last executing test programs: 1m25.071080131s ago: executing program 3 (id=303): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lblcr\x00'}, 0x2c) 1m25.004443992s ago: executing program 3 (id=305): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m19.578671953s ago: executing program 3 (id=326): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="ef", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)="b8", 0x1}], 0x1}}], 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000eb00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) close(r0) 1m19.523380844s ago: executing program 3 (id=327): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040600) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) recvfrom$inet6(r0, &(0x7f00000004c0)=""/209, 0xd1, 0x100, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 1m18.110337545s ago: executing program 3 (id=347): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) 1m17.950859897s ago: executing program 3 (id=349): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x80000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x18) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() unshare(0x40020000) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8) 1m2.916387371s ago: executing program 32 (id=349): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x80000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x18) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() unshare(0x40020000) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8) 8.340272225s ago: executing program 5 (id=902): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2003], [], [0x400000000000000]}) 8.198519577s ago: executing program 5 (id=906): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_OPEN(r2, 0x0, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@ignoreqv}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@delqdisc={0x48, 0x25, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0xe}, {0xfff3, 0xe}, {0xfff3, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x18a7}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x1, &(0x7f0000000180)={0x0, 0x5, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000280012800b0001006d616373"], 0x48}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000006240)={0x324, 0x40, 0x300, 0x70bd27, 0x25dfdbfc, {0x9}, [@nested={0x1f0, 0x9, 0x0, 0x1, [@generic="158321004335111c9f7f65052610f85a9c06a0ed640fbd9a32aa1b395781653028712af86373d29e761089964ee1dc484506aa8d545a98820d00d6cc0f339b60f083cd2672ee8da4d653844e6abae918df5a722e847bdb24ff0311cc6b0db192b277b24f9de6dc29b44d5a04563f46349fe0efbf7c36c653ac2bcd3e", @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@empty}, @generic="4afdfc599577a7a0920bf135b6bd1301d85a454629546ad1ba", @generic="740ebed6ab2049676505005b", @generic="8fddaa59eca8986418eff68771673ca65198b918ac0b9097f8a58946a99c50797091b75224d9e74cf98827f3b409088a2edc590ad546d549ad02670979a32c", @generic="d5d0ec5fd885cbcd0b9af3aeaae8f8c96b1a4e908e7992d337e83444d5ccbfe29f35e339ba593a1a3fd196c4bfb0040f3785e22f28266a2cca27c781d8b3e4ff74ef20ae9c0fe2fbe3318d4b8bc57d4351501b5400e723e321381133b306ef96475891edc728e28b143134a46003923568d937019ff166f79efa2d045e646383c0ea263efabedaea87aff4a4f81dc8c211527027de5ad77825f8162be05cbebcf8ebffba323b6a3baed616969a5447f162889f8015983e9cb169e48bc33caa80354c4c7e510f2029753d1ca8183d6b15fb42b2368f4cd32f148d398b6308e50f3a335b67f54ea84ca20bb7742ae8f3ecc6968987b2071405"]}, @generic="9041869d8daf1c6ea273fb8220e9e80bf3745ce069b8171d6e725109bb345fe10fa0057966ef4da7f86cc9fa719aa84dbcdd1178235f99c3656f924d0d20707dcf382d03fd2bcc1993c6a9e0abe9821be9f61c146f85b3c220da567f382e39f0d53add83fa378e5769881349a93b2c177ac235be681b831509bed35a38de32b55d2ab776da0ecdae2502578f7dfb2bd153f027973dab8d6478c302670a66d27c98a3e6", @nested={0x18, 0x27, 0x0, 0x1, [@typed={0x8, 0xf3, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x1b}, @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@local}]}, @typed={0xc, 0x65, 0x0, 0x0, @u64=0x3}, @generic="7a46bbf1082407f6aeeb3634cae1d7", @typed={0x8, 0x4b, 0x0, 0x0, @pid=r7}, @generic="8fdd523db06531626ba5401b720df3d199c66d7626e809c9c530244d3de9f5835e340dfa7290498ecfeb9bc2fd4d5fd3264edcabc24107bc", @generic="cc880e6ce942beb0"]}, 0x324}}, 0x4000) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) read$FUSE(r3, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000009c0)={0x50, 0x0, r9, {0x7, 0x2b, 0x85d6, 0x201000, 0x8001, 0xc, 0x0, 0x10001, 0x0, 0x0, 0x4, 0x2}}, 0x50) 8.198177097s ago: executing program 1 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000002a40)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1f0800450000240000000200119078000000000000000000000007003a4a264bfd0001800000002b02fe57892b31aeee8c7f6366464fc935ee1ef0578cb3f174f3f2175bea655136113e004f347b2a694d030ce9d558c2c0a01e1d9a0f128cbc3df61edb58ddaf58861cb0a6676b53790e70c5c700f880fe6cd4"], 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000020000103000000000000000005000000b44fa9c87cdc1474313dcb18a2f512c3b9b608368a3331a9ab23be4d16da69b246fcfec0e8418e13660e42cd9dcd89d0096e54a20ecc97935f2bee016f0b83717ad9274524c697dd6c6e9476625fffbc993008e5299103909faec3f0d8d367a39f72f29877186b7f65"], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) r5 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r6) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$binfmt_aout(r8, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 7.211411482s ago: executing program 4 (id=910): sched_setaffinity(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x80800) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e25, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 7.009505005s ago: executing program 1 (id=913): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000a40)=""/4096, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 6.911087947s ago: executing program 4 (id=914): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x78, 0x2, 0x3ff, 0x4, "bbfb2dbc0b913f641c35c476f427050501878fc4b694d9cd7e73ac0a0d5c91d0"}) 5.914652802s ago: executing program 5 (id=915): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_setup(0xd0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x3, 0x73, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r2, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1eace2d0fb0a010000000000000000030001000000008000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x400004]}}) 5.016537555s ago: executing program 0 (id=916): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x4, 0x3a, '\x1f\x9e\x10rw\xce(|\xd6@_\x91V\xf6\x87\xc6\xael\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00.\x8dL\x10T\x9eK\x97m\xfc\xc4\xa7\xfe\x13\xed\x1c\xfd', 0x3a, '/dev\x14bus/usb/00#/00#\x007J\xb7ZE\xd1\xec\t\xe9\x87-\xf1\xc4\xa6s\x04YJ5/\xfa\xa3Q\xe8\xae\xdeS\xae0\xed\x8d5\xf3K]anIu\xbf\x9e~\x93\xcf`\xff\xbc\xdf\x90\x94l\x840!\v\x9f\xb2\xfe7\xd7\xadC\x9e\x92\x8b\xe9<\x9bi\xe3.