last executing test programs: 9.86128221s ago: executing program 1 (id=592): syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x1, 0x1526, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x792, &(0x7f0000001300)="$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") r0 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$inet6(0xa, 0x2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.763766151s ago: executing program 2 (id=596): getpid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x200, 0x9) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x4, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='g-jD', 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r3, &(0x7f0000003980)={0x0, 0x0, 0x0}, 0x801) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) read$rfkill(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x2}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a40)={'veth0_to_team\x00', &(0x7f0000000a00)=@ethtool_perm_addr}) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 7.509128274s ago: executing program 0 (id=604): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYBLOB="b4bf6f57f9c7f5c5a48531b8e5", @ANYRESOCT=0x0], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0xfffffffffffffdc0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001080)={0xbc, 0x0, 0x6, 0x7, 0x3, "2c8b8de199419a40"}) 7.136133432s ago: executing program 0 (id=606): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close(0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_genetlink_get_family_id$smc(0x0, r1) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000), 0x10, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)}, {&(0x7f0000000180)="819eb7578a35e734a89ec80c62ad11d2ae7c20c21805daba5b2c24e1955ca3e803fb711791ae18c2c47207521d27078194f946eb72d3c0bdcf2b45604891a4f4c97943f1bc471322b64e19ae69a0db0ade5f4fe526b7c53c54d5035122a1ba6a39429d103dbde06ea01c3ac2c0f10c9a5f4352674164ff82c3426e08f17c7f6e6d1c428c52b6975e9a809adb99a233e5d594f3dd0644393b66bab7082076c2b82143f0de2593a8c8c93a7ec423c9de9876", 0xb1}, {&(0x7f0000000280)="0329018aa7ffac8036393cab909e0cf574e5627200f26872a5b2f7035050a7790c79fd", 0x23}, {&(0x7f00000004c0)}, {&(0x7f00000017c0)}, {0x0}, {&(0x7f0000000540)="00ff84e685dafd5437e89a85a5915f317fb109411a0af9d6cfd0c9f5fa4a34d2dff14f15bee89d4487e62be071be9835af3510feebbe0811", 0x38}, {&(0x7f0000000b80)}], 0x8, &(0x7f00000003c0)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x38}}], 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000e80)=ANY=[@ANYBLOB="7261770000010000000000000000000000000000000000000000000000000000ab0000000fa5751125b5ee920a8393a0af921b4faf2f27af55afe073f0bbeb10392f114079aa5b8589d1c925822634c45ca464378fb34c642db3adb362ecde9c8fbc0a0900000000000000cf4d2e7ce51150b89202cf"], &(0x7f0000000100)=0xcf) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000040)={'virt_wifi0\x00', @broadcast}) 6.223007729s ago: executing program 0 (id=608): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x404, 0x1, 0x90, 0xffffffffffffffff, 0x4}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x22b2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, 0x0, 0x25, 0x1, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000004c0)=r3, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000001b7080000000000007b8af8ff0000110019c400000000000007020000f8ffffffb703000008000000b70400000000000085dee30058528e75cbb12ea804f00a7eceb28763da517f9b3409f7615385b5f7e1dd439553ccbee479c896d27b0fc14fd7"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10) listen(r6, 0xffff8000) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000180)=""/135, 0x87, 0x40000000, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'erspan0\x00'}}, 0x80) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5417, &(0x7f0000000080)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x482, &(0x7f0000000ec0), &(0x7f0000000f00)=0x8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) gettid() 5.725841436s ago: executing program 4 (id=610): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r3, &(0x7f0000000200)="89", 0x3f80) 5.494965293s ago: executing program 1 (id=612): syz_open_dev$evdev(0x0, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0xb3020000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) chdir(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000030100"]) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = dup(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000024000100"], 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000089"]) 5.329027385s ago: executing program 0 (id=615): syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292000301"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$setregset(0x4205, r3, 0x4, &(0x7f0000000280)={&(0x7f0000000180)="9e172c82598fac", 0x7}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) socket(0x200000100000011, 0x803, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000640)=ANY=[@ANYBLOB='-pids +cpu'], 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000200)="3f030e00031b12000000000089e9aaa911d7c2290f00810000008100642c4a1b78610000", 0x24, 0x0, 0x0, 0x0) 5.300408217s ago: executing program 3 (id=616): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.242228071s ago: executing program 2 (id=617): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffef7, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x40005) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x7, 0x26b, 0x3, 0xffffffff, 0x0, 0x4, 0x12, 0xe}}) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00', 0x2f5) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x192) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r2, 0x0) removexattr(0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x51, 0x0, 0x0, 0x0) 5.156993728s ago: executing program 3 (id=618): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close(0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_genetlink_get_family_id$smc(0x0, r1) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000), 0x10, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)}, {&(0x7f0000000180)="819eb7578a35e734a89ec80c62ad11d2ae7c20c21805daba5b2c24e1955ca3e803fb711791ae18c2c47207521d27078194f946eb72d3c0bdcf2b45604891a4f4c97943f1bc471322b64e19ae69a0db0ade5f4fe526b7c53c54d5035122a1ba6a39429d103dbde06ea01c3ac2c0f10c9a5f4352674164ff82c3426e08f17c7f6e6d1c428c52b6975e9a809adb99a233e5d594f3dd0644393b66bab7082076c2b82143f0de2593a8c8c93a7ec423c9de9876", 0xb1}, {&(0x7f0000000280)="0329018aa7ffac8036393cab909e0cf574e5627200f26872a5b2f7035050a7790c79fd", 0x23}, {&(0x7f00000004c0)}, {&(0x7f00000017c0)}, {0x0}, {&(0x7f0000000540)="00ff84e685dafd5437e89a85a5915f317fb109411a0af9d6cfd0c9f5fa4a34d2dff14f15bee89d4487e62be071be9835af3510feebbe0811", 0x38}, {&(0x7f0000000b80)}], 0x8, &(0x7f00000003c0)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x38}}], 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000e80)=ANY=[@ANYBLOB="7261770000010000000000000000000000000000000000000000000000000000ab0000000fa5751125b5ee920a8393a0af921b4faf2f27af55afe073f0bbeb10392f114079aa5b8589d1c925822634c45ca464378fb34c642db3adb362ecde9c8fbc0a0900000000000000cf4d2e7ce51150b89202cf"], &(0x7f0000000100)=0xcf) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000040)={'virt_wifi0\x00', @broadcast}) 4.363535567s ago: executing program 1 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 4.361406597s ago: executing program 4 (id=620): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) dup(r1) openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r3 = socket$kcm(0x11, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, 0x0, 0x3, 0x0, 0x0, 0x0, "edd0961fcbe3a714699b769277aa362003e40900661e12bcca7f88cd6d07f3648c21a4b612af05000000a25b96f8fffffffffffffffe700a13056afd600927"}, 0x60) recvmsg(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40010001) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000100), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, 0x0}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000020d66fcfff936a0013800b0001591523527b2ba977ad46ad56b158006e657e00050004000000e1008ded743b7518db2c714ce44892275f93679fc2054bc7c045522ad4d0d92be5ac0b7073016989801e9276398a724246ec0d07bc04714dfb9ff19d375adced4b0f64dccef0dd9ff990e301b62dc872b589eb954fa5b0de5f38b375faea7667f678a7a7fca70a9b5cf4c53a66461bd1c533c9a32ce508baad25e14a4735f2"], 0x44}, 0x1, 0x2}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000400)={0x5, 0x4, 0x9, 0xf8, 0xffff}) ioctl$TIOCSETD(r5, 0x5425, &(0x7f0000000140)) 4.295570522s ago: executing program 3 (id=621): socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/60, 0x3c}], 0x2, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x162) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8500) getdents(r2, &(0x7f0000000300)=""/115, 0x73) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe2$watch_queue(&(0x7f0000000000), 0x80) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "63057311b2d894db"}}, 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x802, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x7, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b16df9f80fedfa09"}}, 0x48}}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000680)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded241482cfe17c3", 0xb6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 4.283726813s ago: executing program 2 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x0) keyctl$chown(0x11, r4, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x42, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, r6, 0x0}]) 4.153094562s ago: executing program 1 (id=623): socket$alg(0x26, 0x5, 0x0) inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000380)=0x853236b) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0004000000000000000068756765746c6220006465766963"], 0x1b) 3.958551757s ago: executing program 1 (id=624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000180)={[{@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 3.259474309s ago: executing program 4 (id=625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mlockall(0x3) 3.009052587s ago: executing program 2 (id=626): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) open$dir(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x40) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 2.794443463s ago: executing program 1 (id=627): getpid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x200, 0x9) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x4, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='g-jD', 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r3, &(0x7f0000003980)={0x0, 0x0, 0x0}, 0x801) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) read$rfkill(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x2}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a40)={'veth0_to_team\x00', &(0x7f0000000a00)=@ethtool_perm_addr}) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 1.471158901s ago: executing program 4 (id=628): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000040)=[0xe, 0x33c, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 1.409183085s ago: executing program 2 (id=629): syz_open_dev$evdev(0x0, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0xb3020000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) chdir(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000030100"]) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = dup(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000024000100"], 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000089"]) 1.309674873s ago: executing program 4 (id=630): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r3, &(0x7f0000000200)="89", 0x3f80) 1.193141152s ago: executing program 3 (id=631): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close(0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_genetlink_get_family_id$smc(0x0, r1) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000), 0x10, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)}, {&(0x7f0000000180)="819eb7578a35e734a89ec80c62ad11d2ae7c20c21805daba5b2c24e1955ca3e803fb711791ae18c2c47207521d27078194f946eb72d3c0bdcf2b45604891a4f4c97943f1bc471322b64e19ae69a0db0ade5f4fe526b7c53c54d5035122a1ba6a39429d103dbde06ea01c3ac2c0f10c9a5f4352674164ff82c3426e08f17c7f6e6d1c428c52b6975e9a809adb99a233e5d594f3dd0644393b66bab7082076c2b82143f0de2593a8c8c93a7ec423c9de9876", 