ T4302] exfat: Deprecated parameter 'utf8' [ 57.843232][ T4302] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x0719abd0, checksum : 0x1119abd0) [ 57.853724][ T4302] exFAT-fs (loop2): invalid boot region [ 57.859270][ T4302] exFAT-fs (loop2): failed to recognize exfat type [ 57.920081][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.930527][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.947515][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.961622][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.608998][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.636784][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.647000][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.657823][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.667795][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.678480][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.688385][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.698817][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.711738][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.722753][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.734469][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.744592][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.755876][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.766149][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.776842][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.786674][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.797925][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.808709][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.816288][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.827254][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.843134][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.853955][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.871882][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.886786][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.900595][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.909583][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.929717][ T4236] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.941339][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.035631][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.045376][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.054254][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.070925][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 59.089687][ T4258] Bluetooth: hci0: command 0x0419 tx timeout [ 59.142614][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.159352][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 59.168258][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 59.192868][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 59.246465][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 59.269575][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 59.570506][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.584203][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.601554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.639609][ T4236] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 59.678490][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.687050][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.690338][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.706094][ T3085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.710066][ T4236] usb 3-1: Product: syz [ 59.737826][ T3085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.755537][ T4236] usb 3-1: Manufacturer: syz [ 59.764923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.767491][ T4236] usb 3-1: SerialNumber: syz [ 59.784243][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.799046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.806617][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.811835][ T4236] usb 3-1: config 0 descriptor?? [ 59.817865][ T4319] loop1: detected capacity change from 0 to 1024 [ 59.826584][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.856589][ T3085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.879565][ T3085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.888292][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.955403][ T3085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.982648][ T3085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.995975][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.049349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 60.058325][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 60.067321][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 60.076291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 60.085253][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.094271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.103285][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.140298][ T4327] hfsplus: request for non-existent node 134217728 in B*Tree [ 61.164596][ T4323] ODEBUG: Out of memory. ODEBUG disabled [ 61.215028][ T4327] hfsplus: request for non-existent node 134217728 in B*Tree [ 61.277637][ T4329] usb 3-1: USB disconnect, device number 2 [ 61.906124][ T4323] syz.3.4 (4323): drop_caches: 2 [ 62.005972][ T4338] loop0: detected capacity change from 0 to 128 [ 62.217350][ T4338] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.483581][ T4341] loop3: detected capacity change from 0 to 4096 [ 62.943307][ T4338] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: none. [ 62.958801][ T4338] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.951409][ T4383] device bridge_slave_1 left promiscuous mode [ 67.979112][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.072014][ T4378] loop1: detected capacity change from 0 to 64 [ 68.676451][ T4372] Zero length message leads to an empty skb [ 68.698313][ T4383] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 69.748976][ T4405] loop1: detected capacity change from 0 to 64 [ 69.924063][ T4408] device syzkaller0 entered promiscuous mode [ 71.192917][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.199785][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.227291][ T1107] cfg80211: failed to load regulatory.db [ 71.885750][ T4420] loop1: detected capacity change from 0 to 2048 [ 72.909622][ T4420] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.933091][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop1 [ 73.021803][ T4431] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.037443][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop1 [ 73.052122][ T4420] attempt to access beyond end of device [ 73.052122][ T4420] loop1: rw=524288, want=65536, limit=2048 [ 75.047316][ T4455] loop3: detected capacity change from 0 to 2048 [ 75.089733][ T4445] sctp: failed to load transform for md5: -4 [ 75.196735][ T4455] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.721599][ T4461] loop1: detected capacity change from 0 to 2048 [ 75.740507][ T4455] attempt to access beyond end of device [ 75.740507][ T4455] loop3: rw=524288, want=65536, limit=2048 [ 75.752262][ T4469] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.830254][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop3 [ 76.029737][ T4461] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.262218][ T4471] loop4: detected capacity change from 0 to 32768 [ 76.288676][ T4331] udevd[4331]: incorrect nilfs2 checksum on /dev/loop1 [ 76.309780][ T4471] XFS: ikeep mount option is deprecated. [ 76.435912][ T4461] attempt to access beyond end of device [ 76.435912][ T4461] loop1: rw=524288, want=65536, limit=2048 [ 76.451050][ T4471] XFS (loop4): Mounting V5 Filesystem [ 76.472229][ T4484] autofs4:pid:4484:autofs_fill_super: called with bogus options [ 76.609535][ T4477] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.746611][ T4484] loop0: detected capacity change from 0 to 4096 [ 77.037279][ T4481] loop2: detected capacity change from 0 to 32768 [ 77.585077][ T4484] ntfs3: Unknown parameter '†h00000000000000000ó901' [ 77.614243][ T4481] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.49 (4481) [ 77.622137][ T4471] XFS (loop4): Ending clean mount [ 77.637838][ T4471] XFS (loop4): Quotacheck needed: Please wait. [ 77.702691][ T4481] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 77.711964][ T4481] BTRFS info (device loop2): using free space tree [ 77.718599][ T4481] BTRFS info (device loop2): has skinny extents [ 78.331743][ T4471] XFS (loop4): Quotacheck: Done. [ 78.748490][ T4481] BTRFS info (device loop2): enabling ssd optimizations [ 79.797937][ T4521] loop0: detected capacity change from 0 to 64 [ 79.885494][ T4194] XFS (loop4): Unmounting Filesystem [ 80.989801][ T4529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.56'. [ 83.384949][ T4559] loop3: detected capacity change from 0 to 760 [ 83.517971][ T4559] isofs_fill_super: root inode is not a directory. Corrupted media? [ 83.716451][ T4563] loop2: detected capacity change from 0 to 2048 [ 83.754132][ T4569] loop3: detected capacity change from 0 to 128 [ 84.197628][ T4563] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.465307][ T4569] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 84.509783][ T4563] attempt to access beyond end of device [ 84.509783][ T4563] loop2: rw=524288, want=65536, limit=2048 [ 84.529917][ T4571] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.541717][ T4568] loop1: detected capacity change from 0 to 2048 [ 85.105674][ T4576] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.486610][ T4602] loop4: detected capacity change from 0 to 128 [ 87.575920][ T4602] ======================================================= [ 87.575920][ T4602] WARNING: The mand mount option has been deprecated and [ 87.575920][ T4602] and is ignored by this kernel. Remove the mand [ 87.575920][ T4602] option from the mount to silence this warning. [ 87.575920][ T4602] ======================================================= [ 88.032501][ T4602] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 88.084224][ T4602] hpfs: filesystem error: improperly stopped [ 88.128147][ T4609] loop2: detected capacity change from 0 to 512 [ 88.143602][ T4602] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 88.191897][ T4602] hpfs: You really don't want any checks? You are crazy... [ 88.200058][ T4602] hpfs: hpfs_map_sector(): read error [ 88.205538][ T4602] hpfs: code page support is disabled [ 88.212236][ T4602] hpfs: hpfs_map_4sectors(): unaligned read [ 88.218398][ T4602] hpfs: hpfs_map_4sectors(): unaligned read [ 88.228198][ T4602] hpfs: filesystem error: unable to find root dir [ 88.423970][ T4613] syz.1.78 sent an empty control message without MSG_MORE. [ 89.592552][ T4624] loop2: detected capacity change from 0 to 512 [ 89.750661][ T4622] loop4: detected capacity change from 0 to 2048 [ 89.935256][ T4622] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.975093][ T4624] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 90.009066][ T4624] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.075287][ T4622] attempt to access beyond end of device [ 90.075287][ T4622] loop4: rw=524288, want=65536, limit=2048 [ 90.087646][ T4629] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.367016][ T4634] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.136586][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 92.330772][ T4647] loop4: detected capacity change from 0 to 512 [ 92.535133][ T4647] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.594152][ T4647] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.020893][ T4662] loop4: detected capacity change from 0 to 2048 [ 93.343003][ T4662] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 93.527515][ T4664] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.538794][ T4662] attempt to access beyond end of device [ 93.538794][ T4662] loop4: rw=524288, want=65536, limit=2048 [ 93.707597][ T4669] loop1: detected capacity change from 0 to 512 [ 93.719092][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop4 [ 93.892708][ T4669] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 94.107287][ T4669] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 94.280635][ T4669] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.506491][ T4659] loop3: detected capacity change from 0 to 32768 [ 94.557127][ T4675] EXT4-fs error (device loop1): __ext4_new_inode:1286: comm syz.1.95: failed to insert inode 16: doubly allocated? [ 94.569069][ T4680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.97'. [ 94.670311][ T4681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 94.742270][ T4659] JBD2: Ignoring recovery information on journal [ 94.986298][ T4659] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.205102][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.818673][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 95.825313][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 95.950218][ T1107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 96.130285][ T1107] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 96.151705][ T1107] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 96.187997][ T1107] usb 3-1: Product: syz [ 96.207458][ T1107] usb 3-1: Manufacturer: syz [ 96.233004][ T1107] usb 3-1: SerialNumber: syz [ 96.927860][ T1107] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 96.941845][ T1107] usb 3-1: Handspring Visor / Palm OS: port 205, is for unknown use [ 96.952165][ T1107] usb 3-1: Handspring Visor / Palm OS: port 113, is for unknown use [ 96.960687][ T1107] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 98.664256][ T1107] usb 3-1: palm_os_3_probe - error -110 getting bytes available request [ 98.735728][ T4708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.806599][ T1107] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 98.948194][ T4724] loop3: detected capacity change from 0 to 32768 [ 98.982688][ T1107] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 99.000907][ T4724] XFS: ikeep mount option is deprecated. [ 99.035986][ T1107] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 99.967648][ T4736] netlink: set zone limit has 8 unknown bytes [ 100.186983][ T4736] loop0: detected capacity change from 0 to 32768 [ 100.199936][ T1107] usb 3-1: USB disconnect, device number 3 [ 100.230940][ T1107] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 100.259639][ T4740] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 100.266472][ T4740] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.341136][ T4740] vhci_hcd vhci_hcd.0: Device attached [ 100.360368][ T4724] XFS (loop3): Mounting V5 Filesystem [ 100.369165][ T1107] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 100.412562][ T4740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.424130][ T4736] XFS (loop0): Mounting V5 Filesystem [ 100.463393][ T4748] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 100.470022][ T4748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.484208][ T1107] visor 3-1:1.0: device disconnected [ 100.520640][ T4748] vhci_hcd vhci_hcd.0: Device attached [ 100.613244][ T4750] loop4: detected capacity change from 0 to 40427 [ 100.617981][ T4751] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 100.626221][ T4751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.640881][ T4736] XFS (loop0): Ending clean mount [ 100.664455][ T4723] loop2: detected capacity change from 0 to 32768 [ 100.679918][ T4750] F2FS-fs (loop4): build fault injection attr: rate: 25, type: 0x1ffff [ 100.707127][ T4751] vhci_hcd vhci_hcd.0: Device attached [ 100.708541][ T4724] XFS (loop3): Ending clean mount [ 100.737003][ T4724] XFS (loop3): Quotacheck needed: Please wait. [ 100.755897][ T4754] vhci_hcd: connection closed [ 100.757492][ T4752] vhci_hcd: connection closed [ 100.758307][ T9] vhci_hcd: stop threads [ 100.769493][ T4741] vhci_hcd: connection closed [ 100.779977][ T4533] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 100.820672][ T9] vhci_hcd: release socket [ 100.853803][ T4724] XFS (loop3): Quotacheck: Done. [ 100.859697][ T4743] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 100.884751][ T9] vhci_hcd: disconnect device [ 100.895507][ T4723] XFS: ikeep mount option is deprecated. [ 100.920599][ T9] vhci_hcd: stop threads [ 100.925238][ T9] vhci_hcd: release socket [ 100.929836][ T9] vhci_hcd: disconnect device [ 100.936027][ T9] vhci_hcd: stop threads [ 100.940637][ T4723] XFS: noikeep mount option is deprecated. [ 100.948751][ T9] vhci_hcd: release socket [ 100.963605][ T9] vhci_hcd: disconnect device [ 101.834566][ T4186] XFS (loop0): Unmounting Filesystem [ 102.116521][ T4773] loop1: detected capacity change from 0 to 32768 [ 102.131789][ T4184] XFS (loop3): Unmounting Filesystem [ 102.182373][ T4773] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.118 (4773) [ 102.201706][ T4773] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 102.210504][ T4773] BTRFS info (device loop1): using free space tree [ 102.218602][ T4773] BTRFS info (device loop1): has skinny extents [ 102.521503][ T4773] BTRFS info (device loop1): enabling ssd optimizations [ 102.691031][ T4800] syz.2.124 uses obsolete (PF_INET,SOCK_PACKET) [ 103.561731][ T4808] loop4: detected capacity change from 0 to 2048 [ 103.622503][ T4808] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.671626][ T4814] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.682810][ T4808] attempt to access beyond end of device [ 103.682810][ T4808] loop4: rw=524288, want=65536, limit=2048 [ 103.708112][ T4813] netlink: 148 bytes leftover after parsing attributes in process `syz.3.120'. [ 