last executing test programs: 3m4.53847915s ago: executing program 2 (id=203): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101003, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 3m4.322793269s ago: executing program 2 (id=207): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace(0x10, r3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000440)={0x0}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r4], 0x24}, 0x1, 0x0, 0x0, 0x805c}, 0x4000000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x0, 0x2, 0x300, 0x8000, 0xe}, 0x9c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 3m1.626174674s ago: executing program 2 (id=209): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x80800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000400)=""/147, 0x93}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000780)='syscall\x00') pread64(r4, &(0x7f0000000180)=""/116, 0x74, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x33, 0x20, 0x4, 0x3}, &(0x7f0000000240)=0x18) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) waitid(0x4, 0x0, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x201}, 0x10) 2m58.641188128s ago: executing program 2 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000900)="2600000022004701050007008980e8ff02006d20002b1f00c0e9f7094a51f10101033500", 0x24) recvfrom$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m57.510961196s ago: executing program 2 (id=219): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 2m56.061200734s ago: executing program 2 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000018000380140003800c000180080001000100000004"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2m39.140248792s ago: executing program 32 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000018000380140003800c000180080001000100000004"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 16.127257691s ago: executing program 5 (id=576): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@dax_never}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e54e9d911d4993a8cfaa9fc0f67742d726f2c6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646f74732c646f74732c6e6f646f74732c6e6f647f0000006e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646973636172642c646f74732c646f74732c747a3d5554432c6572726f72733d636f6e74696e75652c6e6f646f74732c7379735f696d6d757461626c652c71756965742c646f74732c00"], 0xfd, 0x1bf, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0806000108000604"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xac) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 15.181400219s ago: executing program 0 (id=578): r0 = socket(0x1, 0x5, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) 11.691044033s ago: executing program 5 (id=581): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x8) semop(0x0, &(0x7f0000000000)=[{0x2, 0x101, 0x1000}], 0x1) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x500) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000440)=""/251) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000d40)={0x5, 0x4, 0x4, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x2, 0x0, 0x2, 0x1}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) 11.661302513s ago: executing program 0 (id=582): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) semtimedop(0x0, 0x0, 0x0, 0x0) 11.134237232s ago: executing program 0 (id=583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000210000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffef5, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r5 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), 0x0, &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_FILES2(r5, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) 10.022507539s ago: executing program 0 (id=587): setuid(0xee00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) 10.02187713s ago: executing program 5 (id=589): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c000780180001801400024000000000000000000000000000000000c85dc366"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) sendmmsg(r7, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875431a05b9319c00", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002640)="ba33863e630ef54f2149b0", 0xb}], 0x1, &(0x7f0000002f80)=ANY=[], 0x3d0}}], 0x2, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 9.882383509s ago: executing program 3 (id=590): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x10001, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) 9.479846028s ago: executing program 0 (id=591): r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010000000000fddbdf2500000000", @ANYRESHEX, @ANYBLOB="062300005a110140000000200000009d1e"], 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c060ab1"], 0xfe33) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x2, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') 7.875533475s ago: executing program 5 (id=592): socket$qrtr(0x2a, 0x2, 0x0) socket$inet(0x2, 0x6, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 7.598769445s ago: executing program 1 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@dax_never}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e54e9d911d4993a8cfaa9fc0f67742d726f2c6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646f74732c646f74732c6e6f646f74732c6e6f647f0000006e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646973636172642c646f74732c646f74732c747a3d5554432c6572726f72733d636f6e74696e75652c6e6f646f74732c7379735f696d6d757461626c652c71756965742c646f74732c00"], 0xfd, 0x1bf, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0806000108000604000acf"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xac) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 6.972324214s ago: executing program 4 (id=596): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000380)) 6.891652994s ago: executing program 5 (id=597): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0002ff"], 0x0, 0x0, 0x0, 0x0}) 6.806550353s ago: executing program 3 (id=598): capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x167}) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002680), 0x100280, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 6.283610953s ago: executing program 1 (id=599): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x80800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000400)=""/147, 0x93}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000780)='syscall\x00') pread64(r4, &(0x7f0000000180)=""/116, 0x74, 0x3) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x33, 0x20, 0x4, 0x3}, &(0x7f0000000240)=0x18) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) waitid(0x4, 0x0, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x201}, 0x10) 6.264117342s ago: executing program 3 (id=600): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000200)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000020000008500000086", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[], 0x0) 6.194258572s ago: executing program 4 (id=601): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050002000000"], 0x38}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) readahead(0xffffffffffffffff, 0x4, 0x81) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c00000073db313f48183561532a63b35be9d495f5bdb84c5f9681166e48ca0080000000000000bc889fb3b0384b63f85833b90b2eca95b751e4f9056e923e2af1e6ebe14c7a00000000747bb8978b83d7a349fcee84b4282c081608ab37126d776c3957104ebc5b1538695f29607185c18295e0cb985b97a348deef5aa6fd7f5efa606b23c7b1333adf948fa2f0ccf0053b18520e53ac", @ANYRES16=r6, @ANYBLOB="010000000000000000000f000000180007800c00030000000000000000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x480102, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.054025122s ago: executing program 3 (id=602): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x8) semop(0x0, &(0x7f0000000000)=[{0x2, 0x101, 0x1000}], 0x1) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x500) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000440)=""/251) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x9, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "cf4a06d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) 6.050734092s ago: executing program 1 (id=603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES64], 0x0, 0x8, 0xa8, &(0x7f0000000140)=""/168, 0x41100, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000854) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x93}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0xf, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)='./file0\x00'}) socket$inet6(0xa, 0x2, 0x43a) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.28626553s ago: executing program 3 (id=604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(&(0x7f0000000240), 0x0, 0x0) setfsuid(0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 5.02373876s ago: executing program 1 (id=605): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) 4.96497976s ago: executing program 1 (id=606): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000060000000000000000040000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0xb7c, 0x30, 0x1, 0x0, 0x3, {}, [{0xb68, 0x1, [@m_xt={0xb64, 0x4, 0x0, 0x0, {{0x7}, {0xa9c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xa2a, 0x6, {0x4, 'filter\x00', 0x2, 0x0, "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"}}]}, {0xa2, 0x6, "8a356aefd5f134f8029e1e87fa096c82b913e12e6835bcf18e2079bd3d7d8fa7ec454dba3551e86c6279b2fec4bcf06db0e0330f0045282b74e82e48a5af77b206160c31f68d42fd40f129bd57809477f14d540820b54c219b98b64076685a1fc9eb021f0c1344e9c0228664d70d53582c33946d3a8525be748466da79c01e0980286dbf83dadef515d4523f9c94e29e202b5e7d0630d01ef0178bad39b8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xb7c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 4.410767059s ago: executing program 4 (id=607): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18072abd7000fedbdf250f0000000c00018008000300040000000c00068008000600001000000c000780080001000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 4.025699078s ago: executing program 1 (id=608): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x10001, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) 3.532620077s ago: executing program 4 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@dax_never}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e54e9d911d4993a8cfaa9fc0f67742d726f2c6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646f74732c646f74732c6e6f646f74732c6e6f647f0000006e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646973636172642c646f74732c646f74732c747a3d5554432c6572726f72733d636f6e74696e75652c6e6f646f74732c7379735f696d6d757461626c652c71756965742c646f74732c00"], 0xfd, 0x1bf, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0806000108000604000acf"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xac) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 2.138669535s ago: executing program 4 (id=610): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, 0x0}, 0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_procfs$namespace(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair(0x2a, 