\xf5\f\x95\x89Zr\x16\xb5\xdc\xa8\xd7([\xf1\x10\x814\x9fO\x13\\\xab\v)3/\xb9\x02\xe9O`\x95V\x97\xbe]\x81\xd0\x9bS\xb7\x99\xdf\xc4)\x18P\xa2\xf0>\xfe<\xb8\x95\x8b\xc6~\x03\xb3\x1a\x17&\xfc\xaeN\x99\x06\xebf\f\xe7\x00\x00\x00\x00\x00', 0x3a, './file0'}, 0x105) 4.846452517s ago: executing program 0 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="e1", 0x1}], 0x1}}], 0x1, 0x44810) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 4.799186079s ago: executing program 1 (id=920): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60120008001002"], 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 4.062067159s ago: executing program 0 (id=921): socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1}, 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) 3.835992802s ago: executing program 4 (id=922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) open(0x0, 0x1c383e, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(r1) 2.852660477s ago: executing program 1 (id=925): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 2.755081099s ago: executing program 0 (id=926): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x3, 0x0, {0xa, 0x0, 0x6, @rand_addr=' \x01\x00', 0x200000}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2.754845899s ago: executing program 1 (id=927): fsopen(&(0x7f0000000000)='befs\x00', 0x1) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)='e', 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 2.575468112s ago: executing program 1 (id=928): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x8, 0x0, 0x1, [@typed={0xb, 0x0, 0x0, 0x0, @str='{&(/(:\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000001540), 0x6, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket(0x6, 0x1, 0x0) r4 = syz_open_dev$loop(0x0, 0x81, 0x2a82) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000004b80)) r6 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000140)) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) munlockall() shutdown(r7, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) 2.575196592s ago: executing program 0 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffe79, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = memfd_create(0x0, 0x4) fallocate(r1, 0x3, 0x8dc, 0xfffffffb) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000500)={0x906}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r5}, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r6}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xc0143, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) 2.574995262s ago: executing program 5 (id=930): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_submit(0x0, 0x0, &(0x7f0000000b00)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtclass={0x24, 0x28, 0x4, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%\xde({F\xfaA:', 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) 2.574890222s ago: executing program 4 (id=931): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x3, 0x8001, 0x1, &(0x7f0000000400)='0'}], 0x1}) 2.051830309s ago: executing program 2 (id=932): pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) unshare(0x22020600) process_mrelease(r0, 0x0) 1.926021721s ago: executing program 2 (id=933): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="0000004ae5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000000f9ff"], 0x18}}], 0x2, 0x20004086) 1.882929952s ago: executing program 2 (id=934): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x2251197285d76a80, 0x0, 0x0) 1.821868412s ago: executing program 2 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1.551137517s ago: executing program 5 (id=936): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)="ab", 0x1}], 0x1}}], 0x1, 0x84) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) 1.550835407s ago: executing program 4 (id=937): socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1.29482819s ago: executing program 5 (id=938): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) truncate(0x0, 0x400000f030) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x4, &(0x7f0000003240)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 525.879832ms ago: executing program 4 (id=939): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 525.656952ms ago: executing program 2 (id=940): socket(0x2b, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) brk(0x400000ffc000) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x24fd, 0x0, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 191.085087ms ago: executing program 0 (id=941): socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/4096, 0x1000) 0s ago: executing program 2 (id=942): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) write$rfkill(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 290][ T4036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.158594][ T4036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.230525][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.258068][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.264366][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.268422][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.271049][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.273734][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.278683][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.280811][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.283640][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.289549][ T4034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.318272][ T4034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.357179][ T4034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.412413][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.415596][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.418336][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.420227][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.429274][ T4034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.465833][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.490783][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.513415][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.516985][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.519781][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.529925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.532935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.537326][ T4028] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.577126][ T4028] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.617469][ T4028] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.657857][ T4028] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.732413][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.743431][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.753515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.756175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.758665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.761248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.780303][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.782997][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.801310][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.808033][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.814641][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.817670][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.820272][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.822152][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.827158][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.830059][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.832580][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.834507][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.838634][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.877366][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.888633][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.891194][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.901301][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.903518][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.910674][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