103.970231][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'. [ 105.158327][ T4831] loop2: detected capacity change from 0 to 32768 [ 105.210011][ T4831] XFS: ikeep mount option is deprecated. [ 105.331132][ T4838] loop3: detected capacity change from 0 to 32768 [ 105.373187][ T4831] XFS (loop2): Mounting V5 Filesystem [ 105.393917][ T4838] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.132 (4838) [ 105.410429][ T4838] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 105.419145][ T4838] BTRFS info (device loop3): using free space tree [ 105.425713][ T4838] BTRFS info (device loop3): has skinny extents [ 105.553338][ T4831] XFS (loop2): Ending clean mount [ 105.589754][ T4831] XFS (loop2): Quotacheck needed: Please wait. [ 105.647144][ T4838] BTRFS info (device loop3): enabling ssd optimizations [ 105.755467][ T25] audit: type=1800 audit(1757656214.329:2): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.132" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 105.778218][ T4831] XFS (loop2): Quotacheck: Done. [ 105.949455][ T4533] vhci_hcd: vhci_device speed not set [ 107.108704][ T4849] loop1: detected capacity change from 0 to 32768 [ 107.660291][ T4200] Bluetooth: hci4: link tx timeout [ 107.665613][ T4200] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.632851][ T4193] XFS (loop2): Unmounting Filesystem [ 108.766873][ T4886] loop1: detected capacity change from 0 to 32768 [ 108.806217][ T4888] netlink: 148 bytes leftover after parsing attributes in process `syz.4.139'. [ 108.816371][ T4886] XFS: ikeep mount option is deprecated. [ 108.945176][ T4886] XFS (loop1): Mounting V5 Filesystem [ 109.233617][ T4886] XFS (loop1): Ending clean mount [ 109.245284][ T4886] XFS (loop1): Quotacheck needed: Please wait. [ 109.320137][ T4886] XFS (loop1): Quotacheck: Done. [ 109.729502][ T4533] Bluetooth: hci4: command 0x0406 tx timeout [ 110.238174][ T4185] XFS (loop1): Unmounting Filesystem [ 111.313188][ T4928] netlink: set zone limit has 8 unknown bytes [ 112.206765][ T4928] loop3: detected capacity change from 0 to 32768 [ 112.291685][ T4935] loop0: detected capacity change from 0 to 64 [ 112.322500][ T4928] XFS (loop3): Mounting V5 Filesystem [ 112.367488][ T4928] XFS (loop3): Ending clean mount [ 112.406943][ T4200] Bluetooth: Wrong link type (-22) [ 113.073124][ T4184] XFS (loop3): Unmounting Filesystem [ 116.180806][ T4966] loop1: detected capacity change from 0 to 32768 [ 116.201537][ T4967] netlink: 'syz.2.157': attribute type 12 has an invalid length. [ 117.523916][ T4966] XFS (loop1): Mounting V5 Filesystem [ 118.052358][ T5004] netlink: set zone limit has 8 unknown bytes [ 118.260260][ T5004] loop2: detected capacity change from 0 to 32768 [ 118.317947][ T4966] XFS (loop1): Ending clean mount [ 118.412178][ T4966] XFS (loop1): Quotacheck needed: Please wait. [ 118.445947][ T4966] XFS (loop1): Quotacheck: Done. [ 118.750171][ T5004] XFS (loop2): Mounting V5 Filesystem [ 119.189954][ T5004] XFS (loop2): Ending clean mount [ 119.196785][ T5022] process 'syz.0.165' launched './file0' with NULL argv: empty string added [ 119.913141][ T4193] XFS (loop2): Unmounting Filesystem [ 120.509525][ T4185] XFS (loop1): Unmounting Filesystem [ 122.067641][ T5035] loop1: detected capacity change from 0 to 65536 [ 122.824386][ T5035] XFS (loop1): Mounting V5 Filesystem [ 123.036605][ T5035] XFS (loop1): Ending clean mount [ 124.194249][ T25] audit: type=1800 audit(1757656232.599:3): pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.166" name="file1" dev="loop1" ino=38 res=0 errno=0 [ 124.256454][ T4185] XFS (loop1): Unmounting Filesystem [ 129.090511][ T25] audit: type=1326 audit(1757656237.659:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecaed10ba9 code=0x7ffc0000 [ 129.156803][ T25] audit: type=1326 audit(1757656237.699:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fecaed10ba9 code=0x7ffc0000 [ 129.257114][ T25] audit: type=1326 audit(1757656237.699:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecaed10ba9 code=0x7ffc0000 [ 131.414414][ T5135] loop3: detected capacity change from 0 to 512 [ 131.670391][ T5135] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.940448][ T5143] loop3: detected capacity change from 0 to 2048 [ 132.007853][ T5143] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.042165][ T5143] attempt to access beyond end of device [ 132.042165][ T5143] loop3: rw=524288, want=65536, limit=2048 [ 132.054180][ T5144] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.064075][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop3 [ 132.129838][ T4533] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.338524][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 132.519737][ T4533] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 132.587896][ T4533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.683145][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.695956][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.869522][ T4533] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 133.010559][ T4533] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 133.064323][ T4533] usb 3-1: Manufacturer: syz [ 133.127065][ T4533] usb 3-1: config 0 descriptor?? [ 134.489458][ T4533] rc_core: IR keymap rc-hauppauge not found [ 134.495582][ T4533] Registered IR keymap rc-empty [ 134.533464][ T4533] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 134.619497][ T5171] loop0: detected capacity change from 0 to 4096 [ 134.656836][ T4533] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 134.734469][ T5174] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.805495][ T4533] usb 3-1: USB disconnect, device number 4 [ 136.277676][ T25] audit: type=1326 audit(1757656244.849:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 136.368789][ T25] audit: type=1326 audit(1757656244.889:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 136.419438][ T25] audit: type=1326 audit(1757656244.889:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 136.426397][ T5196] loop4: detected capacity change from 0 to 2048 [ 136.469677][ T25] audit: type=1326 audit(1757656244.889:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 137.388822][ T5196] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.449430][ T25] audit: type=1326 audit(1757656244.889:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 137.466878][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop4 [ 137.526101][ T5196] attempt to access beyond end of device [ 137.526101][ T5196] loop4: rw=524288, want=65536, limit=2048 [ 137.543044][ T5201] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.714531][ T25] audit: type=1326 audit(1757656244.889:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 138.572746][ T25] audit: type=1326 audit(1757656244.889:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 140.963190][ T25] audit: type=1326 audit(1757656244.889:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 142.699834][ T25] audit: type=1326 audit(1757656244.889:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 142.724424][ T25] audit: type=1326 audit(1757656244.889:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 142.746657][ T25] audit: type=1326 audit(1757656244.889:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 142.769045][ T25] audit: type=1326 audit(1757656244.889:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 142.775891][ T5249] loop2: detected capacity change from 0 to 1024 [ 142.808637][ T25] audit: type=1326 audit(1757656244.889:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 142.942517][ T25] audit: type=1326 audit(1757656244.889:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f70aa7b7ba9 code=0x7ffc0000 [ 143.047867][ T5249] EXT4-fs (loop2): inline encryption not supported [ 143.066380][ T5249] EXT4-fs (loop2): Ignoring removed nobh option [ 143.121138][ T5249] EXT4-fs (loop2): Ignoring removed bh option [ 143.131279][ T5249] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.226116][ T5259] loop4: detected capacity change from 0 to 2048 [ 143.247952][ T5264] netlink: 'syz.0.229': attribute type 39 has an invalid length. [ 143.264540][ T5249] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 143.387042][ T5259] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.403492][ T5249] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.224: Allocating blocks 385-513 which overlap fs metadata [ 143.482164][ T5267] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.482616][ T5259] attempt to access beyond end of device [ 143.482616][ T5259] loop4: rw=524288, want=65536, limit=2048 [ 143.525378][ T5247] EXT4-fs (loop2): pa ffff888016de8b60: logic 16, phys. 129, len 24 [ 143.533807][ T5247] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 143.557607][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop4 [ 145.535684][ T5282] loop0: detected capacity change from 0 to 32768 [ 145.571755][ T5282] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.234 (5282) [ 145.615129][ T5286] netlink: 88 bytes leftover after parsing attributes in process `syz.4.235'. [ 145.624218][ T5286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.235'. [ 145.680739][ T5282] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 145.689674][ T5282] BTRFS info (device loop0): enabling disk space caching [ 145.697346][ T5282] BTRFS info (device loop0): disabling tree log [ 145.704058][ T5282] BTRFS info (device loop0): setting nodatasum [ 145.710267][ T5282] BTRFS info (device loop0): turning off barriers [ 145.716687][ T5282] BTRFS info (device loop0): turning on flush-on-commit [ 145.723695][ T5282] BTRFS info (device loop0): doing ref verification [ 145.730294][ T5282] BTRFS info (device loop0): force clearing of disk cache [ 145.737386][ T5282] BTRFS info (device loop0): enabling ssd optimizations [ 145.744537][ T5282] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 145.754031][ T5282] BTRFS info (device loop0): use lzo compression, level 0 [ 145.761217][ T5282] BTRFS info (device loop0): disk space caching is enabled [ 145.768393][ T5282] BTRFS info (device loop0): has skinny extents [ 146.772487][ T5308] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.804910][ T5282] BTRFS info (device loop0): clearing free space tree [ 146.812909][ T5282] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.823291][ T5282] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.769440][ T4533] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.613601][ T5335] netlink: 88 bytes leftover after parsing attributes in process `syz.1.246'. [ 148.622534][ T5335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.246'. [ 148.739887][ T4200] Bluetooth: hci4: link tx timeout [ 148.745429][ T4200] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.789495][ T4533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.858935][ T4533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.868828][ T4533] usb 4-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 148.905249][ T5319] loop2: detected capacity change from 0 to 32768 [ 148.921993][ T4533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.957920][ T4533] usb 4-1: config 0 descriptor?? [ 148.964231][ T5319] XFS: ikeep mount option is deprecated. [ 149.568820][ T5319] XFS (loop2): Mounting V5 Filesystem [ 149.966615][ T4533] ntrig 0003:1B96:0012.0001: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.3-1/input0 [ 150.270823][ T4533] usb 4-1: USB disconnect, device number 2 [ 150.433998][ T5319] XFS (loop2): Ending clean mount [ 150.577256][ T5365] netlink: set zone limit has 8 unknown bytes [ 151.280655][ T5365] loop0: detected capacity change from 0 to 32768 [ 151.318136][ T5319] XFS (loop2): Quotacheck needed: Please wait. [ 151.377688][ T5319] XFS (loop2): Quotacheck: Done. [ 151.382775][ T5361] fido_id[5361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 151.424568][ T4193] XFS (loop2): Unmounting Filesystem [ 151.538074][ T5365] XFS (loop0): Mounting V5 Filesystem [ 151.627583][ T5365] XFS (loop0): Ending clean mount [ 151.809474][ T1107] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 152.519487][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 152.527872][ T4186] XFS (loop0): Unmounting Filesystem [ 152.659548][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.673663][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.684438][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.697546][ T1107] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.706795][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.936096][ T1107] usb 4-1: config 0 descriptor?? [ 152.993275][ T5399] loop1: detected capacity change from 0 to 1024 [ 153.089387][ T4533] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.107586][ T5401] loop4: detected capacity change from 0 to 512 [ 153.131483][ T5399] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.170304][ T5401] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback. [ 153.186623][ T5374] udc-core: couldn't find an available UDC or it's busy [ 153.187345][ T5399] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.259: Allocating blocks 497-513 which overlap fs metadata [ 153.212665][ T5399] EXT4-fs (loop1): pa ffff888074cbfe00: logic 256, phys. 385, len 8 [ 153.220856][ T5374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.223725][ T5401] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.228496][ T5399] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 153.329448][ T4533] usb 3-1: Using ep0 maxpacket: 32 [ 153.369675][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.374732][ T5410] loop4: detected capacity change from 0 to 2048 [ 153.401564][ T5410] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 153.418779][ T4331] udevd[4331]: incorrect nilfs2 checksum on /dev/loop4 [ 153.440626][ T5411] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.440856][ T5410] attempt to access beyond end of device [ 153.440856][ T5410] loop4: rw=524288, want=65536, limit=2048 [ 153.464822][ T1107] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 153.472626][ T1107] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 153.485097][ T1107] microsoft 0003:045E:07DA.0002: unknown main item tag 0xe [ 153.492850][ T1107] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 153.505478][ T1107] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 153.512800][ T1107] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 153.547628][ T1107] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input6 [ 153.614044][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 153.619975][ T4533] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 153.649906][ T4533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.679443][ T4533] usb 3-1: Product: syz [ 153.689069][ T4533] usb 3-1: Manufacturer: syz [ 153.694448][ T4533] usb 3-1: SerialNumber: syz [ 153.711666][ T4533] usb 3-1: config 0 descriptor?? [ 153.759926][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 153.762287][ T4533] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 153.784967][ T1107] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 153.813408][ T1107] usb 4-1: USB disconnect, device number 3 [ 153.889534][ T7] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 153.911058][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.929416][ T7] usb 1-1: Product: syz [ 153.933598][ T7] usb 1-1: Manufacturer: syz [ 153.938187][ T7] usb 1-1: SerialNumber: syz [ 153.945328][ T5417] fido_id[5417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 153.959071][ T7] usb 1-1: config 0 descriptor?? [ 154.011311][ T7] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 154.178854][ T5415] loop1: detected capacity change from 0 to 32768 [ 154.239964][ T5415] XFS: ikeep mount option is deprecated. [ 154.291918][ T5415] XFS (loop1): Mounting V5 Filesystem [ 154.477697][ T5415] XFS (loop1): Ending clean mount [ 154.487960][ T5415] XFS (loop1): Quotacheck needed: Please wait. [ 154.532549][ T5415] XFS (loop1): Quotacheck: Done. [ 155.439605][ T4533] gspca_stk1135: reg_w 0xf err -71 [ 155.447035][ T4533] gspca_stk1135: serial bus timeout: status=0x00 [ 155.463641][ T4185] XFS (loop1): Unmounting Filesystem [ 155.471210][ T4533] gspca_stk1135: Sensor write failed [ 155.519463][ T4533] gspca_stk1135: serial bus timeout: status=0x00 [ 155.533163][ T4533] gspca_stk1135: Sensor write failed [ 155.546161][ T4533] gspca_stk1135: serial bus timeout: status=0x00 [ 155.556296][ T4533] gspca_stk1135: Sensor read failed [ 155.566430][ T4533] gspca_stk1135: serial bus timeout: status=0x00 [ 155.576559][ T4533] gspca_stk1135: Sensor read failed [ 155.583751][ T4533] gspca_stk1135: Detected sensor type unknown (0x0) [ 155.596847][ T4533] gspca_stk1135: serial bus timeout: status=0x00 [ 155.606962][ T4533] gspca_stk1135: Sensor read failed [ 155.617098][ T4533] gspca_stk1135: serial bus timeout: status=0x00 [ 155.627231][ T4533] gspca_stk1135: Sensor read failed [ 155.637366][ T4533] gspca_stk1135: serial bus timeout: status=0x00 [ 155.647499][ T4533] gspca_stk1135: Sensor write failed [ 155.657636][ T4533] gspca_stk1135: serial bus timeout: status=0x00 [ 155.667769][ T4533] gspca_stk1135: Sensor write failed [ 155.677933][ T4533] stk1135: probe of 3-1:0.0 failed with error -71 [ 155.693299][ T4533] usb 3-1: USB disconnect, device number 5 [ 157.175502][ T5465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.271'. [ 157.204928][ T5464] netlink: 88 bytes leftover after parsing attributes in process `syz.1.267'. [ 157.213872][ T5464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.267'. [ 157.556153][ T5477] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.679913][ T5484] loop1: detected capacity