0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) r1 = memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x4) ftruncate(r1, 0x0) 2.085946165s ago: executing program 5 (id=611): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x20, 0x1, 0x6, 0x2, 0x0, 0x3, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000001c0)="002204", 0x3) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) dup(r3) accept4(r4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 214.521151ms ago: executing program 4 (id=612): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000200)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000020000008500000086", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[], 0x0) 1.647411ms ago: executing program 3 (id=613): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x80800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000400)=""/147, 0x93}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000780)='syscall\x00') pread64(r4, &(0x7f0000000180)=""/116, 0x74, 0x3) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x33, 0x20, 0x4, 0x3}, &(0x7f0000000240)=0x18) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) waitid(0x4, 0x0, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x201}, 0x10) 0s ago: executing program 0 (id=614): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x8) semop(0x0, &(0x7f0000000000)=[{0x2, 0x101, 0x1000}], 0x1) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x500) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000440)=""/251) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000d40)={0x5, 0x4, 0x4, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x2, 0x0, 0x2, 0x1}) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x9, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "cf4a06d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 72.160863][ T4154] cgroup: Unknown subsys name 'net' [ 72.271385][ T4154] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.872263][ T4154] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.507930][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 75.550977][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 75.578296][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 75.618117][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 75.713703][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 75.787262][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.794943][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.804313][ T4167] device bridge_slave_0 entered promiscuous mode [ 75.832555][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.840400][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.848533][ T4169] device bridge_slave_0 entered promiscuous mode [ 75.857012][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.864339][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.873043][ T4167] device bridge_slave_1 entered promiscuous mode [ 75.901033][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.908138][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.916526][ T4169] device bridge_slave_1 entered promiscuous mode [ 75.938427][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.946380][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.954874][ T4168] device bridge_slave_0 entered promiscuous mode [ 75.992268][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.999889][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.007822][ T4168] device bridge_slave_1 entered promiscuous mode [ 76.015204][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.022679][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.032349][ T4166] device bridge_slave_0 entered promiscuous mode [ 76.049357][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.061640][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.078669][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.085902][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.094365][ T4166] device bridge_slave_1 entered promiscuous mode [ 76.112280][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.123260][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.148113][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.155918][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.166750][ T4170] device bridge_slave_0 entered promiscuous mode [ 76.203800][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.217517][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.241585][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.250449][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.264541][ T4170] device bridge_slave_1 entered promiscuous mode [ 76.303759][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.331851][ T4169] team0: Port device team_slave_0 added [ 76.351713][ T4167] team0: Port device team_slave_0 added [ 76.361242][ T4169] team0: Port device team_slave_1 added [ 76.377634][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.389743][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.401266][ T4167] team0: Port device team_slave_1 added [ 76.408786][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.430945][ T4168] team0: Port device team_slave_0 added [ 76.473449][ T4168] team0: Port device team_slave_1 added [ 76.480199][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.487333][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.513599][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.545229][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.552482][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.578840][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.607837][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.615082][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.615959][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.641934][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.647935][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.661787][ T4166] team0: Port device team_slave_0 added [ 76.671444][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.678498][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.712248][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.726251][ T4170] team0: Port device team_slave_0 added [ 76.747717][ T4166] team0: Port device team_slave_1 added [ 76.758606][ T4170] team0: Port device team_slave_1 added [ 76.766011][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.773357][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.806642][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.822094][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.829410][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.857385][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.916928][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.925181][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.971298][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.013141][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.021413][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.053299][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.066304][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.074409][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.103828][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.103904][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 77.123156][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 77.150495][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.157574][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.185016][ T2258] Bluetooth: hci2: command 0x0409 tx timeout [ 77.185112][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.191440][ T2258] Bluetooth: hci1: command 0x0409 tx timeout [ 77.208885][ T2258] Bluetooth: hci4: command 0x0409 tx timeout [ 77.218503][ T4169] device hsr_slave_0 entered promiscuous mode [ 77.226385][ T4169] device hsr_slave_1 entered promiscuous mode [ 77.236758][ T4167] device hsr_slave_0 entered promiscuous mode [ 77.244708][ T4167] device hsr_slave_1 entered promiscuous mode [ 77.252348][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.260808][ T4167] Cannot create hsr debugfs directory [ 77.270443][ T4168] device hsr_slave_0 entered promiscuous mode [ 77.278219][ T4168] device hsr_slave_1 entered promiscuous mode [ 77.289099][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.299294][ T4168] Cannot create hsr debugfs directory [ 77.404611][ T4170] device hsr_slave_0 entered promiscuous mode [ 77.412595][ T4170] device hsr_slave_1 entered promiscuous mode [ 77.420221][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.428002][ T4170] Cannot create hsr debugfs directory [ 77.437828][ T4166] device hsr_slave_0 entered promiscuous mode [ 77.447480][ T4166] device hsr_slave_1 entered promiscuous mode [ 77.460941][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.472092][ T4166] Cannot create hsr debugfs directory [ 77.830847][ T4167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.845215][ T4167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.857611][ T4167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.867465][ T4167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.936934][ T4168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.952960][ T4168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.967576][ T4168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.980144][ T4168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.075072][ T4169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.086432][ T4169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.103318][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.118086][ T4169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.139007][ T4169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.171368][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.187419][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.200626][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.212232][ T4170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.228119][ T4170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.238476][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.247570][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.258905][ T543] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.266338][ T543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.303531][ T4170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.314035][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.338462][ T4170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.358064][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.372881][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.384450][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.392387][ T543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.409334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.458418][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.489328][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.503987][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.514612][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.532219][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.543334][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.555842][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.566446][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.576242][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.586169][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.610997][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.626068][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.650589][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.678677][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.698654][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.711128][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.724716][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.738850][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.772305][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.845764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.857369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.873896][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.883588][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.898013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.931057][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.942814][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.953888][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.961367][ T543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.973637][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.006420][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.016653][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.027066][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.047932][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.062933][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.073359][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.082089][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.091959][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.102919][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.140951][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.150438][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.159938][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.160365][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 79.168189][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.183110][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 79.185108][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.199262][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.212796][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.228641][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.239819][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 79.240408][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.246096][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 79.260747][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 79.271643][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.290819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.303184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.314451][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.326576][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.339461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.358667][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.375339][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.390745][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.404701][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.433674][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.445072][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.458454][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.467061][ T543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.477810][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.488491][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.521580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.532249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.542527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.553522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.563606][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.571165][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.580454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.590616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.599871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.608888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.618020][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.625528][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.633839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.645763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.654693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.664038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.673429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.683519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.693193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.704744][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.740761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.751756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.769174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.781132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.796646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.833634][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.843278][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.855629][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.866029][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.881258][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.891974][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.918702][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.931681][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.945415][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.967480][ T4167] device veth0_vlan entered promiscuous mode [ 79.987573][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.996675][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.006181][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.016957][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.026775][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.037010][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.048890][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.057321][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.070310][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.078716][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.087394][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.096668][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.122554][ T4167] device veth1_vlan entered promiscuous mode [ 80.145700][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.156979][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.169118][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.187097][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.198372][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.214150][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.227311][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.255389][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.265710][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.276769][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.287526][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.298875][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.325219][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.340023][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.362784][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.381832][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.394568][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.418352][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.438606][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.447896][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.461681][ T4167] device veth0_macvtap entered promiscuous mode [ 80.478244][ T4166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.527737][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.550928][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.561147][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.571257][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.582742][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.593066][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.605077][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.628712][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.649552][ T4167] device veth1_macvtap entered promiscuous mode [ 80.691548][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.711371][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.726696][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.745671][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.760346][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.771413][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.803923][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.820363][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.830632][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.844123][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.856742][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.874445][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.884456][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.940809][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.953361][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.970386][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.981766][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.991708][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.011299][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.027966][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.039088][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.060778][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.077099][ T4169] device veth0_vlan entered promiscuous mode [ 81.088665][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.099324][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.117753][ T4170] device veth0_vlan entered promiscuous mode [ 81.128451][ T4167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.138644][ T4167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.148865][ T4167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.161276][ T4167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.175080][ T4168] device veth0_vlan entered promiscuous mode [ 81.186300][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.198450][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.211142][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.220922][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.230713][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.239258][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.240062][ T4215] Bluetooth: hci3: command 0x040f tx timeout [ 81.256020][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 