.924873][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.928128][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.930797][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.953101][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.956740][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.960858][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.962802][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.967713][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.970488][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.973097][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.975141][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.978767][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.981590][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.984485][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.989213][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.004188][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.007179][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.009753][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.013093][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.016878][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.019424][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.022061][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.027048][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.043896][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.046886][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.049491][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.051429][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.053897][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.063867][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.082512][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.085693][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.088490][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.090454][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.092888][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.099768][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.102756][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.107519][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.109747][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.126757][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.129757][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.132637][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.158877][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.161945][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.171934][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.174847][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.179596][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.182412][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.191986][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.196849][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.199606][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.207528][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.218611][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.222074][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.224852][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.231639][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.238677][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.240830][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.248289][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.252407][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.256243][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.268487][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.283674][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.298709][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.301319][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.327180][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.338460][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.341318][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.347397][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.352455][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.356988][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.358974][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.374549][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.384119][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.392015][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.394753][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.396765][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.402102][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.404847][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.440337][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.442564][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.444694][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.448533][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.451554][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.454201][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.460009][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.462812][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.466357][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.469108][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.471695][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.478022][ T4031] device veth0_vlan entered promiscuous mode [ 46.487709][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.493240][ T4024] device veth0_vlan entered promiscuous mode [ 46.507635][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.509877][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.517183][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.523923][ T4031] device veth1_vlan entered promiscuous mode [ 46.532832][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.538180][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.540705][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.543635][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.547459][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.555780][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.558776][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.561505][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.564229][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.570333][ T4024] device veth1_vlan entered promiscuous mode [ 46.575798][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 46.577462][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 46.580827][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.585580][ T4071] Bluetooth: hci1: command 0x041b tx timeout [ 46.596083][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.598791][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.601985][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.604783][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.611084][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.616634][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.643636][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.647110][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.649930][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.654072][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.657050][ T4071] Bluetooth: hci3: command 0x041b tx timeout [ 46.660231][ T4071] Bluetooth: hci4: command 0x041b tx timeout [ 46.662633][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.670847][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.673665][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.689766][ T4034] device veth0_vlan entered promiscuous mode [ 46.700471][ T4031] device veth0_macvtap entered promiscuous mode [ 46.733850][ T4031] device veth1_macvtap entered promiscuous mode [ 46.741425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.744069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.750996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.754760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.762676][ T4024] device veth0_macvtap entered promiscuous mode [ 46.767541][ T4034] device veth1_vlan entered promiscuous mode [ 46.778789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.781232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.814876][ T4024] device veth1_macvtap entered promiscuous mode [ 46.821546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.824365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.841553][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.853759][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.857042][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.874438][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.878688][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.883414][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.891178][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.893957][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.897699][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.900415][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.910737][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.913117][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.916464][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.920246][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.922602][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.927011][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.929454][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.932166][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.934971][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.937763][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.941321][ T4031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.943845][ T4031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.947346][ T4031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.949659][ T4031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.954474][ T4036] device veth0_vlan entered promiscuous mode [ 46.962690][ T4034] device veth0_macvtap entered promiscuous mode [ 46.980960][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.983931][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.989446][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.994827][ T4024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.000099][ T4024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.002499][ T4024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.005414][ T4024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.011168][ T4036] device veth1_vlan entered promiscuous mode [ 47.016950][ T4034] device veth1_macvtap entered promiscuous mode [ 47.023030][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.026491][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.029174][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.031793][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.034671][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.073453][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.076687][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.079447][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.143977][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.147382][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.150178][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.152726][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.161739][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.164515][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.181640][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.184598][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.187995][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.190782][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.194627][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.199643][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.202498][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.206004][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.208809][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.212582][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.218857][ T4034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.221175][ T4034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.223559][ T4034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.226329][ T4034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.230504][ T4028] device veth0_vlan entered promiscuous mode [ 47.240773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.243589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.248113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.250984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.260676][ T4036] device veth0_macvtap entered promiscuous mode [ 47.280247][ T4094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.282555][ T4094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.287904][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.292139][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.296519][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.297372][ T4036] device veth1_macvtap entered promiscuous mode [ 47.298684][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.308014][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.310670][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.338264][ T4028] device veth1_vlan entered promiscuous mode [ 47.388354][ T4094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.390634][ T4094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.395773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.398425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.401041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.407313][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.410200][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.412870][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.417252][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.419859][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.422603][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.428329][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.440930][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.443744][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.450767][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.454385][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.459480][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.462965][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.466001][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.468826][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.473082][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.478043][ T408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.480224][ T408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.489801][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.492638][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.495663][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.499517][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.502315][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.522318][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.524546][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.532357][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.554712][ T4028] device veth0_macvtap entered promiscuous mode [ 47.573185][ T4036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.578852][ T4036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.581262][ T4036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.583523][ T4036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.599401][ T4028] device veth1_macvtap entered promiscuous mode [ 47.656256][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.658464][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.661191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.686036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.688623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.763664][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.766785][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.769420][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.772254][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.774748][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.784817][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.797464][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.800165][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.816362][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.823880][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.829270][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.838277][ T4107] smc: net device bond0 applied user defined pnetid SYZ2 [ 47.839685][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.853822][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.860710][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.870800][ T4110] smc: net device bond0 erased user defined pnetid SYZ2 [ 47.875370][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.878107][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.880859][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.883522][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.960885][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.965839][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.991751][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.997795][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.046011][ T26] audit: type=1326 audit(48.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 48.052108][ T26] audit: type=1326 audit(48.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 48.077402][ T4028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.079788][ T4028] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.087638][ T26] audit: type=1326 audit(48.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 48.094495][ T26] audit: type=1326 audit(48.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 48.108957][ T26] audit: type=1326 audit(48.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 48.115743][ T4028] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.118800][ T26] audit: type=1326 audit(48.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=8 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 48.125222][ T4028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.128563][ T26] audit: type=1326 audit(48.040:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 48.134307][ T26] audit: type=1326 audit(48.040:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 48.181415][ T4123] loop0: detected capacity change from 0 to 512 [ 48.192680][ T26] audit: type=1326 audit(48.040:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 48.203130][ T26] audit: type=1326 audit(48.040:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 48.214665][ T4127] loop3: detected capacity change from 0 to 128 [ 48.219875][ T4123] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.12: casefold flag without casefold feature [ 48.229061][ T4123] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.12: couldn't read orphan inode 15 (err -117) [ 48.243111][ T4123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.260214][ T337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.262482][ T337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.300642][ T4094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.331607][ T337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.332058][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.337390][ T337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.341034][ T4127] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 48.341105][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.353432][ T4094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.355874][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.385375][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.397411][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.400212][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.417587][ T4123] smc: net device bond0 applied user defined pnetid SYZ0 [ 48.431975][ T4116] hub 9-0:1.0: USB hub found [ 48.444159][ T4123] smc: net device bond0 erased user defined pnetid SYZ0 [ 48.445474][ T4116] hub 9-0:1.0: 8 ports detected [ 48.531702][ T4116] netlink: 'syz.2.10': attribute type 9 has an invalid length. [ 48.656130][ T4069] Bluetooth: hci1: command 0x040f tx timeout [ 48.658251][ T4069] Bluetooth: hci2: command 0x040f tx timeout [ 48.660036][ T4069] Bluetooth: hci0: command 0x040f tx timeout [ 48.719794][ T4138] loop1: detected capacity change from 0 to 8192 [ 48.752401][ T4069] Bluetooth: hci4: command 0x040f tx timeout [ 48.754332][ T4069] Bluetooth: hci3: command 0x040f tx timeout [ 48.778710][ T4138] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.254557][ T4154] smc: net device bond0 applied user defined pnetid SYZ2 [ 49.257626][ T4157] smc: net device bond0 erased user defined pnetid SYZ2 [ 49.464851][ T4167] loop1: detected capacity change from 0 to 512 [ 49.497284][ T4170] loop2: detected capacity change from 0 to 128 [ 49.539414][ T4170] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 49.552551][ T4167] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.25: casefold flag without casefold feature [ 49.558041][ T4167] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.25: couldn't read orphan inode 15 (err -117) [ 49.562325][ T4167] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.641516][ T4167] smc: net device bond0 applied user defined pnetid SYZ0 [ 49.644476][ T4167] smc: net device bond0 erased user defined pnetid SYZ0 [ 49.686857][ T4173] hub 9-0:1.0: USB hub found [ 49.688507][ T4173] hub 9-0:1.0: 8 ports detected [ 49.739258][ T4179] loop4: detected capacity change from 0 to 8192 [ 49.749397][ T4173] netlink: 'syz.0.29': attribute type 9 has an invalid length. [ 49.787709][ T4179] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.196617][ T4192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.281195][ T4205] bpf_jit: unknown atomic op code 01 [ 50.314151][ T4192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.491496][ T4192] bond0 (unregistering): Released all slaves [ 50.672348][ T4216] loop3: detected capacity change from 0 to 164 [ 50.686036][ T4216] ======================================================= [ 50.686036][ T4216] WARNING: The mand