0xb1}, {&(0x7f0000000280)="0329018aa7ffac8036393cab909e0cf574e5627200f26872a5b2f7035050a7790c79fd", 0x23}, {&(0x7f00000004c0)}, {&(0x7f00000017c0)}, {0x0}, {&(0x7f0000000540)="00ff84e685dafd5437e89a85a5915f317fb109411a0af9d6cfd0c9f5fa4a34d2dff14f15bee89d4487e62be071be9835af3510feebbe0811", 0x38}, {&(0x7f0000000b80)}], 0x8, &(0x7f00000003c0)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x38}}], 0x4, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000e80)=ANY=[@ANYBLOB="7261770000010000000000000000000000000000000000000000000000000000ab0000000fa5751125b5ee920a8393a0af921b4faf2f27af55afe073f0bbeb10392f114079aa5b8589d1c925822634c45ca464378fb34c642db3adb362ecde9c8fbc0a0900000000000000cf4d2e7ce51150b89202cf"], &(0x7f0000000100)=0xcf) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000040)={'virt_wifi0\x00', @broadcast}) 311.678697ms ago: executing program 4 (id=632): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffef7, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x40005) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x7, 0x26b, 0x3, 0xffffffff, 0x0, 0x4, 0x12, 0xe}}) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00', 0x2f5) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x192) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r2, 0x0) removexattr(0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x51, 0x0, 0x0, 0x0) 269.06652ms ago: executing program 3 (id=633): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000580)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@flag='lazytime'}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 255.517701ms ago: executing program 0 (id=634): socket$alg(0x26, 0x5, 0x0) inotify_init1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() open(0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000380)=0x853236b) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0004000000000000000068756765746c6220006465766963"], 0x1b) 192.974256ms ago: executing program 2 (id=635): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000580)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@flag='lazytime'}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000006c0)=ANY=[]) 117.105411ms ago: executing program 0 (id=636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 0s ago: executing program 3 (id=637): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000580)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@flag='lazytime'}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. syzkaller login: [ 43.098074][ T3564] cgroup: Unknown subsys name 'net' [ 43.215537][ T3564] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.344634][ T3564] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 45.581913][ T3577] chnl_net:caif_netlink_parms(): no params data found [ 45.623764][ T3574] chnl_net:caif_netlink_parms(): no params data found [ 45.658412][ T3575] chnl_net:caif_netlink_parms(): no params data found [ 45.709599][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.716997][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.726220][ T3577] device bridge_slave_0 entered promiscuous mode [ 45.753189][ T3580] chnl_net:caif_netlink_parms(): no params data found [ 45.767812][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.775113][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.782916][ T3577] device bridge_slave_1 entered promiscuous mode [ 45.841568][ T3577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.852702][ T3577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.876752][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.884105][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.892475][ T3574] device bridge_slave_0 entered promiscuous mode [ 45.906191][ T3576] chnl_net:caif_netlink_parms(): no params data found [ 45.941550][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.948596][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.956392][ T3574] device bridge_slave_1 entered promiscuous mode [ 45.975245][ T3577] team0: Port device team_slave_0 added [ 46.007489][ T3574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.017786][ T3577] team0: Port device team_slave_1 added [ 46.023839][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.031065][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.038654][ T3575] device bridge_slave_0 entered promiscuous mode [ 46.046049][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.053315][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.061750][ T3580] device bridge_slave_0 entered promiscuous mode [ 46.077137][ T3574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.101266][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.108333][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.116359][ T3575] device bridge_slave_1 entered promiscuous mode [ 46.123877][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.131004][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.138688][ T3580] device bridge_slave_1 entered promiscuous mode [ 46.184793][ T3574] team0: Port device team_slave_0 added [ 46.193237][ T3574] team0: Port device team_slave_1 added [ 46.199725][ T3577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.206779][ T3577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.233204][ T3577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.247410][ T3575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.273257][ T3577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.280200][ T3577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.306466][ T3577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.319018][ T3575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.329892][ T3580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.341189][ T3580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.386791][ T3574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.393946][ T3574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.419903][ T3574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.454740][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.461955][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.469544][ T3576] device bridge_slave_0 entered promiscuous mode [ 46.477725][ T3574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.484724][ T3574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.510843][ T3574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.531414][ T3575] team0: Port device team_slave_0 added [ 46.539048][ T3580] team0: Port device team_slave_0 added [ 46.545079][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.553047][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.561052][ T3576] device bridge_slave_1 entered promiscuous mode [ 46.575092][ T3577] device hsr_slave_0 entered promiscuous mode [ 46.581843][ T3577] device hsr_slave_1 entered promiscuous mode [ 46.589948][ T3575] team0: Port device team_slave_1 added [ 46.598639][ T3580] team0: Port device team_slave_1 added [ 46.645117][ T3576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.662729][ T3575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.669671][ T3575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.695637][ T3575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.721029][ T3576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.733999][ T3575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.741035][ T3575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.767758][ T3575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.779409][ T3580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.786710][ T3580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.812822][ T3580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.852793][ T3580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.859738][ T3580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.885946][ T3580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.899846][ T3574] device hsr_slave_0 entered promiscuous mode [ 46.906946][ T3574] device hsr_slave_1 entered promiscuous mode [ 46.913597][ T3574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.921364][ T3574] Cannot create hsr debugfs directory [ 46.938172][ T3576] team0: Port device team_slave_0 added [ 46.964110][ T3576] team0: Port device team_slave_1 added [ 46.982906][ T3575] device hsr_slave_0 entered promiscuous mode [ 46.989798][ T3575] device hsr_slave_1 entered promiscuous mode [ 46.997110][ T3575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.004922][ T3575] Cannot create hsr debugfs directory [ 47.025196][ T3576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.032242][ T3576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.058235][ T3576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.070182][ T3576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.077232][ T3576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.103320][ T3576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.170821][ T3580] device hsr_slave_0 entered promiscuous mode [ 47.177531][ T3580] device hsr_slave_1 entered promiscuous mode [ 47.184696][ T3580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.193077][ T3580] Cannot create hsr debugfs directory [ 47.256874][ T3576] device hsr_slave_0 entered promiscuous mode [ 47.263572][ T3576] device hsr_slave_1 entered promiscuous mode [ 47.271627][ T1075] Bluetooth: hci3: command 0x0409 tx timeout [ 47.271627][ T3582] Bluetooth: hci2: command 0x0409 tx timeout [ 47.272077][ T1075] Bluetooth: hci1: command 0x0409 tx timeout [ 47.289829][ T3576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.289895][ T1075] Bluetooth: hci0: command 0x0409 tx timeout [ 47.299125][ T3576] Cannot create hsr debugfs directory [ 47.360820][ T1075] Bluetooth: hci4: command 0x0409 tx timeout [ 47.493944][ T3577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.512439][ T3577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.521843][ T3577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.537764][ T3577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.572588][ T3574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.592427][ T3574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.602862][ T3574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.622039][ T3574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.660920][ T3575] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.679808][ T3575] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.690005][ T3575] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.710798][ T3575] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.798453][ T3574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.813085][ T3577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.819969][ T3580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.832030][ T3580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.857405][ T3580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.866858][ T3580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.884911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.894669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.911092][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.919490][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.939474][ T3577] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.956045][ T3574] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.977512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.986746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.996660][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.003862][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.016384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.025555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.034700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.043253][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.050300][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.082861][ T3575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.090053][ T3576] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.104581][ T3576] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.115776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.125179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.134677][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.141760][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.149636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.158528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.167247][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.174342][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.182952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.194182][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.211211][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.220123][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.228396][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.236828][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.246052][ T3576] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.255901][ T3576] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.270137][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.279978][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.289489][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.300918][ T3575] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.334651][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.344713][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.355237][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.364120][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.374420][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.382872][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.389900][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.397877][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.406672][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.415431][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.422544][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.430197][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.439082][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.448220][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.457006][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.466084][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.474769][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.483516][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.491804][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.499705][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.509404][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.518259][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.543600][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.556362][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.565500][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.589596][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.598754][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.608761][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.617871][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.626731][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.635965][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.644991][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.654399][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.668221][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.683991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.695824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.709744][ T3580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.729485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.745829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.762243][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.778164][ T3580] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.796693][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.813210][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.821624][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.833715][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.843664][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.850756][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.858475][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.867350][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.876801][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.883876][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.928945][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.941902][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.961816][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.972206][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.982164][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.993430][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.017516][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.027283][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.039169][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.054999][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.067448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.076447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.088664][ T3577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.107769][ T3580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.122783][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.135310][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.148316][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.156911][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.168200][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.184310][ T3576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.194479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.208621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.221164][ T3574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.238695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.249370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.261779][ T3575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.285445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.293910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.309269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.316889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.337310][ T3576] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.348189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.350541][ T3622] Bluetooth: hci1: command 0x041b tx timeout [ 49.358063][ T3625] Bluetooth: hci0: command 0x041b tx timeout [ 49.367924][ T3622] Bluetooth: hci2: command 0x041b tx timeout [ 49.369165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.374373][ T3622] Bluetooth: hci3: command 0x041b tx timeout [ 49.385001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.397031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.405534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.414302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.422785][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.429804][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.437912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.445799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.445922][ T3625] Bluetooth: hci4: command 0x041b tx timeout [ 49.460353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.475510][ T3580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.485503][ T3577] device veth0_vlan entered promiscuous mode [ 49.503698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.514349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.523187][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.530251][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.539183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.550246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.559114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.578038][ T3577] device veth1_vlan entered promiscuous mode [ 49.586721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.596084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.639405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.648992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.664407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.673868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.682886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.692293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.700590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.709501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.719365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.727563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.738719][ T3574] device veth0_vlan entered promiscuous mode [ 49.756875][ T3575] device veth0_vlan entered promiscuous mode [ 49.777863][ T3577] device veth0_macvtap entered promiscuous mode [ 49.796857][ T3576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.808266][ T3576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.820913][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.829403][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.838739][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.847510][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.855877][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.864279][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.873085][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.881629][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.895631][ T3574] device veth1_vlan entered promiscuous mode [ 49.908918][ T3575] device veth1_vlan entered promiscuous mode [ 49.924308][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.933041][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.946416][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.954691][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.965668][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.991432][ T3577] device veth1_macvtap entered promiscuous mode [ 50.015001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.029399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.038488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.054624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.071248][ T3575] device veth0_macvtap entered promiscuous mode [ 50.085424][ T3574] device veth0_macvtap entered promiscuous mode [ 50.102183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.110236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.119375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.128324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.137115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.146019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.154277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.165485][ T3575] device veth1_macvtap entered promiscuous mode [ 50.184058][ T3574] device veth1_macvtap entered promiscuous mode [ 50.201630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.209535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.217858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.234862][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.249583][ T3576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.263148][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.273182][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.282442][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.291426][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.299732][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.308114][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.318425][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.336013][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.347437][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.358868][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.369362][ T3580] device veth0_vlan entered promiscuous mode [ 50.376716][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.385335][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.395279][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.404805][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.415354][ T3574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.427000][ T3574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.437586][ T3574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.448977][ T3574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.460607][ T3574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.472584][ T3577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.483545][ T3577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.492357][ T3577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.501405][ T3577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.518209][ T3580] device veth1_vlan entered promiscuous mode [ 50.526282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.535140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.543920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.560923][ T3574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.571840][ T3574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.583761][ T3574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.593208][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.604514][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.614650][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.625418][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.639298][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.651743][ T3575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.660907][ T3575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.669600][ T3575] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.678747][ T3575] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.698904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.707865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.717064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.727264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.736276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.745349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.756564][ T3574] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.765470][ T3574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.774302][ T3574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.784226][ T3574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.813685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.822118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.848914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.857949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.876724][ T3576] device veth0_vlan entered promiscuous mode [ 50.915695][ T3580] device veth0_macvtap entered promiscuous mode [ 50.931477][ T3576] device veth1_vlan entered promiscuous mode [ 50.940089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.955910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.965117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.975228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.001076][ T3580] device veth1_macvtap entered promiscuous mode [ 51.038242][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.055538][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.066989][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.078257][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.088317][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.098961][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.110339][ T3580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.137871][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.146370][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.154758][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.164036][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.175160][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.186177][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.196598][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.207341][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.217780][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.228836][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.239981][ T3580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.256148][ T3580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.267412][ T3580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.277216][ T3580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.285994][ T3580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.298580][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.308274][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.316993][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.325928][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.346345][ T3576] device veth0_macvtap entered promiscuous mode [ 51.351003][ T2648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.361381][ T2648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.371648][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.379831][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.403968][ T3576] device veth1_macvtap entered promiscuous mode [ 51.418845][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.427336][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.435472][ T3620] Bluetooth: hci3: command 0x040f tx timeout [ 51.441078][ T3624] Bluetooth: hci0: command 0x040f tx timeout [ 51.447439][ T3624] Bluetooth: hci2: command 0x040f tx timeout [ 51.448913][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.454026][ T3624] Bluetooth: hci1: command 0x040f tx timeout [ 51.463522][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.511728][ T3622] Bluetooth: hci4: command 0x040f tx timeout [ 51.538138][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.548850][ T2648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.552849][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.568392][ T2648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.573358][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.582753][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.586020][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.603667][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.614194][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.624656][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.635008][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.645711][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.657226][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.671943][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.683003][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.683196][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.693240][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.702407][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.718589][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.729182][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.739759][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.749718][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.762213][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.773289][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.782352][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.792871][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.800968][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.809436][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.819574][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.827691][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.837655][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.857766][ T3576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.866975][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.874836][ T3576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.876101][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.884010][ T3576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.901651][ T3576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.958994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.048949][ T2648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.067387][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.099684][ T2648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.106075][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.129191][ T3655] futex_wake_op: syz.2.3 tries to shift op by 32; fix this program [ 52.150913][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.164102][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.174843][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.184084][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.192666][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.227994][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.263158][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.276471][ T3657] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 52.288100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.039659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 53.120807][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 53.141975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 53.535272][ T3624] Bluetooth: hci1: command 0x0419 tx timeout [ 53.537650][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 53.564137][ T3624] Bluetooth: hci2: command 0x0419 tx timeout [ 53.600885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 53.610151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 53.619314][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 53.628479][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 53.638080][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 53.647779][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 53.680822][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 54.101668][ T3624] Bluetooth: hci4: command 0x0419 tx timeout [ 54.420499][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 54.453582][ T3688] fuse: Bad value for 'fd' [ 54.563418][ T3695] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 55.060560][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 55.320641][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 55.441342][ T13] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 55.462376][ T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 55.500266][ T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.522636][ T13] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.595570][ T13] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 55.620522][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.739129][ T3689] delete_channel: no stack [ 56.030931][ T13] usb 4-1: GET_CAPABILITIES returned 0 [ 56.041223][ T13] usbtmc 4-1:16.0: can't read capabilities [ 56.862294][ T13] usb 4-1: USB disconnect, device number 2 [ 56.959866][ T3721] loop1: detected capacity change from 0 to 2048 [ 57.066879][ T3721] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.212119][ T3619] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.038029][ T3619] usb 1-1: Using ep0 maxpacket: 8 [ 58.196325][ T3619] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 58.207035][ T3619] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 58.219129][ T3619] usb 1-1: config 0 has no interface number 0 [ 58.291722][ T3737] Invalid ELF header magic: != ELF [ 58.326431][ T3619] usb 1-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 58.490709][ T3619] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 58.514566][ T3619] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 58.515738][ T3737] syz.1.24 (3737): /proc/3733/oom_adj is deprecated, please use /proc/3733/oom_score_adj instead. [ 58.563927][ T3619] usb 1-1: Product: syz [ 58.576534][ T3619] usb 1-1: config 0 descriptor?? [ 58.760457][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 59.032044][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 59.120612][ T3619] Bluetooth: hci2: command 0x0405 tx timeout [ 59.181779][ T21] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 59.207292][ T21] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 59.227649][ T21] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.259783][ T21] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.280218][ T21] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.306581][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.434314][ T3756] netlink: 52 bytes leftover after parsing attributes in process `syz.1.32'. [ 60.241637][ T3619] usb 1-1: USB disconnect, device number 2 [ 60.324635][ T3765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27'. [ 60.363171][ T3764] loop1: detected capacity change from 0 to 2048 [ 60.374104][ T3765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.27'. [ 60.523847][ T3764] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.190624][ T21] usb 4-1: usb_control_msg returned -71 [ 62.197445][ T21] usbtmc 4-1:16.0: can't read capabilities [ 62.234677][ T21] usb 4-1: USB disconnect, device number 3 [ 62.423625][ T3796] fuse: Bad value for 'fd' [ 63.821213][ T3803] loop1: detected capacity change from 0 to 2048 [ 63.963657][ T3803] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.144648][ T3801] delete_channel: no stack [ 65.333196][ T3845] fuse: Bad value for 'fd' [ 65.359815][ T3843] loop0: detected capacity change from 0 to 4096 [ 65.464078][ T3843] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.804460][ T3858] loop3: detected capacity change from 0 to 2048 [ 66.931879][ T3858] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.128239][ T3874] delete_channel: no stack [ 69.181429][ T3902] loop3: detected capacity change from 0 to 4096 [ 70.009518][ T3902] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.024795][ T3912] loop1: detected capacity change from 0 to 2048 [ 70.170934][ T3912] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.249665][ T3922] futex_wake_op: syz.3.79 tries to shift op by 32; fix this program [ 71.193192][ T1293] cfg80211: failed to load regulatory.db [ 71.194059][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.209804][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.307865][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 73.486749][ T3956] loop2: detected capacity change from 0 to 4096 [ 73.559154][ T3958] loop3: detected capacity change from 0 to 2048 [ 73.589166][ T3966] futex_wake_op: syz.4.94 tries to shift op by 32; fix this program [ 73.614831][ T3956] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.754840][ T3958] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.368295][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 75.720248][ T4011] loop0: detected capacity change from 0 to 2048 [ 75.773833][ T4007] loop4: detected capacity change from 0 to 4096 [ 75.810538][ T4011] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.747537][ T4008] delete_channel: no stack [ 76.845468][ T4007] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.896358][ T4027] futex_wake_op: syz.3.111 tries to shift op by 32; fix this program [ 77.039941][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 78.930514][ T3620] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 78.941979][ T4059] loop0: detected capacity change from 0 to 2048 [ 79.029098][ T4059] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.200460][ T3620] usb 4-1: Using ep0 maxpacket: 8 [ 80.018440][ T3620] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 80.041938][ T3620] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.053209][ T3620] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.065565][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 80.082683][ T3620] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.099410][ T3620] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.110438][ T3620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.490792][ T3620] usb 4-1: GET_CAPABILITIES returned 0 [ 80.496623][ T3620] usbtmc 4-1:16.0: can't read capabilities [ 80.819558][ T3620] usb 4-1: USB disconnect, device number 4 [ 82.394458][ T4099] loop3: detected capacity change from 0 to 4096 [ 82.414265][ T4109] loop4: detected capacity change from 0 to 2048 [ 82.464079][ T4099] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.485462][ T4109] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.970778][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 84.550626][ T3621] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.665023][ T4165] loop3: detected capacity change from 0 to 2048 [ 86.261792][ T4165] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.795460][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 86.836691][ T4177] loop0: detected capacity change from 0 to 4096 [ 86.937801][ T4177] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.480173][ T4215] loop3: detected capacity change from 0 to 2048 [ 89.271858][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 89.302546][ T4215] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.245094][ T4225] loop4: detected capacity change from 0 to 4096 [ 91.139571][ T4210] loop0: detected capacity change from 0 to 32768 [ 91.324579][ T4225] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.421158][ T4210] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 91.435038][ T4210] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 91.449073][ T4210] XFS (loop0): Mounting V5 Filesystem [ 91.600630][ T1293] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.164398][ T4210] XFS (loop0): log mount failed [ 93.486731][ T4289] loop0: detected capacity change from 0 to 2048 [ 93.649619][ T4289] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.589552][ T4285] delete_channel: no stack [ 97.027323][ T4347] Invalid ELF header magic: != ELF [ 99.539846][ T4381] loop3: detected capacity change from 0 to 2048 [ 99.789996][ T4381] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.497846][ T4382] delete_channel: no stack [ 101.295591][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 101.444475][ T4417] loop2: detected capacity change from 0 to 2048 [ 101.544688][ T4417] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 101.617019][ T4417] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 101.623118][ T4417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.970423][ T4428] futex_wake_op: syz.2.226 tries to shift op by 32; fix this program [ 102.031059][ T4427] loop0: detected capacity change from 0 to 2048 [ 102.178625][ T4427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.985684][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 104.084762][ T4468] loop0: detected capacity change from 0 to 64 [ 104.244366][ T4432] loop4: detected capacity change from 0 to 32768 [ 104.318953][ T4445] loop3: detected capacity change from 0 to 32768 [ 104.364693][ T4432] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.228 (4432) [ 104.391576][ T4479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'. [ 104.405685][ T4479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'. [ 104.448050][ T4432] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 104.474076][ T4432] BTRFS info (device loop4): force zlib compression, level 3 [ 104.482704][ T4432] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.493342][ T4432] BTRFS info (device loop4): use zstd compression, level 3 [ 104.501060][ T4432] BTRFS info (device loop4): enabling ssd optimizations [ 104.508321][ T4432] BTRFS info (device loop4): using free space tree [ 105.241899][ T4432] BTRFS info (device loop4): has skinny extents [ 105.271127][ T4445] XFS (loop3): Mounting V5 Filesystem [ 105.388082][ T4491] loop2: detected capacity change from 0 to 2048 [ 105.430877][ T4473] delete_channel: no stack [ 105.515123][ T4445] XFS (loop3): Ending clean mount [ 105.523955][ T4432] BTRFS error (device loop4): open_ctree failed [ 105.534012][ T4491] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.757176][ T4519] futex_wake_op: syz.4.243 tries to shift op by 32; fix this program [ 105.791354][ T3577] XFS (loop3): Unmounting Filesystem [ 107.342438][ T4536] Zero length message leads to an empty skb [ 108.886736][ T4551] netlink: 68 bytes leftover after parsing attributes in process `syz.2.251'. [ 110.296686][ T4559] loop3: detected capacity change from 0 to 2048 [ 110.333953][ T4554] loop4: detected capacity change from 0 to 512 [ 110.423717][ T4554] ======================================================= [ 110.423717][ T4554] WARNING: The mand mount option has been deprecated and [ 110.423717][ T4554] and is ignored by this kernel. Remove the mand [ 110.423717][ T4554] option from the mount to silence this warning. [ 110.423717][ T4554] ======================================================= [ 110.488527][ T4554] EXT4-fs (loop4): Ignoring removed nobh option [ 110.530774][ T4559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.583105][ T4554] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,nobh,grpjquota=,dioread_lock,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 110.732301][ T4554] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038 (0x7fffffff) [ 111.262386][ T4575] futex_wake_op: syz.0.259 tries to shift op by 32; fix this program [ 111.850762][ T4585] netlink: 68 bytes leftover after parsing attributes in process `syz.1.260'. [ 112.382168][ T4586] loop3: detected capacity change from 0 to 512 [ 113.509321][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 113.544140][ T4586] ext4 filesystem being mounted at /47/bus supports timestamps until 2038 (0x7fffffff) [ 116.705013][ T4613] loop0: detected capacity change from 0 to 2048 [ 116.931657][ T4613] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.496711][ T4633] futex_wake_op: syz.4.272 tries to shift op by 32; fix this program [ 118.698710][ T4638] loop0: detected capacity change from 0 to 256 [ 120.321063][ T4637] delete_channel: no stack [ 121.867117][ T4670] loop3: detected capacity change from 0 to 2048 [ 122.117652][ T4670] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.853473][ T4689] loop4: detected capacity change from 0 to 512 [ 122.968190][ T4691] futex_wake_op: syz.3.287 tries to shift op by 32; fix this program [ 123.004117][ T4689] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.156500][ T4689] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.262065][ T4697] xt_limit: Overflow, try lower: 0/0 [ 124.082426][ T4689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 124.123339][ T4689] System zones: 1-12 [ 124.153352][ T4689] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 124.244113][ T4689] EXT4-fs (loop4): 1 truncate cleaned up [ 124.249802][ T4689] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 124.418751][ T4689] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 124.501665][ T4710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 124.546638][ T4710] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 124.792882][ T4719] loop1: detected capacity change from 0 to 2048 [ 125.535808][ T4719] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.416959][ T4747] loop1: detected capacity change from 0 to 512 [ 126.784524][ T4747] EXT4-fs (loop1): Mount option "journal_ioprio=0x0000000000000005" incompatible with ext2 [ 126.910760][ T4750] futex_wake_op: syz.4.303 tries to shift op by 32; fix this program [ 127.081877][ T4742] delete_channel: no stack [ 127.740007][ T25] audit: type=1326 audit(1725186406.331:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 127.834881][ T4767] loop0: detected capacity change from 0 to 256 [ 127.849160][ T25] audit: type=1326 audit(1725186406.331:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 128.079502][ T25] audit: type=1326 audit(1725186406.331:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 128.198563][ T25] audit: type=1326 audit(1725186406.331:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 128.240199][ T4776] loop2: detected capacity change from 0 to 2048 [ 128.285460][ T25] audit: type=1326 audit(1725186406.331:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 128.347630][ T25] audit: type=1326 audit(1725186406.331:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 128.414393][ T4776] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.427734][ T25] audit: type=1326 audit(1725186406.331:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 128.450296][ T25] audit: type=1326 audit(1725186406.331:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 128.473916][ T25] audit: type=1326 audit(1725186406.331:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 128.496423][ T25] audit: type=1326 audit(1725186406.331:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 130.404319][ C0] eth0: bad gso: type: 1, size: 1408 [ 130.414579][ C0] eth0: bad gso: type: 1, size: 1408 [ 131.204779][ T4507] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.937211][ T4820] loop2: detected capacity change from 0 to 2048 [ 132.000450][ T4507] usb 1-1: Using ep0 maxpacket: 8 [ 132.060021][ T4820] EXT4-fs (loop2): Ignoring removed orlov option [ 132.240575][ T4507] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 132.252332][ T4507] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.263253][ T4507] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.273979][ T4507] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.279090][ T4832] fuse: Bad value for 'fd' [ 132.287355][ T4507] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.301407][ T4507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.361324][ T4820] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 132.598741][ T4507] usb 1-1: GET_CAPABILITIES returned 0 [ 132.612720][ T4507] usbtmc 1-1:16.0: can't read capabilities [ 132.642489][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.648773][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.828785][ T3620] usb 1-1: USB disconnect, device number 3 [ 132.898011][ T4814] loop3: detected capacity change from 0 to 32768 [ 134.071058][ T4865] fuse: Bad value for 'fd' [ 134.223995][ T4814] XFS (loop3): Mounting V5 Filesystem [ 134.292189][ T4814] XFS (loop3): log mount failed [ 134.969884][ T4903] loop4: detected capacity change from 0 to 64 [ 135.177098][ T3620] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.269303][ T4907] loop0: detected capacity change from 0 to 64 [ 135.364646][ T4907] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 135.577828][ T4913] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.120464][ T1293] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.483769][ T4936] loop4: detected capacity change from 0 to 512 [ 137.106110][ T4941] process 'syz.0.365' launched './file0' with NULL argv: empty string added [ 137.121506][ T4936] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.133503][ T4936] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038 (0x7fffffff) [ 137.272628][ T4950] loop1: detected capacity change from 0 to 256 [ 137.336591][ T4950] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 137.350705][ T1293] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 137.372880][ T1293] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 137.424789][ T1293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.476440][ T4955] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 137.511820][ T3576] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 137.524759][ T3576] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 137.590764][ T1293] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 137.660848][ T1293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.669908][ T1293] usb 4-1: Product: syz [ 137.674929][ T1293] usb 4-1: Manufacturer: syz [ 137.680053][ T1293] usb 4-1: SerialNumber: syz [ 137.694406][ T1293] usb 4-1: config 0 descriptor?? [ 137.712002][ T4924] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 137.752270][ T1293] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 137.768647][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 137.785438][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 137.798189][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 137.808617][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 137.817746][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 137.827305][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 137.842087][ T1293] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 137.855819][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 137.866038][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 137.874210][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 137.882407][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 137.891610][ T1293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 137.901398][ T1293] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 137.932455][ T1078] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.967010][ T3582] usb 4-1: USB disconnect, device number 5 [ 137.985616][ T3582] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 138.025504][ T3582] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 138.037388][ T3582] keyspan 4-1:0.0: device disconnected [ 138.180479][ T1078] usb 1-1: Using ep0 maxpacket: 8 [ 138.300816][ T1078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.329932][ T1078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.351937][ T1078] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 138.368569][ T1078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.397619][ T1078] usb 1-1: config 0 descriptor?? [ 138.570164][ T2648] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.703891][ T2648] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.804145][ T2648] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.902868][ T2648] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.091903][ T3620] usb 1-1: USB disconnect, device number 4 [ 139.120749][ T3624] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.398003][ T4981] chnl_net:caif_netlink_parms(): no params data found [ 139.398181][ T4998] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 139.417292][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 139.438937][ T3590] Bluetooth: hci1: Dropping invalid advertising data [ 139.446960][ T3590] Bluetooth: hci1: Malicious advertising data. [ 140.329924][ T4981] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.377795][ T4981] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.440568][ T4981] device bridge_slave_0 entered promiscuous mode [ 141.208298][ T3621] Bluetooth: hci2: command 0x0409 tx timeout [ 141.913267][ T5044] sched: RT throttling activated [ 142.350192][ T4981] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.378716][ T4981] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.404104][ T25] kauditd_printk_skb: 59 callbacks suppressed [ 142.404114][ T25] audit: type=1326 audit(1725186421.001:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.0.401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x0 [ 142.441895][ T4981] device bridge_slave_1 entered promiscuous mode [ 142.495928][ T4981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.550022][ T4981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.614254][ T25] audit: type=1326 audit(1725186421.211:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 142.720248][ T25] audit: type=1326 audit(1725186421.241:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 142.751895][ T4981] team0: Port device team_slave_0 added [ 142.810023][ T4981] team0: Port device team_slave_1 added [ 142.878860][ T25] audit: type=1326 audit(1725186421.241:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 142.961230][ T25] audit: type=1326 audit(1725186421.241:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 143.043717][ T25] audit: type=1326 audit(1725186421.241:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 143.083304][ T4981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.115787][ T25] audit: type=1326 audit(1725186421.241:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 143.117081][ T4981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.166821][ T25] audit: type=1326 audit(1725186421.241:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 143.227063][ T4981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.232585][ T25] audit: type=1326 audit(1725186421.241:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 143.273487][ T25] audit: type=1326 audit(1725186421.241:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fedbeb9 code=0x7ffc0000 [ 143.296761][ T1075] Bluetooth: hci2: command 0x041b tx timeout [ 143.323744][ T4981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.340604][ T4981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.415008][ T4981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.617106][ T4981] device hsr_slave_0 entered promiscuous mode [ 143.644848][ T4981] device hsr_slave_1 entered promiscuous mode [ 143.662140][ T4981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.696728][ T4981] Cannot create hsr debugfs directory [ 143.977714][ T2648] device hsr_slave_0 left promiscuous mode [ 144.023316][ T2648] device hsr_slave_1 left promiscuous mode [ 144.110622][ T3624] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.222642][ T2648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.335273][ T2648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.440516][ T3624] usb 3-1: Using ep0 maxpacket: 8 [ 144.455994][ T2648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.520141][ T2648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.564680][ T2648] device bridge_slave_1 left promiscuous mode [ 144.584777][ T2648] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.590841][ T3624] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 144.615290][ T3624] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.643987][ T3624] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.655075][ T3624] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.670531][ T3624] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.679579][ T3624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.700188][ T2648] device bridge_slave_0 left promiscuous mode [ 144.707503][ T2648] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.728219][ T2648] device veth1_macvtap left promiscuous mode [ 144.735040][ T2648] device veth0_macvtap left promiscuous mode [ 144.742473][ T2648] device veth1_vlan left promiscuous mode [ 144.748474][ T2648] device veth0_vlan left promiscuous mode [ 144.850452][ T3621] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 144.918353][ T2648] team0 (unregistering): Port device team_slave_1 removed [ 144.934012][ T2648] team0 (unregistering): Port device team_slave_0 removed [ 144.946660][ T2648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.960627][ T3624] usb 3-1: GET_CAPABILITIES returned 0 [ 144.967936][ T3624] usbtmc 3-1:16.0: can't read capabilities [ 144.967935][ T2648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.049554][ T2648] bond0 (unregistering): Released all slaves [ 145.131570][ T5108] tipc: Started in network mode [ 145.136813][ T5108] tipc: Node identity f7, cluster identity 4711 [ 145.143482][ T5108] tipc: Node number set to 247 [ 145.172607][ T3624] usb 3-1: USB disconnect, device number 5 [ 145.257313][ T3621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.289577][ T3621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64 [ 145.310815][ T3621] usb 5-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 145.321061][ T3621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.349114][ T3621] usb 5-1: config 0 descriptor?? [ 145.368908][ T3625] Bluetooth: hci2: command 0x040f tx timeout [ 145.622393][ T5106] udc-core: couldn't find an available UDC or it's busy [ 145.629539][ T5106] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 145.820729][ T3621] usbhid 5-1:0.0: can't add hid device: -71 [ 145.827039][ T3621] usbhid: probe of 5-1:0.0 failed with error -71 [ 145.934770][ T3621] usb 5-1: USB disconnect, device number 3 [ 146.251522][ T4981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.336539][ T4981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.364227][ T4981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.370581][ T3621] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.402915][ T4981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.760596][ T3621] usb 5-1: Using ep0 maxpacket: 16 [ 147.253142][ T5129] delete_channel: no stack [ 147.400682][ T3621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.427504][ T4981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.435425][ T3621] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 147.495052][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.503415][ T3621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.514886][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.551583][ T3621] usb 5-1: config 0 descriptor?? [ 147.567679][ T3624] Bluetooth: hci2: command 0x0419 tx timeout [ 147.579240][ T4981] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.591129][ T3621] usb 5-1: can't set config #0, error -71 [ 147.642048][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.652051][ T3621] usb 5-1: USB disconnect, device number 4 [ 147.661222][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.690668][ T1078] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.707604][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.714880][ T4173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.758196][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.845918][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.889047][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.940883][ T1078] usb 1-1: Using ep0 maxpacket: 32 [ 147.955645][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.962828][ T4173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.990662][ T5171] loop2: detected capacity change from 0 to 2048 [ 147.999084][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.058084][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.104672][ T5171] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.230784][ T1078] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 148.242954][ T4981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.267537][ T1078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.299634][ T4981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.318207][ T1078] usb 1-1: Product: syz [ 148.324300][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.357104][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.378425][ T1078] usb 1-1: Manufacturer: syz [ 148.396786][ T1078] usb 1-1: SerialNumber: syz [ 148.680410][ T4265] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.733202][ T1078] usb 1-1: config 0 descriptor?? [ 148.745274][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.761251][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.770168][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.782233][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.793896][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.803329][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.820071][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.828174][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.061387][ T4265] usb 5-1: Using ep0 maxpacket: 8 [ 149.080658][ T1078] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 149.089547][ T1078] 21 e0 ba fd a7 d3 b2 06 [ 149.104103][ T1078] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 149.377516][ T1078] usb 1-1: USB disconnect, device number 5 [ 150.012962][ T4265] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 150.029221][ T4265] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 150.039644][ T4265] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.049724][ T4265] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.063310][ T4265] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.072578][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.149628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.160730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.214165][ T4981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.366453][ T4265] usb 5-1: GET_CAPABILITIES returned 0 [ 150.372379][ T4265] usbtmc 5-1:16.0: can't read capabilities [ 150.405656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.446712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.495895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.522051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.569871][ T4265] usb 5-1: USB disconnect, device number 5 [ 150.582612][ T4981] device veth0_vlan entered promiscuous mode [ 150.591989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.636207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.668107][ T4981] device veth1_vlan entered promiscuous mode [ 150.765673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.785278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.811589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.846732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.868006][ T4981] device veth0_macvtap entered promiscuous mode [ 150.903681][ T4981] device veth1_macvtap entered promiscuous mode [ 150.955677][ T4981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.985180][ T4981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.018729][ T4981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.058876][ T4981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.118711][ T4981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.159586][ T4981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.188855][ T4981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.223186][ T4981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.271386][ T4981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.335335][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.362636][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.508478][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.059838][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.078439][ T4981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.089342][ T4981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.099856][ T4981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.111330][ T4981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.135774][ T4981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.222765][ T4981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.282113][ T4981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.320533][ T4981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.383282][ T4981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.431699][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.471881][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.578303][ T4981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.630450][ T4981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.650574][ T4981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.694219][ T4981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.895513][ T5285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.450'. [ 152.991507][ T5287] loop0: detected capacity change from 0 to 2048 [ 153.034970][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.099926][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.146876][ T5287] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.175011][ T4105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.178106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.224020][ T4105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.301974][ T5261] delete_channel: no stack [ 153.426205][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.404654][ T5335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.461'. [ 155.519522][ T5336] loop0: detected capacity change from 0 to 2048 [ 156.077953][ T5336] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.015453][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 158.040975][ T3624] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.300460][ T3624] usb 1-1: Using ep0 maxpacket: 8 [ 158.420014][ T5401] loop3: detected capacity change from 0 to 2048 [ 158.461229][ T3624] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.473808][ T3624] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.484163][ T3624] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.494513][ T3624] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.529211][ T3624] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.549879][ T3624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.565768][ T5401] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.886388][ T3624] usb 1-1: usb_control_msg returned -32 [ 158.892303][ T3624] usbtmc 1-1:16.0: can't read capabilities [ 159.401660][ T5422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.486'. [ 159.655832][ T5435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'. [ 160.759547][ T3625] usb 1-1: USB disconnect, device number 6 [ 160.796515][ T5419] delete_channel: no stack [ 160.930594][ T5450] usb usb5: usbfs: process 5450 (syz.1.497) did not claim interface 0 before use [ 165.692235][ T3620] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.950490][ T3620] usb 3-1: Using ep0 maxpacket: 8 [ 166.106584][ T3620] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 166.131690][ T3620] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 166.157677][ T3620] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.169973][ T3620] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.185415][ T3620] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.196536][ T3620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.860625][ T3620] usb 3-1: GET_CAPABILITIES returned 0 [ 166.866631][ T3620] usbtmc 3-1:16.0: can't read capabilities [ 168.188229][ T1075] usb 3-1: USB disconnect, device number 6 [ 170.110680][ T3621] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.559618][ T3625] Bluetooth: hci4: command 0x0406 tx timeout [ 170.562854][ T1078] Bluetooth: hci0: command 0x0406 tx timeout [ 170.582898][ T1078] Bluetooth: hci3: command 0x0406 tx timeout [ 170.731668][ T3621] usb 3-1: Using ep0 maxpacket: 8 [ 171.621420][ T3621] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 171.664612][ T3621] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 171.713218][ T3621] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.746823][ T3621] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.763068][ T3621] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.787220][ T3621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.080592][ T3621] usb 3-1: GET_CAPABILITIES returned 0 [ 172.086298][ T3621] usbtmc 3-1:16.0: can't read capabilities [ 172.909908][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 174.486565][ T3620] usb 3-1: USB disconnect, device number 7 [ 175.920212][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 176.330714][ T3622] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 179.050729][ T5697] loop2: detected capacity change from 0 to 256 [ 179.121055][ T5697] exfat: Deprecated parameter 'utf8' [ 179.170865][ T5697] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0ec8ca35, utbl_chksum : 0xe619d30d) [ 179.658620][ T5681] loop4: detected capacity change from 0 to 40427 [ 179.731939][ T5681] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 179.773242][ T5681] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 179.842835][ T5681] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.331803][ T5728] loop1: detected capacity change from 0 to 256 [ 180.415752][ T5728] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 181.403084][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 181.403099][ T25] audit: type=1800 audit(1725186460.001:82): pid=5728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.592" name="bus" dev="loop1" ino=1048600 res=0 errno=0 [ 181.417520][ T5739] futex_wake_op: syz.4.593 tries to shift op by 32; fix this program [ 181.760656][ T1075] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 182.110554][ T1075] usb 3-1: Using ep0 maxpacket: 8 [ 182.270765][ T1075] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 182.289724][ T1075] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 182.329571][ T1075] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.355850][ T1075] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.393096][ T1075] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.421394][ T1075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.700601][ T1075] usb 3-1: GET_CAPABILITIES returned 0 [ 182.709762][ T1075] usbtmc 3-1:16.0: can't read capabilities [ 182.908851][ T1075] usb 3-1: USB disconnect, device number 8 [ 183.945962][ T5776] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.960221][ T25] audit: type=1326 audit(1725186462.561:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 184.018670][ T25] audit: type=1326 audit(1725186462.561:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 184.063332][ T5780] syz.4.609[5780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.063429][ T5780] syz.4.609[5780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.089372][ T25] audit: type=1326 audit(1725186462.591:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 184.168436][ T5780] device bridge0 entered promiscuous mode [ 184.173806][ T25] audit: type=1326 audit(1725186462.591:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 184.196002][ T5780] device vlan2 entered promiscuous mode [ 184.220433][ T25] audit: type=1326 audit(1725186462.591:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 184.242903][ T5780] device bridge0 left promiscuous mode [ 184.267802][ T25] audit: type=1326 audit(1725186462.591:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 184.318439][ T25] audit: type=1326 audit(1725186462.591:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 184.370240][ T25] audit: type=1326 audit(1725186462.591:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 184.435584][ T25] audit: type=1326 audit(1725186462.591:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 184.681708][ T5790] futex_wake_op: syz.1.612 tries to shift op by 32; fix this program [ 185.079618][ T1075] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 186.866660][ T5824] loop1: detected capacity change from 0 to 512 [ 186.910583][ T1075] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.929948][ T1075] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 187.060663][ T1075] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.121913][ T1075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.157007][ T5824] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 187.183952][ T1075] usb 1-1: SerialNumber: syz [ 187.210631][ T5824] ext4 filesystem being mounted at /39/bus supports timestamps until 2038 (0x7fffffff) [ 187.272685][ T25] kauditd_printk_skb: 72 callbacks suppressed [ 187.272698][ T25] audit: type=1804 audit(1725186465.871:164): pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.624" name="/newroot/39/bus/cgroup.controllers" dev="loop1" ino=18 res=1 errno=0 [ 187.326235][ C0] eth0: bad gso: type: 1, size: 1408 [ 188.294256][ T3623] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 188.725397][ T5842] futex_wake_op: syz.2.629 tries to shift op by 32; fix this program [ 188.735814][ T25] audit: type=1326 audit(1725186467.341:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 188.780532][ T25] audit: type=1326 audit(1725186467.361:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 188.818357][ T25] audit: type=1326 audit(1725186467.361:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 188.878125][ T25] audit: type=1326 audit(1725186467.361:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 188.928603][ T25] audit: type=1326 audit(1725186467.361:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 189.004470][ T25] audit: type=1326 audit(1725186467.361:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 189.036146][ T25] audit: type=1326 audit(1725186467.361:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 189.067343][ T25] audit: type=1326 audit(1725186467.361:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 189.781506][ T25] audit: type=1326 audit(1725186467.361:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02dfd4eb9 code=0x7ffc0000 [ 189.861064][ T3624] usb 1-1: USB disconnect, device number 8 [ 189.908360][ T5855] loop3: detected capacity change from 0 to 1024 [ 189.964986][ T5859] loop2: detected capacity change from 0 to 1024 [ 189.978888][ T5855] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 190.022239][ T5855] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nogrpid,noauto_da_alloc,nomblk_io_submit,lazytime,,errors=continue. Quota mode: none. [ 190.064789][ T5855] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 190.087840][ T5859] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 295.150331][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 295.156997][ C1] rcu: 1-...!: (10500 ticks this GP) idle=1e9/0/0x1 softirq=13946/13946 fqs=0 [ 295.167230][ C1] (t=10501 jiffies g=17069 q=226) [ 295.172342][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g17069 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 295.184672][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=6943 [ 295.192648][ C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g17069 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 295.204197][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 295.214170][ C1] rcu: RCU grace-period kthread stack dump: [ 295.220050][ C1] task:rcu_preempt state:I stack:26712 pid: 15 ppid: 2 flags:0x00004000 [ 295.229439][ C1] Call Trace: [ 295.232738][ C1] [ 295.235668][ C1] __schedule+0x12c4/0x45b0 [ 295.240194][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 295.246093][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 295.251993][ C1] ? __mod_timer+0xa8e/0xeb0 [ 295.256591][ C1] ? release_firmware_map_entry+0x190/0x190 [ 295.262477][ C1] ? mod_timer_pending+0x20/0x20 [ 295.267409][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 295.272780][ C1] schedule+0x11b/0x1f0 [ 295.276928][ C1] schedule_timeout+0x1b9/0x300 [ 295.281788][ C1] ? console_conditional_schedule+0x40/0x40 [ 295.287682][ C1] ? update_process_times+0x200/0x200 [ 295.293057][ C1] ? prepare_to_swait_event+0x321/0x340 [ 295.298776][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 295.303624][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 295.308816][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 295.314014][ C1] ? rcu_gp_init+0xdae/0x1140 [ 295.318778][ C1] ? rcu_gp_init+0x1140/0x1140 [ 295.323544][ C1] ? finish_swait+0xc5/0x1d0 [ 295.328169][ C1] rcu_gp_kthread+0xa4/0x360 [ 295.332754][ C1] ? _raw_spin_unlock+0x40/0x40 [ 295.337602][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 295.342881][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 295.348793][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 295.353826][ C1] kthread+0x3f6/0x4f0 [ 295.357888][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 295.362998][ C1] ? kthread_blkcg+0xd0/0xd0 [ 295.367583][ C1] ret_from_fork+0x1f/0x30 [ 295.372009][ C1] [ 295.375021][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 295.381421][ C1] NMI backtrace for cpu 1 [ 295.385753][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.165-syzkaller #0 [ 295.393545][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 295.403589][ C1] Call Trace: [ 295.406860][ C1] [ 295.409695][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 295.414388][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 295.420024][ C1] ? panic+0x860/0x860 [ 295.424102][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 295.429133][ C1] ? __wake_up_klogd+0xd5/0x100 [ 295.433984][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 295.440137][ C1] ? _printk+0xd1/0x120 [ 295.444290][ C1] ? cpu_online+0x1f/0x40 [ 295.448616][ C1] ? panic+0x860/0x860 [ 295.452696][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 295.458758][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 295.464740][ C1] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 295.470898][ C1] print_cpu_stall+0x31b/0x600 [ 295.475664][ C1] rcu_sched_clock_irq+0x8d9/0x1150 [ 295.480866][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 295.485707][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 295.490901][ C1] ? hrtimer_run_queues+0x163/0x450 [ 295.496273][ C1] ? account_process_tick+0x232/0x3a0 [ 295.501644][ C1] update_process_times+0x196/0x200 [ 295.506838][ C1] tick_sched_timer+0x386/0x550 [ 295.511685][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 295.517225][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 295.522444][ C1] ? hrtimer_interrupt+0x980/0x980 [ 295.527573][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 295.534195][ C1] hrtimer_interrupt+0x392/0x980 [ 295.539242][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 295.545251][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 295.550974][ C1] [ 295.553895][ C1] [ 295.556910][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.562889][ C1] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 295.568710][ C1] Code: 8a 43 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 24 07 4a f7 0f 1f 44 00 00 e8 8a 86 43 f7 0f 00 2d c3 50 a6 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 bb 4f 8d f7 [ 295.588318][ C1] RSP: 0018:ffffc90000d67b00 EFLAGS: 000002d3 [ 295.594390][ C1] RAX: ffffffff8a3cdb16 RBX: 0000000000000000 RCX: ffff888017de8000 [ 295.602372][ C1] RDX: 0000000000000000 RSI: ffffffff8a8b2a20 RDI: ffffffff8ad8f7c0 [ 295.610337][ C1] RBP: ffffc90000d67b90 R08: ffffffff8186e260 R09: ffffed1002fbd001 [ 295.618307][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920001acf60 [ 295.626268][ C1] R13: ffff88801e251004 R14: ffffc90000d67b20 R15: dffffc0000000000 [ 295.634241][ C1] ? trace_hardirqs_on+0x30/0x80 [ 295.639173][ C1] ? acpi_idle_do_entry+0x106/0x340 [ 295.644379][ C1] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 295.649705][ C1] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 295.655242][ C1] ? rcu_qs+0x190/0x190 [ 295.659405][ C1] acpi_idle_enter+0x352/0x4f0 [ 295.664205][ C1] cpuidle_enter_state+0x521/0xef0 [ 295.669322][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 295.674696][ C1] ? can_stop_idle_tick+0x20d/0x2b0 [ 295.679889][ C1] ? tick_nohz_idle_stop_tick+0x354/0xa70 [ 295.685607][ C1] cpuidle_enter+0x59/0x90 [ 295.690028][ C1] do_idle+0x3e4/0x670 [ 295.694097][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 295.699300][ C1] ? schedule_idle+0x57/0x90 [ 295.703881][ C1] ? do_idle+0xc/0x670 [ 295.707949][ C1] cpu_startup_entry+0x14/0x20 [ 295.712709][ C1] start_secondary+0x371/0x500 [ 295.717473][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 295.722850][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 295.728757][ C1] [ 295.731803][ C1] NMI backtrace for cpu 1 [ 295.736125][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.165-syzkaller #0 [ 295.743918][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 295.753960][ C1] Call Trace: [ 295.757232][ C1] [ 295.760065][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 295.764738][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 295.770453][ C1] ? panic+0x860/0x860 [ 295.774540][ C1] ? read_lock_is_recursive+0x10/0x10 [ 295.779913][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 295.784936][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 295.791087][ C1] ? try_to_wake_up+0x844/0x1300 [ 295.796022][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 295.801477][ C1] ? _raw_spin_lock+0x40/0x40 [ 295.806134][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 295.812173][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 295.818133][ C1] rcu_dump_cpu_stacks+0x223/0x390 [ 295.823230][ C1] print_cpu_stall+0x320/0x600 [ 295.828090][ C1] rcu_sched_clock_irq+0x8d9/0x1150 [ 295.833327][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 295.838171][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 295.843358][ C1] ? hrtimer_run_queues+0x163/0x450 [ 295.848560][ C1] ? account_process_tick+0x232/0x3a0 [ 295.853917][ C1] update_process_times+0x196/0x200 [ 295.859186][ C1] tick_sched_timer+0x386/0x550 [ 295.864020][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 295.869643][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 295.874836][ C1] ? hrtimer_interrupt+0x980/0x980 [ 295.879934][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 295.885997][ C1] hrtimer_interrupt+0x392/0x980 [ 295.891033][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 295.897011][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 295.902624][ C1] [ 295.905530][ C1] [ 295.908434][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.914405][ C1] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 295.920189][ C1] Code: 8a 43 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 24 07 4a f7 0f 1f 44 00 00 e8 8a 86 43 f7 0f 00 2d c3 50 a6 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 bb 4f 8d f7 [ 295.939793][ C1] RSP: 0018:ffffc90000d67b00 EFLAGS: 000002d3 [ 295.945957][ C1] RAX: ffffffff8a3cdb16 RBX: 0000000000000000 RCX: ffff888017de8000 [ 295.953917][ C1] RDX: 0000000000000000 RSI: ffffffff8a8b2a20 RDI: ffffffff8ad8f7c0 [ 295.961865][ C1] RBP: ffffc90000d67b90 R08: ffffffff8186e260 R09: ffffed1002fbd001 [ 295.969819][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920001acf60 [ 295.977777][ C1] R13: ffff88801e251004 R14: ffffc90000d67b20 R15: dffffc0000000000 [ 295.985741][ C1] ? trace_hardirqs_on+0x30/0x80 [ 295.990660][ C1] ? acpi_idle_do_entry+0x106/0x340 [ 295.995838][ C1] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 296.001037][ C1] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 296.006578][ C1] ? rcu_qs+0x190/0x190 [ 296.010721][ C1] acpi_idle_enter+0x352/0x4f0 [ 296.015473][ C1] cpuidle_enter_state+0x521/0xef0 [ 296.020568][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 296.025914][ C1] ? can_stop_idle_tick+0x20d/0x2b0 [ 296.031116][ C1] ? tick_nohz_idle_stop_tick+0x354/0xa70 [ 296.036829][ C1] cpuidle_enter+0x59/0x90 [ 296.041227][ C1] do_idle+0x3e4/0x670 [ 296.045380][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 296.050600][ C1] ? schedule_idle+0x57/0x90 [ 296.055168][ C1] ? do_idle+0xc/0x670 [ 296.059216][ C1] cpu_startup_entry+0x14/0x20 [ 296.063957][ C1] start_secondary+0x371/0x500 [ 296.068697][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 296.074572][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 296.080471][ C1]