81.268875][ T4169] device veth1_vlan entered promiscuous mode [ 81.286889][ T4168] device veth1_vlan entered promiscuous mode [ 81.301203][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.317321][ T4170] device veth1_vlan entered promiscuous mode [ 81.326638][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 81.344181][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 81.355877][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 81.403943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.419851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.428652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.441296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.457328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.467541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.479186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.491107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.504316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.513944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.545725][ T4168] device veth0_macvtap entered promiscuous mode [ 81.569457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.584477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.595680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.613514][ T4169] device veth0_macvtap entered promiscuous mode [ 81.627306][ T4169] device veth1_macvtap entered promiscuous mode [ 81.655863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.677489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.687846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.697033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.709114][ T4168] device veth1_macvtap entered promiscuous mode [ 81.722348][ T4166] device veth0_vlan entered promiscuous mode [ 81.743890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.753048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.765641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.775081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.785106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.797747][ T4170] device veth0_macvtap entered promiscuous mode [ 81.845396][ T4170] device veth1_macvtap entered promiscuous mode [ 81.853353][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.873124][ T4166] device veth1_vlan entered promiscuous mode [ 81.880108][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.893366][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.907158][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.919386][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.936462][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.948783][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.962230][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.979345][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.992689][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.005208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.014922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.024393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.033458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.043435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.053650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.072158][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.083993][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.097141][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.130636][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.141817][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.152655][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.164195][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.176983][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.188397][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.198099][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.208236][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.217332][ T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.231068][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.240854][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.251152][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.260354][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.276203][ T543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.286915][ T543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.298485][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.309720][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.318786][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.327890][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.344653][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.355549][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.373892][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.386172][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.396107][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.406715][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.420399][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.428849][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.438629][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.447746][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.458646][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.468030][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.485657][ T4166] device veth0_macvtap entered promiscuous mode [ 82.516208][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.531419][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.545213][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.557506][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.568916][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.580879][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.594519][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.645538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.664675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.678591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.694827][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.721009][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.734864][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.745774][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.788069][ T4166] device veth1_macvtap entered promiscuous mode [ 82.860467][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.175845][ T4210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.252437][ T4210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.272560][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.305934][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.318419][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.319897][ T2258] Bluetooth: hci0: command 0x0419 tx timeout [ 83.331757][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.349938][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.350482][ T2258] Bluetooth: hci3: command 0x0419 tx timeout [ 83.362022][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.382557][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.401559][ T2258] Bluetooth: hci4: command 0x0419 tx timeout [ 83.401856][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.407816][ T2258] Bluetooth: hci1: command 0x0419 tx timeout [ 83.422200][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.431187][ T2258] Bluetooth: hci2: command 0x0419 tx timeout [ 83.444971][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.454852][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.469862][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.607334][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.621644][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.655079][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.660874][ T4254] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.675408][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.699364][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.711448][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.723101][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.735605][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.750637][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.782382][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.793532][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.817705][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.819416][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.835126][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.844237][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.855901][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.865813][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.891392][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.910924][ T4210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.928539][ T4210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.028590][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.098528][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.127147][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.177522][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.253330][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.295915][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.663400][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.082130][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.124855][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.220475][ T4268] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.252970][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.299320][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.309535][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.351725][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.360470][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.753429][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.313344][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.342488][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 86.352676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 86.601047][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 86.779705][ T1335] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.340468][ T4291] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.341560][ T4291] F2FS-fs (loop9): Unable to read 1th superblock [ 87.344507][ T4291] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.345247][ T4291] F2FS-fs (loop9): Unable to read 2th superblock [ 90.025089][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 90.025190][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #218!!! [ 90.149768][ T1335] usb 4-1: device descriptor read/all, error -71 [ 91.327253][ T4299] usb usb8: usbfs: process 4299 (syz.3.14) did not claim interface 0 before use [ 92.231738][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 92.287458][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 92.986523][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.998042][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 93.007115][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 