change from 0 to 2048 [ 157.725901][ T5484] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 158.229487][ T7] gspca_stk1135: reg_w 0x18 err -110 [ 158.237913][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 158.327345][ T5494] loop3: detected capacity change from 0 to 8 [ 158.333359][ T7] gspca_stk1135: Sensor write failed [ 158.338810][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 158.345628][ T7] gspca_stk1135: Sensor write failed [ 158.404438][ T5494] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 158.415415][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 158.422661][ T7] gspca_stk1135: Sensor read failed [ 158.427970][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 158.472398][ T7] gspca_stk1135: Sensor read failed [ 158.477686][ T7] gspca_stk1135: Detected sensor type unknown (0x0) [ 158.683971][ T5484] attempt to access beyond end of device [ 158.683971][ T5484] loop1: rw=524288, want=65536, limit=2048 [ 158.997715][ T5421] udevd[5421]: incorrect cramfs checksum on /dev/loop3 [ 159.028672][ T5421] udevd[5421]: incorrect cramfs checksum on /dev/loop3 [ 159.039755][ T5498] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.109469][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 159.144886][ T7] gspca_stk1135: Sensor read failed [ 159.239784][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 159.887815][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 159.919267][ T7] gspca_stk1135: Sensor read failed [ 159.944995][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 159.971521][ T5511] netlink: 88 bytes leftover after parsing attributes in process `syz.4.286'. [ 159.980524][ T5511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.286'. [ 160.053018][ T7] gspca_stk1135: Sensor write failed [ 160.058501][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 160.076035][ T7] gspca_stk1135: Sensor write failed [ 160.088266][ T7] stk1135: probe of 1-1:0.0 failed with error -110 [ 160.102754][ T7] usb 1-1: USB disconnect, device number 2 [ 161.518169][ T5541] loop4: detected capacity change from 0 to 512 [ 162.420018][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 162.483619][ T5553] loop3: detected capacity change from 0 to 2048 [ 162.497760][ T5541] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 162.522780][ T5541] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.540525][ T5553] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 162.580622][ T5557] loop0: detected capacity change from 0 to 64 [ 162.614528][ T5553] attempt to access beyond end of device [ 162.614528][ T5553] loop3: rw=524288, want=65536, limit=2048 [ 162.625982][ T5558] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.972758][ T5576] loop4: detected capacity change from 0 to 2048 [ 164.997959][ T5576] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 165.024929][ T5421] udevd[5421]: incorrect nilfs2 checksum on /dev/loop4 [ 165.110168][ T5576] attempt to access beyond end of device [ 165.110168][ T5576] loop4: rw=524288, want=65536, limit=2048 [ 165.111216][ T5421] udevd[5421]: incorrect nilfs2 checksum on /dev/loop4 [ 165.128346][ T5581] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.148484][ T5421] udevd[5421]: incorrect nilfs2 checksum on /dev/loop4 [ 165.776619][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'. [ 166.108939][ T5595] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.398692][ T5609] loop2: detected capacity change from 0 to 512 [ 166.409579][ T4394] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.677416][ T5609] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 166.699587][ T5609] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.950204][ T4394] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 166.959273][ T4394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.998303][ T4394] usb 4-1: Product: syz [ 167.012853][ T4394] usb 4-1: Manufacturer: syz [ 167.017497][ T4394] usb 4-1: SerialNumber: syz [ 167.056250][ T4394] usb 4-1: config 0 descriptor?? [ 167.079512][ T4533] Bluetooth: hci2: command 0x0401 tx timeout [ 167.111273][ T4394] go7007 4-1:0.0: Sensoray 2250 found [ 167.127032][ T4394] go7007: probe of 4-1:0.0 failed with error -12 [ 167.332798][ T4870] usb 4-1: USB disconnect, device number 4 [ 169.399381][ T5639] loop4: detected capacity change from 0 to 2048 [ 169.424545][ T5648] loop1: detected capacity change from 0 to 2048 [ 169.466381][ T5650] tipc: Started in network mode [ 169.492512][ T5650] tipc: Node identity f2a7bc431d02, cluster identity 4711 [ 169.517149][ T5650] tipc: Enabled bearer , priority 0 [ 169.551728][ T5639] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 169.561844][ T5648] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 169.665994][ T5651] device syzkaller0 entered promiscuous mode [ 169.694679][ T5421] udevd[5421]: incorrect nilfs2 checksum on /dev/loop1 [ 169.703218][ T5432] udevd[5432]: incorrect nilfs2 checksum on /dev/loop4 [ 169.722359][ T5639] attempt to access beyond end of device [ 169.722359][ T5639] loop4: rw=524288, want=65536, limit=2048 [ 169.734302][ T5654] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.745657][ T5655] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.746716][ T5648] attempt to access beyond end of device [ 169.746716][ T5648] loop1: rw=524288, want=65536, limit=2048 [ 169.789683][ C1] [ 169.792569][ C1] ============================= [ 169.796448][ T5650] tipc: Resetting bearer [ 169.797424][ C1] WARNING: suspicious RCU usage [ 169.808022][ C1] syzkaller #0 Not tainted [ 169.812469][ C1] ----------------------------- [ 169.817311][ C1] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 169.825678][ C1] [ 169.825678][ C1] other info that might help us debug this: [ 169.825678][ C1] [ 169.835918][ C1] [ 169.835918][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 169.843981][ C1] 7 locks held by syz-executor/4184: [ 169.849241][ C1] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x2290/0x3e00 [ 169.859646][ C1] #1: ffffc90000dd0be0 ((&d->timer)#2){+.