93.016128][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 93.025243][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 93.034301][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 94.041083][ T4249] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.369839][ T4249] usb 4-1: Using ep0 maxpacket: 8 [ 94.647159][ T4249] usb 4-1: config 150 has an invalid interface number: 204 but max is 0 [ 95.355864][ T4249] usb 4-1: config 150 has no interface number 0 [ 95.366430][ T4249] usb 4-1: config 150 interface 204 has no altsetting 0 [ 95.397981][ T4329] ksmbd: Unknown IPC event: 4, ignore. [ 95.560828][ T4249] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 95.583437][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.648344][ T4249] usb 4-1: Product: syz [ 95.663786][ T4249] usb 4-1: Manufacturer: syz [ 95.668848][ T4249] usb 4-1: SerialNumber: syz [ 95.848711][ T4333] netlink: 'syz.4.23': attribute type 10 has an invalid length. [ 96.097039][ T4249] usb 4-1: USB disconnect, device number 4 [ 96.656146][ T4344] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.678451][ T4344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.005127][ T4347] overlayfs: missing 'lowerdir' [ 97.019036][ T4333] team0: Port device wlan1 added [ 97.188732][ T1111] cfg80211: failed to load regulatory.db [ 97.200575][ T4333] syz.4.23 (4333) used greatest stack depth: 18648 bytes left [ 98.726976][ T4360] netlink: 44 bytes leftover after parsing attributes in process `syz.4.30'. [ 99.222669][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.087272][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 101.796221][ T4395] loop2: detected capacity change from 0 to 1024 [ 102.676069][ T4384] sched: RT throttling activated [ 103.214783][ T4395] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.410942][ T4395] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 104.627952][ T4421] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 104.639921][ T4421] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 105.401586][ T2258] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 105.419683][ T2258] Bluetooth: hci2: Injecting HCI hardware error event [ 105.428145][ T4182] Bluetooth: hci2: hardware error 0x00 [ 105.910841][ T4438] Zero length message leads to an empty skb [ 106.172578][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 106.732431][ T4414] IPVS: You probably need to specify IP address on multicast interface. [ 106.757629][ T4414] IPVS: Error connecting to the multicast addr [ 107.839963][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 108.027276][ T4461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.58'. [ 110.386466][ T4498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.000216][ T4498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.146396][ T4498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.217768][ T4511] tipc: Can't bind to reserved service type 0 [ 111.658218][ T4516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 115.817087][ T4531] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.731500][ T4561] xt_TPROXY: Can be used only with -p tcp or -p udp [ 117.838303][ T4566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.86'. [ 121.813963][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 121.820854][ C1] dccp_invalid_packet: P.Data Offset(28) too large [ 123.246206][ T4609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.99'. [ 124.840264][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 126.852852][ T4643] loop1: detected capacity change from 0 to 512 [ 127.904689][ T4643] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 127.915128][ T4643] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 127.935425][ T4652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.115'. [ 129.268848][ T4643] loop1: detected capacity change from 0 to 256 [ 129.436693][ T4643] FAT-fs (loop1): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 130.830229][ T2258] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 131.831423][ T2258] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 131.849589][ T2258] usb 4-1: config 0 has no interface number 0 [ 131.897489][ T2258] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 131.909709][ T2258] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 131.939579][ T2258] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.209683][ T2258] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 132.232233][ T2258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.260188][ T2258] usb 4-1: config 0 descriptor?? [ 132.285055][ T4680] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.559770][ T2258] ldusb 4-1:0.55: Interrupt in endpoint not found [ 132.603130][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.133'. [ 132.618320][ T2258] usb 4-1: USB disconnect, device number 5 [ 133.831786][ T4716] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.950903][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 134.016468][ T4719] device bridge_slave_1 left promiscuous mode [ 134.062555][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.375159][ T4719] device bridge_slave_0 left promiscuous mode [ 134.413716][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.160271][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.170463][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.180917][ T4801] overlayfs: unrecognized mount option "./file1" or missing value [ 145.489560][ T1335] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 145.605846][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.709869][ T4250] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.726731][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 145.734765][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 145.773731][ T4824] kernel profiling enabled (shift: 17) [ 145.850503][ T1335] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.865846][ T1335] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 145.908040][ T1335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.937419][ T1335] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.069824][ T1335] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.129546][ T1335] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.129691][ T4250] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.151437][ T4211] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.154972][ T4250] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.183076][ T4250] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.202262][ T4250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.749542][ T1335] usb 3-1: Product: syz [ 146.753885][ T1335] usb 3-1: Manufacturer: syz [ 146.755166][ T4816] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 146.821032][ T1335] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 146.948048][ T4839] loop3: detected capacity change from 0 to 512 [ 147.006389][ T4211] usb 1-1: Using ep0 maxpacket: 32 [ 147.135806][ T4839] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 147.186053][ T4839] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 147.915595][ T4211] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 147.924384][ T4211] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 147.937409][ T4211] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 147.952133][ T4211] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 147.968183][ T4211] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.181290][ T4211] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 148.443759][ T4839] loop3: detected capacity change from 0 to 256 [ 148.448358][ T4211] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 148.459993][ T4211] usb 1-1: Product: syz [ 148.464326][ T4211] usb 1-1: Manufacturer: syz [ 148.469033][ T4211] usb 1-1: SerialNumber: syz [ 148.477005][ T4839] FAT-fs (loop3): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 148.508309][ T4810] trusted_key: encrypted_key: insufficient parameters specified [ 148.538199][ T4211] usb 1-1: config 0 descriptor?? [ 148.837513][ T4214] usb 5-1: USB disconnect, device number 2 [ 148.856306][ T4217] usb 3-1: USB disconnect, device number 2 [ 148.882600][ T4856] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.636697][ T4211] usb 1-1: can't set config #0, error -71 [ 149.735137][ T4211] usb 1-1: USB disconnect, device number 2 [ 155.875304][ T4910] loop4: detected capacity change from 0 to 512 [ 156.125750][ T4911] overlayfs: failed to resolve './file1': -2 [ 156.204502][ T4910] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 156.238506][ T4910] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 163.228264][ T4972] loop1: detected capacity change from 0 to 512 [ 164.944389][ T4972] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 165.025464][ T4972] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 165.979671][ T4972] loop1: detected capacity change from 0 to 256 [ 166.290925][ T4972] FAT-fs (loop1): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 185.435515][ T5104] loop4: detected capacity change from 0 to 512 [ 185.951782][ T5104] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.965193][ T5104] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.711357][ T26] audit: type=1326 audit(1737420539.376:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 187.445536][ T26] audit: type=1326 audit(1737420539.386:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 188.503845][ T26] audit: type=1326 audit(1737420539.386:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 188.602712][ T141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.641157][ T26] audit: type=1326 audit(1737420539.386:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 189.121464][ T4945] Bluetooth: hci3: command 0x0409 tx timeout [ 189.160297][ T26] audit: type=1326 audit(1737420539.386:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 189.188645][ T26] audit: type=1326 audit(1737420539.386:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 189.210866][ T26] audit: type=1326 audit(1737420539.386:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 189.338116][ T141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.399599][ T26] audit: type=1326 audit(1737420539.386:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 189.535553][ T26] audit: type=1326 audit(1737420539.386:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 190.275046][ T26] audit: type=1326 audit(1737420539.386:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 190.417191][ T141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.274424][ T2258] Bluetooth: hci3: command 0x041b tx timeout [ 191.801903][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 192.043400][ T5154] loop4: detected capacity change from 0 to 512 [ 192.054098][ T141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.071901][ T5154] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 193.129791][ T5154] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 193.351917][ T4945] Bluetooth: hci3: command 0x040f tx timeout [ 194.107510][ T5154] loop4: detected capacity change from 0 to 256 [ 194.303045][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.339779][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.390810][ T5109] device bridge_slave_0 entered promiscuous mode [ 194.426597][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.437779][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.454727][ T5109] device bridge_slave_1 entered promiscuous mode [ 194.473022][ T5154] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 194.776432][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.905991][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.521751][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 196.155318][ T5109] team0: Port device team_slave_0 added [ 196.374751][ T5109] team0: Port device team_slave_1 added [ 198.299976][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.307017][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.498280][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.918358][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.989725][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.033334][ T5218] loop1: detected capacity change from 0 to 256 [ 199.171852][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.413493][ T5109] device hsr_slave_0 entered promiscuous mode [ 199.638447][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.644971][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.729080][ T5109] device hsr_slave_1 entered promiscuous mode [ 199.760532][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.876786][ T5109] Cannot create hsr debugfs directory [ 199.886328][ T5236] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 199.976787][ T5236] FAT-fs (loop1): Filesystem has been set read-only [ 200.039818][ T5236] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 200.141606][ T5236] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 200.226248][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 200.226267][ T26] audit: type=1800 audit(1737420552.916:19): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.284" name="file1" dev="loop1" ino=1048590 res=0 errno=0 [ 200.336492][ T5236] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 201.241796][ T5249] loop4: detected capacity change from 0 to 512 [ 202.020102][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 202.026179][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 202.149715][ T5249] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 202.186372][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 202.224119][ T5249] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 202.574101][ T5249] loop4: detected capacity change from 0 to 256 [ 202.781610][ T5249] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 202.873047][ T5109] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.889072][ T5109] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.917068][ T5109] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.954911][ T5109] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.268155][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.508298][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.613105][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.902720][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.085816][ T141] device hsr_slave_0 left promiscuous mode [ 206.094102][ T141] device hsr_slave_1 left promiscuous mode [ 206.124567][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.303386][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.354835][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.373877][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.390302][ T141] device bridge_slave_1 left promiscuous mode [ 206.398291][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.833982][ T141] device bridge_slave_0 left promiscuous mode [ 206.956224][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.377684][ T141] device veth1_macvtap left promiscuous mode [ 207.384700][ T141] device veth0_macvtap left promiscuous mode [ 207.399892][ T141] device veth1_vlan left promiscuous mode [ 207.406094][ T141] device veth0_vlan left promiscuous mode [ 212.303784][ T141] team0 (unregistering): Port device team_slave_1 removed [ 212.358361][ T141] team0 (unregistering): Port device team_slave_0 removed [ 212.817055][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.872009][ T5333] loop1: detected capacity change from 0 to 512 [ 213.403846][ T5333] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 213.454562][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.458715][ T5333] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 213.637159][ T141] bond0 (unregistering): Released all slaves [ 213.696002][ T5333] loop1: detected capacity change from 0 to 256 [ 213.738473][ T5333] FAT-fs (loop1): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 215.045774][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.055170][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.081267][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.088397][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.163679][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.300751][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.328527][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.335813][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.805884][ T5353] loop1: detected capacity change from 0 to 512 [ 216.815206][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.875730][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.925809][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.045350][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.164931][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.288786][ T5353] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.394027][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.512558][ T5353] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.647653][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.868189][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.946371][ T5366] loop3: detected capacity change from 0 to 512 [ 217.958145][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.986577][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.093502][ T5366] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 218.146458][ T5366] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 218.173150][ T5109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.417241][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.442793][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.409124][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.430138][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.471053][ T5386] loop3: detected capacity change from 0 to 1024 [ 220.489362][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.563818][ T5386] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.786274][ T5386] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 222.400535][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.541474][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.904856][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.956664][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.236750][ T5109] device veth0_vlan entered promiscuous mode [ 223.262812][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.787991][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.061676][ T5109] device veth1_vlan entered promiscuous mode [ 224.339047][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.367642][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.237810][ T5109] device veth0_macvtap entered promiscuous mode [ 225.348685][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.719893][ T5109] device veth1_macvtap entered promiscuous mode [ 225.755470][ T5439] loop3: detected capacity change from 0 to 512 [ 225.793113][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.849509][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.889550][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.919546][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.949557][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.990727][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.010969][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.052435][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.084241][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.114040][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.135425][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.174482][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.199287][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.228655][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.268431][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.286788][ T5439] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.429809][ T5439] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.496190][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.529890][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.559469][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.589473][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.720804][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.744044][ T5109] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.865474][ T5109] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.171912][ T5109] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.231806][ T5109] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.246098][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.266102][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.522734][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.547080][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.627070][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.702785][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.725880][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.962544][ T26] audit: type=1326 audit(1737420580.646:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 229.000172][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 229.087010][ T26] audit: type=1326 audit(1737420580.646:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 229.159398][ T26] audit: type=1326 audit(1737420580.646:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 229.477241][ T26] audit: type=1326 audit(1737420580.646:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 231.685066][ T26] audit: type=1326 audit(1737420580.646:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 231.834920][ T26] audit: type=1326 audit(1737420580.646:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 232.517131][ T26] audit: type=1326 audit(1737420580.646:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 232.631882][ T26] audit: type=1326 audit(1737420580.646:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 232.662959][ T5515] loop5: detected capacity change from 0 to 256 [ 232.698610][ T26] audit: type=1326 audit(1737420580.646:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 232.760298][ T26] audit: type=1326 audit(1737420580.646:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 234.182271][ T5539] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 234.192461][ T5539] FAT-fs (loop5): Filesystem has been set read-only [ 234.199138][ T5539] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 234.209819][ T5539] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 234.374052][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 234.374068][ T26] audit: type=1800 audit(1737420586.916:37): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.346" name="file1" dev="loop5" ino=1048593 res=0 errno=0 [ 234.426233][ T5539] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 234.985184][ T5551] loop3: detected capacity change from 0 to 512 [ 235.211050][ T5551] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.561253][ T5551] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.702847][ T5575] loop1: detected capacity change from 0 to 1024 [ 236.819218][ T5575] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.090039][ T26] audit: type=1326 audit(1737420589.666:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 237.369708][ T26] audit: type=1326 audit(1737420589.666:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 237.409402][ T5575] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 237.659587][ T26] audit: type=1326 audit(1737420589.666:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 237.782961][ T26] audit: type=1326 audit(1737420589.666:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 237.931140][ T5598] loop3: detected capacity change from 0 to 256 [ 238.100914][ T26] audit: type=1326 audit(1737420589.666:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 238.273189][ T26] audit: type=1326 audit(1737420589.666:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 238.349794][ T26] audit: type=1326 audit(1737420589.666:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 238.812728][ T26] audit: type=1326 audit(1737420589.666:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 238.851234][ T26] audit: type=1326 audit(1737420589.666:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a360e8d29 code=0x7ffc0000 [ 238.958209][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 241.558715][ T5644] loop5: detected capacity change from 0 to 512 [ 241.648886][ T5648] loop1: detected capacity change from 0 to 512 [ 241.876926][ T5648] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 241.893004][ T5648] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 241.905147][ T5644] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.939334][ T5644] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.682369][ T5648] loop1: detected capacity change from 0 to 256 [ 242.942067][ T5648] FAT-fs (loop1): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 244.771523][ T5690] loop1: detected capacity change from 0 to 256 [ 246.541211][ T5713] device wg2 entered promiscuous mode [ 248.168999][ T5752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.393'. [ 250.813641][ T5776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.398'. [ 251.657923][ T5782] loop4: detected capacity change from 0 to 1024 [ 251.752239][ T5782] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.934400][ T5782] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 256.833355][ T5837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.408'. [ 256.989293][ T5841] netlink: 'syz.0.410': attribute type 10 has an invalid length. [ 256.997910][ T5841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.410'. [ 257.066607][ T5841] team0: Port device geneve0 added [ 260.967850][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.974268][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.262625][ T5933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.433'. [ 270.114111][ T5966] netlink: 44 bytes leftover after parsing attributes in process `syz.3.442'. [ 271.050776][ T5979] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 274.367533][ T6015] device wg2 left promiscuous mode [ 274.432560][ T6015] device wg2 entered promiscuous mode [ 274.485755][ T6018] loop3: detected capacity change from 0 to 512 [ 274.548971][ T6018] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 274.589696][ T6018] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 274.619686][ T6023] loop4: detected capacity change from 0 to 512 [ 274.715634][ T6018] loop3: detected capacity change from 0 to 256 [ 274.772022][ T6023] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 274.779235][ T6023] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 274.801529][ T6018] FAT-fs (loop3): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 280.847848][ T6081] loop4: detected capacity change from 0 to 512 [ 280.964574][ T6081] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 280.987643][ T6081] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 281.342783][ T6081] loop4: detected capacity change from 0 to 256 [ 281.651649][ T6081] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 284.426363][ T6116] device wg2 left promiscuous mode [ 284.482679][ T6120] device wg2 entered promiscuous mode [ 297.621073][ T6221] device wg2 left promiscuous mode [ 297.661017][ T6221] device wg2 entered promiscuous mode [ 297.750667][ T6227] loop4: detected capacity change from 0 to 512 [ 297.834734][ T6227] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 297.854716][ T6227] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 298.010939][ T6227] loop4: detected capacity change from 0 to 256 [ 298.050975][ T6227] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 307.693680][ T6316] mmap: syz.0.526 (6316) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 308.929956][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 308.939081][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 309.863040][ T4945] Bluetooth: hci3: command 0x0406 tx timeout [ 310.090211][ T6330] loop5: detected capacity change from 0 to 512 [ 310.249995][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 310.329720][ T6330] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 310.539728][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 310.609643][ T6330] EXT4-fs (loop5): Unrecognized mount option "seclabel" or missing value [ 310.650333][ T6334] loop3: detected capacity change from 0 to 256 [ 310.806488][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.829470][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.839275][ T1108] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 310.859476][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.916125][ T1108] usb 1-1: config 0 descriptor?? [ 311.367208][ T6327] udc-core: couldn't find an available UDC or it's busy [ 311.587753][ T6330] loop5: detected capacity change from 0 to 256 [ 311.606406][ T6327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 311.781349][ T6330] FAT-fs (loop5): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 312.310312][ T1108] usbhid 1-1:0.0: can't add hid device: -71 [ 312.320281][ T1108] usbhid: probe of 1-1:0.0 failed with error -71 [ 312.547441][ T1108] usb 1-1: USB disconnect, device number 3 [ 312.669133][ T6348] loop4: detected capacity change from 0 to 1024 [ 312.725323][ T6348] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 312.779075][ T6348] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 313.659264][ T6361] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 313.710030][ T6361] FAT-fs (loop3): Filesystem has been set read-only [ 313.881145][ T6361] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 313.916645][ T6361] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 314.169656][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 314.169672][ T26] audit: type=1800 audit(1737420666.866:55): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.532" name="file1" dev="loop3" ino=1048594 res=0 errno=0 [ 314.176085][ T6361] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 314.501681][ T6354] device wg2 entered promiscuous mode [ 318.415147][ T6411] vivid-008: ================= START STATUS ================= [ 318.424596][ T6411] vivid-008: Generate PTS: true [ 318.431634][ T6411] vivid-008: Generate SCR: true [ 318.437810][ T6411] tpg source WxH: 640x360 (Y'CbCr) [ 318.443340][ T6411] tpg field: 1 [ 318.447896][ T6411] tpg crop: 640x360@0x0 [ 318.453349][ T6411] tpg compose: 640x360@0x0 [ 318.457951][ T6411] tpg colorspace: 8 [ 318.462008][ T6411] tpg transfer function: 0/0 [ 318.539954][ T6411] tpg Y'CbCr encoding: 0/0 [ 318.547215][ T6411] tpg quantization: 0/0 [ 318.567277][ T6411] tpg RGB range: 0/2 [ 318.575165][ T6411] vivid-008: ================== END STATUS ================== [ 319.115608][ T6413] loop3: detected capacity change from 0 to 1024 [ 319.190325][ T6413] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 319.294111][ T6413] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 320.556812][ T6435] loop7: detected capacity change from 0 to 16384 [ 321.184825][ T6436] loop_set_status: loop7 () has still dirty pages (nrpages=440) [ 322.003684][ T6451] syz.5.564[6451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.003803][ T6451] syz.5.564[6451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.903666][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.923724][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.203860][ T26] audit: type=1804 audit(1737420675.896:56): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.564" name="/newroot/49/bus/bus" dev="overlay" ino=294 res=1 errno=0 [ 326.472231][ T6490] loop5: detected capacity change from 0 to 512 [ 326.496639][ T6492] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 326.573757][ T6490] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 326.588484][ T6490] EXT4-fs (loop5): Unrecognized mount option "seclabel" or missing value [ 327.373614][ T6490] loop5: detected capacity change from 0 to 256 [ 327.559132][ T6503] loop3: detected capacity change from 0 to 512 [ 327.570858][ T6490] FAT-fs (loop5): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 329.806982][ T6508] 9pnet_virtio: no channels available for device syz [ 329.824582][ T6508] overlayfs: unrecognized mount option "verity=require" or missing value [ 330.060741][ T6503] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 330.067957][ T6503] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 332.132320][ T6532] capability: warning: `syz.4.586' uses deprecated v2 capabilities in a way that may be insecure [ 334.641308][ T6543] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.591'. [ 334.965078][ T6557] overlayfs: failed to clone upperpath [ 335.373720][ T6564] capability: warning: `syz.3.598' uses 32-bit capabilities (legacy support in use) [ 335.536983][ T6567] loop4: detected capacity change from 0 to 512 [ 335.730863][ T6567] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 335.749817][ T6567] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.760673][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 336.344889][ T1108] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.355921][ T1108] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 336.366219][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.587511][ T26] audit: type=1326 audit(1737420689.156:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 336.735996][ T1108] usb 6-1: config 0 