-.}-{0:0}, at: call_timer_fn+0xbb/0x530 [ 169.868877][ C1] #2: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 169.878183][ C1] #3: ffffffff8c11c6c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 169.887761][ C1] #4: ffff8880768a2108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xb8a/0x2ed0 [ 169.897332][ C1] #5: ffff8880768a2148 (dev->qdisc_running_key ?: &qdisc_running_key#2){+...}-{0:0}, at: tipc_l2_send_msg+0x30a/0x3c0 [ 169.909786][ C1] #6: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 169.919107][ C1] [ 169.919107][ C1] stack backtrace: [ 169.925004][ C1] CPU: 1 PID: 4184 Comm: syz-executor Not tainted syzkaller #0 [ 169.932526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.942568][ C1] Call Trace: [ 169.945854][ C1] [ 169.948703][ C1] dump_stack_lvl+0x168/0x230 [ 169.953363][ C1] ? show_regs_print_info+0x20/0x20 [ 169.958544][ C1] ? lockdep_rcu_suspicious+0x110/0x180 [ 169.964067][ C1] qdisc_lookup+0xa6/0x650 [ 169.968480][ C1] qdisc_tree_reduce_backlog+0x190/0x430 [ 169.974090][ C1] sfq_enqueue+0x148e/0x2260 [ 169.978654][ C1] ? ktime_get+0x7b/0x270 [ 169.982964][ C1] ? decrement_one_qlen+0x550/0x550 [ 169.988137][ C1] ? ktime_get+0x247/0x270 [ 169.992530][ C1] netem_dequeue+0xd39/0x1400 [ 169.997195][ C1] ? netem_enqueue+0x3720/0x3720 [ 170.002114][ C1] __qdisc_run+0x237/0x1480 [ 170.006602][ C1] __dev_queue_xmit+0xeb9/0x2ed0 [ 170.011519][ C1] ? dev_queue_xmit+0x20/0x20 [ 170.016168][ C1] ? tipc_crypto_xmit+0x1df/0x2660 [ 170.021259][ C1] ? mark_lock+0x94/0x320 [ 170.025583][ C1] ? eth_header+0x117/0x200 [ 170.030085][ C1] ? llc_sysctl_exit+0x60/0x60 [ 170.034829][ C1] tipc_l2_send_msg+0x30a/0x3c0 [ 170.039664][ C1] tipc_bearer_xmit_skb+0x292/0x3c0 [ 170.044846][ C1] ? tipc_bearer_min_mtu+0x190/0x190 [ 170.050112][ C1] tipc_disc_timeout+0x568/0x6b0 [ 170.055033][ C1] ? tipc_disc_create+0x920/0x920 [ 170.060041][ C1] ? tipc_disc_create+0x920/0x920 [ 170.065061][ C1] call_timer_fn+0x16c/0x530 [ 170.069632][ C1] ? tipc_disc_create+0x920/0x920 [ 170.074637][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 170.080609][ C1] ? __run_timers+0x7c0/0x7c0 [ 170.085292][ C1] ? rcu_is_watching+0x11/0xa0 [ 170.090035][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 170.095212][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 170.100383][ C1] ? tipc_disc_create+0x920/0x920 [ 170.105388][ C1] __run_timers+0x525/0x7c0 [ 170.109876][ C1] ? detach_timer+0x2b0/0x2b0 [ 170.114531][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 170.120488][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 170.125318][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 170.130582][ C1] run_timer_softirq+0x63/0xf0 [ 170.135321][ C1] handle_softirqs+0x328/0x820 [ 170.140059][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 170.144887][ C1] ? do_softirq+0x200/0x200 [ 170.149368][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 170.154551][ C1] __irq_exit_rcu+0x12f/0x220 [ 170.159202][ C1] ? irq_exit_rcu+0x20/0x20 [ 170.163684][ C1] irq_exit_rcu+0x5/0x20 [ 170.167917][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 170.173526][ C1] [ 170.176436][ C1] [ 170.179346][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 170.185312][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 170.191792][ C1] Code: 74 05 e8 5e 8d cb f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c6 15 9f f7 65 8b 05 a7 13 50 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 170.211392][ C1] RSP: 0018:ffffc90002ecfa00 EFLAGS: 00000206 [ 170.217435][ C1] RAX: f4dcc4ee5c140a00 RBX: 0000000000000a02 RCX: f4dcc4ee5c140a00 [ 170.225384][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1820 RDI: 0000000000000001 [ 170.233332][ C1] RBP: ffffc90002ecfa90 R08: dffffc0000000000 R09: fffffbfff1ff781b [ 170.241279][ C1] R10: fffffbfff1ff781b R11: 1ffffffff1ff781a R12: dffffc0000000000 [ 170.249225][ C1] R13: ffff88802b8d08c0 R14: ffff88802a0c27d0 R15: 1ffff920005d9f40 [ 170.257181][ C1] ? _raw_spin_unlock+0x40/0x40 [ 170.262010][ C1] ? _raw_spin_unlock+0x24/0x40 [ 170.266834][ C1] ? sched_cgroup_fork+0x2c6/0x320 [ 170.271932][ C1] copy_process+0x22d1/0x3e00 [ 170.276601][ C1] ? __pidfd_prepare+0x140/0x140 [ 170.281514][ C1] ? _raw_spin_unlock+0x24/0x40 [ 170.286341][ C1] ? verify_lock_unused+0x140/0x140 [ 170.291539][ C1] kernel_clone+0x219/0x930 [ 170.296038][ C1] ? create_io_thread+0x130/0x130 [ 170.301066][ C1] ? __context_tracking_exit+0x4c/0x80 [ 170.306510][ C1] __x64_sys_clone+0x170/0x1c0 [ 170.311252][ C1] ? __ia32_sys_vfork+0xf0/0xf0 [ 170.316083][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 170.321258][ C1] do_syscall_64+0x4c/0xa0 [ 170.325646][ C1] ? clear_bhb_loop+0x30/0x80 [ 170.330296][ C1] ? clear_bhb_loop+0x30/0x80 [ 170.334967][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.340835][ C1] RIP: 0033:0x7fa6f7c70413 [ 170.345226][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 170.364826][ C1] RSP: 002b:00007fffceaa1208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 170.373234][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa6f7c70413 [ 170.381182][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 170.389128][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 170.397072][ C1] R10: 00005555867c07d0 R11: 0000000000000246 R12: 0000000000000000 [ 170.405019][ C1] R13: 00000000000927c0 R14: 00000000000294d1 R15: 00007fffceaa13a0 [ 170.412976][ C1] [ 170.470758][ T5649] tipc: Resetting bearer [ 170.515498][ T5649] tipc: Disabling bearer [ 170.705728][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 175.630043][ T1346] Bluetooth: hci1: command 0x0406 tx timeout [ 175.636957][ T1346] Bluetooth: hci2: command 0x0406 tx timeout [ 175.643129][ T1346] Bluetooth: hci3: command 0x0406 tx timeout