descriptor?? [ 336.776957][ T26] audit: type=1326 audit(1737420689.156:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 336.990757][ T26] audit: type=1326 audit(1737420689.156:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 337.028882][ T26] audit: type=1326 audit(1737420689.156:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 337.308974][ T26] audit: type=1326 audit(1737420689.156:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 337.344765][ T26] audit: type=1326 audit(1737420689.156:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 337.403205][ T26] audit: type=1326 audit(1737420689.156:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 337.456202][ T26] audit: type=1326 audit(1737420689.156:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 337.511059][ T26] audit: type=1326 audit(1737420689.156:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 337.573098][ T26] audit: type=1326 audit(1737420689.156:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc742dd29 code=0x7ffc0000 [ 337.745431][ T1108] pwc: Askey VC010 type 2 USB webcam detected. [ 337.869579][ T1108] pwc: recv_control_msg error -32 req 02 val 2b00 [ 337.909610][ T1108] pwc: recv_control_msg error -32 req 02 val 2700 [ 337.931639][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 337.959996][ T1108] pwc: recv_control_msg error -32 req 02 val 2c00 [ 338.029599][ T1108] pwc: recv_control_msg error -32 req 04 val 1000 [ 338.089737][ T1108] pwc: recv_control_msg error -32 req 04 val 1300 [ 338.149942][ T1108] pwc: recv_control_msg error -32 req 04 val 1400 [ 338.199789][ T1108] pwc: recv_control_msg error -32 req 02 val 2000 [ 338.251944][ T1108] pwc: recv_control_msg error -32 req 02 val 2100 [ 338.335448][ T1108] pwc: recv_control_msg error -32 req 04 val 1500 [ 338.363464][ T6611] loop4: detected capacity change from 0 to 512 [ 338.472284][ T6611] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 338.519613][ T6611] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 338.629618][ T1108] pwc: recv_control_msg error -71 req 02 val 2400 [ 338.649971][ T1108] pwc: recv_control_msg error -71 req 02 val 2600 [ 338.666300][ T6611] loop4: detected capacity change from 0 to 256 [ 338.699561][ T1108] pwc: recv_control_msg error -71 req 02 val 2900 [ 338.720692][ T6611] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 338.736888][ T1108] pwc: recv_control_msg error -71 req 02 val 2800 [ 338.979643][ T1108] pwc: recv_control_msg error -71 req 04 val 1100 [ 339.010215][ T1108] pwc: recv_control_msg error -71 req 04 val 1200 [ 339.607146][ T1108] pwc: Registered as video103. [ 339.724749][ T1108] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 339.818154][ T1108] usb 6-1: USB disconnect, device number 2 [ 340.021071][ T6617] ubi0: attaching mtd0 [ 340.129006][ T6617] ubi0: scanning is finished [ 340.134099][ T6617] ubi0: empty MTD device detected [ 341.421677][ T6617] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 341.429206][ T6617] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 341.589687][ T6617] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 341.596700][ T6617] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 341.604337][ T6617] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 341.611221][ T6617] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 341.619271][ T6617] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1806804217 [ 341.629749][ T6617] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 341.642187][ T6622] ubi0: background thread "ubi_bgt0d" started, PID 6622 [ 446.599370][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 446.606385][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6623/1:b..l [ 446.614794][ C0] (detected by 0, t=10502 jiffies, g=19961, q=148) [ 446.621394][ C0] task:syz-executor state:R running task stack:26744 pid: 6623 ppid: 4168 flags:0x00004000 [ 446.633393][ C0] Call Trace: [ 446.636692][ C0] [ 446.639639][ C0] __schedule+0x12c4/0x45b0 [ 446.644212][ C0] ? release_firmware_map_entry+0x190/0x190 [ 446.650137][ C0] ? preempt_schedule+0xd9/0xe0 [ 446.655376][ C0] preempt_schedule_common+0x83/0xd0 [ 446.660681][ C0] preempt_schedule+0xd9/0xe0 [ 446.665375][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 446.671022][ C0] ? do_set_pte+0x45b/0x660 [ 446.675549][ C0] preempt_schedule_thunk+0x16/0x18 [ 446.680792][ C0] _raw_spin_unlock+0x36/0x40 [ 446.685487][ C0] filemap_map_pages+0x122d/0x15c0 [ 446.690630][ C0] ? filemap_read_page+0x4b0/0x4b0 [ 446.695763][ C0] ? pte_alloc_one+0x2d4/0x360 [ 446.700553][ C0] ? handle_mm_fault+0x1f62/0x5960 [ 446.705689][ C0] handle_mm_fault+0x341b/0x5960 [ 446.710669][ C0] ? numa_migrate_prep+0x1a0/0x1a0 [ 446.715822][ C0] ? vmacache_find+0x4ed/0x590 [ 446.720594][ C0] ? vmacache_update+0x9f/0xf0 [ 446.725381][ C0] exc_page_fault+0x271/0x700 [ 446.730080][ C0] asm_exc_page_fault+0x22/0x30 [ 446.734955][ C0] RIP: 0033:0x7f1bc73ec960 [ 446.739380][ C0] RSP: 002b:00007fffd1b763b8 EFLAGS: 00010206 [ 446.745461][ C0] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 00007f1bc74245cd [ 446.753440][ C0] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 000055556cc067e0 [ 446.761424][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 446.769409][ C0] R10: 000055556cc067d0 R11: 0000000000000246 R12: 0000000000000000 [ 446.777394][ C0] R13: 00000000000535a8 R14: 00007fffd1b76540 R15: 0000000000000088 [ 446.785391][ C0] [ 446.788421][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g19961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 446.799626][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 446.809597][ C0] rcu: RCU grace-period kthread stack dump: [ 446.815484][ C0] task:rcu_preempt state:R running task stack:26144 pid: 15 ppid: 2 flags:0x00004000 [ 446.826275][ C0] Call Trace: [ 446.829561][ C0] [ 446.832504][ C0] __schedule+0x12c4/0x45b0 [ 446.837025][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 446.842938][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 446.848859][ C0] ? __mod_timer+0xa8e/0xeb0 [ 446.853473][ C0] ? release_firmware_map_entry+0x190/0x190 [ 446.859381][ C0] ? mod_timer_pending+0x20/0x20 [ 446.864333][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 446.869731][ C0] schedule+0x11b/0x1f0 [ 446.873917][ C0] schedule_timeout+0x1b9/0x300 [ 446.878802][ C0] ? console_conditional_schedule+0x40/0x40 [ 446.884736][ C0] ? update_process_times+0x200/0x200 [ 446.890144][ C0] ? prepare_to_swait_event+0x321/0x340 [ 446.895714][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 446.900590][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 446.905807][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 446.912156][ C0] ? rcu_gp_init+0xdae/0x1140 [ 446.916859][ C0] ? rcu_gp_init+0x1140/0x1140 [ 446.921646][ C0] ? finish_swait+0xc5/0x1d0 [ 446.926262][ C0] rcu_gp_kthread+0xa4/0x360 [ 446.930868][ C0] ? _raw_spin_unlock+0x40/0x40 [ 446.935741][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 446.940876][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 446.946790][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 446.951856][ C0] kthread+0x3f6/0x4f0 [ 446.955941][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 446.961074][ C0] ? kthread_blkcg+0xd0/0xd0 [ 446.965679][ C0] ret_from_fork+0x1f/0x30 [ 446.970124][ C0] [ 446.973153][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 446.979477][ C0] NMI backtrace for cpu 0 [ 446.983805][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.176-syzkaller #0 [ 446.991620][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 447.001682][ C0] Call Trace: [ 447.004974][ C0] [ 447.007828][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 447.012532][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 447.018176][ C0] ? panic+0x860/0x860 [ 447.022274][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 447.027234][ C0] ? __wake_up_klogd+0xd5/0x100 [ 447.032104][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 447.038272][ C0] ? _printk+0xd1/0x120 [ 447.042442][ C0] ? cpu_online+0x1f/0x40 [ 447.046786][ C0] ? panic+0x860/0x860 [ 447.050875][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 447.057053][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 447.063050][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 447.069457][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 447.074963][ C0] ? print_cpu_stall+0x600/0x600 [ 447.079929][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 447.084980][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 447.090202][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 447.095428][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 447.100294][ C0] ? hrtimer_run_queues+0x163/0x450 [ 447.105505][ C0] ? account_process_tick+0x232/0x3a0 [ 447.110902][ C0] update_process_times+0x196/0x200 [ 447.116120][ C0] tick_sched_timer+0x386/0x550 [ 447.120990][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 447.126554][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 447.131784][ C0] ? hrtimer_interrupt+0x980/0x980 [ 447.136912][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 447.142997][ C0] hrtimer_interrupt+0x392/0x980 [ 447.147972][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 447.153979][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 447.159641][ C0] [ 447.162577][ C0] [ 447.165513][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 447.171510][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 447.177334][ C0] Code: d4 37 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 d4 4e 3e f7 0f 1f 44 00 00 e8 6a d0 37 f7 0f 00 2d 63 7c bb 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 fb b8 81 f7 [ 447.196980][ C0] RSP: 0018:ffffffff8c807b80 EFLAGS: 000002d3 [ 447.203066][ C0] RAX: ffffffff8a48b476 RBX: 0000000000000000 RCX: ffffffff8c8bd680 [ 447.211146][ C0] RDX: 0000000000000000 RSI: ffffffff8aab2b80 RDI: ffffffff8af9f340 [ 447.219132][ C0] RBP: ffffffff8c807c10 R08: ffffffff81870370 R09: fffffbfff1917ad1 [ 447.227139][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1900f70 [ 447.235133][ C0] R13: ffff88801e73c004 R14: ffffffff8c807ba0 R15: dffffc0000000000 [ 447.243220][ C0] ? trace_hardirqs_on+0x30/0x80 [ 447.248184][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 447.253409][ C0] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 447.258707][ C0] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 447.264276][ C0] ? rcu_qs+0x190/0x190 [ 447.268467][ C0] acpi_idle_enter+0x352/0x4f0 [ 447.273259][ C0] cpuidle_enter_state+0x521/0xef0 [ 447.278404][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 447.283797][ C0] ? can_stop_idle_tick+0x20d/0x2b0 [ 447.289018][ C0] ? tick_nohz_idle_stop_tick+0x354/0xa70 [ 447.294758][ C0] cpuidle_enter+0x59/0x90 [ 447.299201][ C0] do_idle+0x3e4/0x670 [ 447.303306][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 447.308518][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 447.314174][ C0] ? schedule_idle+0x57/0x90 [ 447.318787][ C0] cpu_startup_entry+0x14/0x20 [ 447.323571][ C0] ? time_init+0x40/0x40 [ 447.327832][ C0] start_kernel+0x48c/0x540 [ 447.332360][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 447.338284][ C0]