mount option has been deprecated and [ 50.686036][ T4216] and is ignored by this kernel. Remove the mand [ 50.686036][ T4216] option from the mount to silence this warning. [ 50.686036][ T4216] ======================================================= [ 51.244312][ T4071] Bluetooth: hci0: command 0x0419 tx timeout [ 51.246335][ T4071] Bluetooth: hci2: command 0x0419 tx timeout [ 51.249348][ T4071] Bluetooth: hci1: command 0x0419 tx timeout [ 51.251141][ T4071] Bluetooth: hci3: command 0x0419 tx timeout [ 51.252815][ T4071] Bluetooth: hci4: command 0x0419 tx timeout [ 51.270623][ T4216] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 52.224454][ T4236] loop4: detected capacity change from 0 to 512 [ 52.409541][ T4236] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 52.411638][ T4236] EXT4-fs (loop4): Ignoring removed bh option [ 52.413512][ T4236] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.416969][ T4236] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.420463][ T4236] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.444474][ T4239] netlink: '+}[@': attribute type 1 has an invalid length. [ 52.445500][ T4236] EXT4-fs (loop4): 1 truncate cleaned up [ 52.448081][ T4236] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 52.529857][ T4227] hub 9-0:1.0: USB hub found [ 52.546397][ T4227] hub 9-0:1.0: 8 ports detected [ 52.594686][ T4245] netlink: 'syz.1.48': attribute type 9 has an invalid length. [ 53.219377][ T4280] tipc: Started in network mode [ 53.223376][ T4280] tipc: Node identity ac14140f, cluster identity 4711 [ 53.245479][ T4280] tipc: New replicast peer: 0.0.255.255 [ 53.254001][ T4280] tipc: Enabled bearer , priority 10 [ 53.323236][ T4285] loop2: detected capacity change from 0 to 512 [ 53.332824][ T4288] loop0: detected capacity change from 0 to 512 [ 53.416968][ T4285] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.429007][ T4288] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 53.597385][ T4312] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 53.609173][ T26] kauditd_printk_skb: 169 callbacks suppressed [ 53.609184][ T26] audit: type=1326 audit(53.580:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 53.650964][ T4312] netlink: 224 bytes leftover after parsing attributes in process `syz.4.80'. [ 53.658455][ T26] audit: type=1326 audit(53.630:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 53.695075][ T26] audit: type=1326 audit(53.630:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 53.700893][ T26] audit: type=1326 audit(53.630:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 53.750869][ T26] audit: type=1326 audit(53.630:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=109 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 53.763903][ T26] audit: type=1326 audit(53.630:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 53.795295][ T26] audit: type=1326 audit(53.630:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 53.862538][ T4324] netlink: 44 bytes leftover after parsing attributes in process `syz.0.84'. [ 53.960602][ T4273] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 54.022746][ T4342] loop3: detected capacity change from 0 to 128 [ 54.136226][ T4347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.90'. [ 54.277614][ T4355] loop1: detected capacity change from 0 to 164 [ 54.385909][ T4222] tipc: Node number set to 2886997007 [ 54.415907][ T4355] process 'syz.1.94' launched '/dev/fd/3' with NULL argv: empty string added [ 54.430061][ T4363] netlink: 136 bytes leftover after parsing attributes in process `syz.4.95'. [ 54.436786][ T4355] attempt to access beyond end of device [ 54.436786][ T4355] loop1: rw=524288, want=263332, limit=164 [ 54.451158][ T4355] attempt to access beyond end of device [ 54.451158][ T4355] loop1: rw=0, want=263332, limit=164 [ 54.478339][ T26] audit: type=1326 audit(54.450:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 54.512927][ T26] audit: type=1326 audit(54.480:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 54.513164][ T4368] loop9: detected capacity change from 0 to 7 [ 54.526902][ T26] audit: type=1326 audit(54.500:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 54.559038][ T4368] Dev loop9: unable to read RDB block 7 [ 54.567517][ T4369] netlink: 68 bytes leftover after parsing attributes in process `syz.0.101'. [ 54.567801][ T4368] loop9: unable to read partition table [ 54.579943][ T4368] loop9: partition table beyond EOD, truncated [ 54.586669][ T4368] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 54.586669][ T4368] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 54.657486][ T4375] loop1: detected capacity change from 0 to 128 [ 54.716054][ T4375] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.720742][ T4375] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.751171][ T4379] loop3: detected capacity change from 0 to 1024 [ 54.883200][ T4379] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.988865][ T4392] loop4: detected capacity change from 0 to 512 [ 55.037928][ T4392] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.054566][ T4392] EXT4-fs (loop4): failed to initialize system zone (-117) [ 55.091452][ T4392] EXT4-fs (loop4): mount failed [ 55.142955][ T4408] mmap: syz.0.117 (4408) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 56.300901][ T4419] netlink: 532 bytes leftover after parsing attributes in process `syz.0.119'. [ 56.780943][ T4442] loop1: detected capacity change from 0 to 164 [ 57.369821][ T4439] loop0: detected capacity change from 0 to 512 [ 57.432021][ T4437] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 57.511458][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 57.681752][ T4439] EXT4-fs (loop0): 1 orphan inode deleted [ 57.683408][ T4439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.934430][ T4459] loop1: detected capacity change from 0 to 8192 [ 58.947523][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 58.947536][ T26] audit: type=1326 audit(58.920:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4477 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 58.954767][ T26] audit: type=1326 audit(58.920:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4477 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 59.010520][ T26] audit: type=1326 audit(58.920:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4477 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 59.207290][ T26] audit: type=1326 audit(59.170:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 60.977923][ T4497] loop2: detected capacity change from 0 to 164 [ 61.133304][ T26] audit: type=1326 audit(61.070:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 61.166106][ T26] audit: type=1326 audit(61.070:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 61.201002][ T26] audit: type=1326 audit(61.070:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 61.220233][ T26] audit: type=1326 audit(61.070:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 61.226209][ T26] audit: type=1326 audit(61.090:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 61.232065][ T26] audit: type=1326 audit(61.090:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 61.258564][ T4496] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 61.422531][ T4505] netlink: 'syz.1.153': attribute type 4 has an invalid length. [ 61.507555][ T4506] netlink: 'syz.1.153': attribute type 4 has an invalid length. [ 62.824505][ T4518] loop0: detected capacity change from 0 to 256 [ 62.861781][ T4522] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.880780][ T4518] FAT-fs (loop0): Directory bread(block 64) failed [ 62.882839][ T4518] FAT-fs (loop0): Directory bread(block 65) failed [ 62.905708][ T4518] FAT-fs (loop0): Directory bread(block 66) failed [ 62.914336][ T4518] FAT-fs (loop0): Directory bread(block 67) failed [ 62.924157][ T4518] FAT-fs (loop0): Directory bread(block 68) failed [ 62.934073][ T4518] FAT-fs (loop0): Directory bread(block 69) failed [ 62.936593][ T4518] FAT-fs (loop0): Directory bread(block 70) failed [ 62.952899][ T4518] FAT-fs (loop0): Directory bread(block 71) failed [ 62.960638][ T4518] FAT-fs (loop0): Directory bread(block 72) failed [ 62.969638][ T4518] FAT-fs (loop0): Directory bread(block 73) failed [ 63.114906][ C0] sched: RT throttling activated [ 63.211072][ T4531] capability: warning: `syz.0.163' uses deprecated v2 capabilities in a way that may be insecure [ 63.441368][ T4535] netlink: 52 bytes leftover after parsing attributes in process `syz.0.165'. [ 63.448929][ T4536] cgroup: Unknown subsys name 'rootcontext' [ 65.139420][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 65.139433][ T26] audit: type=1326 audit(65.110:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 65.160083][ T26] audit: type=1326 audit(65.110:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 65.204700][ T26] audit: type=1326 audit(65.170:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 65.227404][ T26] audit: type=1326 audit(65.170:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 65.233045][ T26] audit: type=1326 audit(65.170:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 65.295342][ T26] audit: type=1326 audit(65.170:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 65.301133][ T26] audit: type=1326 audit(65.170:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 65.312765][ T4577] netlink: 532 bytes leftover after parsing attributes in process `syz.1.184'. [ 65.346989][ T26] audit: type=1326 audit(65.170:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 65.377689][ T26] audit: type=1326 audit(65.170:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 65.412643][ T26] audit: type=1326 audit(65.170:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96bf28a8 code=0x7ffc0000 [ 65.502310][ T4588] loop1: detected capacity change from 0 to 512 [ 65.570692][ T4588] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.611410][ T4588] EXT4-fs warning (device loop1): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.199422][ T4609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.201865][ T4609] IPv6: NLM_F_CREATE should be set when creating new route [ 66.216560][ T4610] loop3: detected capacity change from 0 to 512 [ 66.262467][ T4610] EXT4-fs (loop3): error: journal path ./bus is not a block device [ 66.276241][ T4608] loop4: detected capacity change from 0 to 2048 [ 66.394132][ T4608] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 66.451269][ T4608] EXT4-fs (loop4): shut down requested (0) [ 66.553215][ T4629] device veth0 entered promiscuous mode [ 66.625929][ T4633] Zero length message leads to an empty skb [ 66.644540][ T4633] loop2: detected capacity change from 0 to 512 [ 66.646225][ T4605] device veth0 left promiscuous mode [ 66.683599][ T4633] EXT4-fs (loop2): Ignoring removed oldalloc option [ 66.716706][ T4633] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.207: Parent and EA inode have the same ino 15 [ 66.719083][ T4633] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.719205][ T4633] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.207: Parent and EA inode have the same ino 15 [ 66.721011][ T4633] EXT4-fs (loop2): 1 orphan inode deleted [ 66.733618][ T4633] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,abort,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,block_validity,oldalloc,journal_dev=0x0000000000000077,,errors=continue. Quota mode: none. [ 67.125737][ T4659] loop2: detected capacity change from 0 to 164 [ 68.005250][ T4666] futex_wake_op: syz.4.220 tries to shift op by -1; fix this program [ 68.143898][ T4682] device veth1_to_bond entered promiscuous mode [ 68.162380][ T4682] device veth1_to_bond left promiscuous mode [ 68.171896][ T4687] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 68.256138][ T4693] syz.2.233 uses obsolete (PF_INET,SOCK_PACKET) [ 68.394382][ T4707] loop1: detected capacity change from 0 to 1024 [ 68.443839][ T4707] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.450102][ T4707] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.472098][ T4707] JBD2: no valid journal superblock found [ 68.487411][ T4707] EXT4-fs (loop1): error loading journal [ 68.803269][ T4730] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 68.837590][ T4734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.252'. [ 69.626894][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.628688][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.694387][ T1534] cfg80211: failed to load regulatory.db [ 69.738617][ T4745] 9pnet: p9_errstr2errno: server reported unknown error [ 69.776776][ T4739] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.794304][ T4751] loop4: detected capacity change from 0 to 1024 [ 69.907840][ T4759] atomic_op 000000009b65aa09 conn xmit_atomic 0000000000000000 [ 69.913132][ T4751] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.961063][ T4751] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.258: Allocating blocks 385-513 which overlap fs metadata [ 70.060810][ T4767] EXT4-fs (loop4): pa 00000000ef88a603: logic 16, phys. 129, len 24 [ 70.063387][ T4767] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 70.146362][ T4774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 70.248676][ T4764] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 70.262982][ T4764] usb usb1: usbfs: process 4764 (syz.2.259) did not claim interface 0 before use [ 70.318563][ T26] kauditd_printk_skb: 129 callbacks suppressed [ 70.318575][ T26] audit: type=1326 audit(583.285:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 70.322511][ T4781] capability: warning: `syz.4.268' uses 32-bit capabilities (legacy support in use) [ 70.334987][ T26] audit: type=1326 audit(583.285:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 70.369444][ T26] audit: type=1326 audit(583.285:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 70.407234][ T26] audit: type=1326 audit(583.285:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 70.412971][ T26] audit: type=1326 audit(583.285:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 70.449316][ T26] audit: type=1326 audit(583.285:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 70.475371][ T26] audit: type=1326 audit(583.285:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 70.502167][ T26] audit: type=1326 audit(583.285:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 70.518601][ T26] audit: type=1326 audit(583.305:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 71.945056][ T4811] loop0: detected capacity change from 0 to 256 [ 72.013166][ T4815] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 72.030241][ T4815] loop1: detected capacity change from 0 to 512 [ 72.095257][ T4815] EXT4-fs (loop1): Ignoring removed bh option [ 72.135825][ T4815] EXT4-fs (loop1): Ignoring removed bh option [ 72.137485][ T4815] EXT4-fs (loop1): Unrecognized mount option "=" or missing value [ 72.257892][ T4826] loop3: detected capacity change from 0 to 2048 [ 72.323302][ T26] audit: type=1326 audit(585.285:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15d8a8 code=0x7ffc0000 [ 72.411371][ T4826] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.563440][ T4840] netlink: 'syz.0.289': attribute type 3 has an invalid length. [ 72.608987][ T4845] loop2: detected capacity change from 0 to 512 [ 72.644529][ T4847] loop4: detected capacity change from 0 to 512 [ 72.668372][ T4847] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,sysvgroups,data_err=abort,,errors=continue. Quota mode: writeback. [ 72.756867][ T4845] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 73.032494][ T4877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.302'. [ 76.781924][ T4901] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.785048][ T4901] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.658465][ T4901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.696401][ T4901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.192846][ T4901] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.195664][ T4901] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.198038][ T4901] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.200467][ T4901] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.513416][ T4926] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 78.701226][ T4950] netlink: 104 bytes leftover after parsing attributes in process `syz.2.330'. [ 78.717693][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 78.747551][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 78.747563][ T26] audit: type=1326 audit(591.715:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 78.761509][ T26] audit: type=1326 audit(591.725:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 78.790995][ T26] audit: type=1326 audit(591.725:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 78.803830][ T26] audit: type=1326 audit(591.735:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 78.821324][ T4949] loop0: detected capacity change from 0 to 512 [ 78.841317][ T26] audit: type=1326 audit(591.735:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 78.862226][ T26] audit: type=1326 audit(591.735:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 78.886771][ T26] audit: type=1326 audit(591.735:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 78.902094][ T4949] EXT4-fs (loop0): Ignoring removed oldalloc option [ 78.905318][ T26] audit: type=1326 audit(591.735:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 78.924339][ T26] audit: type=1326 audit(591.735:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9651d8dc code=0x7ffc0000 [ 78.928617][ T4949] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.329: Parent and EA inode have the same ino 15 [ 78.934637][ T4949] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.329: Parent and EA inode have the same ino 15 [ 78.949224][ T26] audit: type=1326 audit(591.735:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9651bf70 code=0x7ffc0000 [ 78.969186][ T4949] EXT4-fs (loop0): 1 orphan inode deleted [ 78.970741][ T4949] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,abort,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,block_validity,oldalloc,journal_dev=0x0000000000000077,,errors=continue. Quota mode: none. [ 79.083935][ T4965] loop2: detected capacity change from 0 to 128 [ 79.139270][ T4965] FAT-fs (loop2): Directory bread(block 32) failed [ 79.141085][ T4965] FAT-fs (loop2): Directory bread(block 33) failed [ 79.142919][ T4965] FAT-fs (loop2): Directory bread(block 34) failed [ 79.144737][ T4965] FAT-fs (loop2): Directory bread(block 35) failed [ 79.153813][ T4965] FAT-fs (loop2): Directory bread(block 36) failed [ 79.156189][ T4965] FAT-fs (loop2): Directory bread(block 37) failed [ 79.158112][ T4965] FAT-fs (loop2): Directory bread(block 38) failed [ 79.159873][ T4965] FAT-fs (loop2): Directory bread(block 39) failed [ 79.161675][ T4965] FAT-fs (loop2): Directory bread(block 40) failed [ 79.163437][ T4965] FAT-fs (loop2): Directory bread(block 41) failed [ 79.289579][ T4965] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 79.291891][ T4965] FAT-fs (loop2): Filesystem has been set read-only [ 79.419213][ T4978] loop1: detected capacity change from 0 to 128 [ 79.771187][ T4978] attempt to access beyond end of device [ 79.771187][ T4978] loop1: rw=2049, want=817, limit=128 [ 79.786931][ T4978] attempt to access beyond end of device [ 79.786931][ T4978] loop1: rw=2049, want=1041, limit=128 [ 79.798971][ T4978] attempt to access beyond end of device [ 79.798971][ T4978] loop1: rw=2049, want=353, limit=128 [ 79.810753][ T4978] attempt to access beyond end of device [ 79.810753][ T4978] loop1: rw=2049, want=825, limit=128 [ 80.156494][ T4998] xt_hashlimit: size too large, truncated to 1048576 [ 80.549486][ T4999] loop4: detected capacity change from 0 to 512 [ 80.631274][ T4999] EXT4-fs (loop4): Ignoring removed oldalloc option [ 80.768845][ T4999] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.348: Parent and EA inode have the same ino 15 [ 80.799508][ T4999] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.348: Parent and EA inode have the same ino 15 [ 80.820579][ T4999] EXT4-fs (loop4): 1 orphan inode deleted [ 80.822167][ T4999] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,abort,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,block_validity,oldalloc,journal_dev=0x0000000000000077,,errors=continue. Quota mode: none. [ 81.371320][ T5020] xt_hashlimit: max too large, truncated to 1048576 [ 82.320443][ T5030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.356'. [ 82.498707][ T5042] ALSA: seq fatal error: cannot create timer (-22) [ 82.671131][ T5046] loop1: detected capacity change from 0 to 1024 [ 82.750177][ T5046] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 83.714098][ T5067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'. [ 84.760375][ T26] kauditd_printk_skb: 114 callbacks suppressed [ 84.760387][ T26] audit: type=1326 audit(597.725:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 84.769304][ T5077] smc: net device bond0 erased user defined pnetid SYZ0 [ 84.798522][ T26] audit: type=1326 audit(597.745:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 84.804602][ T26] audit: type=1326 audit(597.745:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=164 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 84.833827][ T26] audit: type=1326 audit(597.745:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 84.862718][ T26] audit: type=1326 audit(597.745:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 84.956137][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 84.976038][ T5087] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.996808][ T4462] udevd[4462]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 85.006315][ T4462] udevd[4462]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 85.016399][ T5087] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 85.104780][ T4461] udevd[4461]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 85.925078][ T5106] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 85.927394][ T5106] netlink: 224 bytes leftover after parsing attributes in process `syz.1.388'. [ 86.467292][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 86.749763][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.768928][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.776521][ T5094] device bridge_slave_0 entered promiscuous mode [ 86.800316][ T5123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.390'. [ 86.824602][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.827512][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.832516][ T5094] device bridge_slave_1 entered promiscuous mode [ 86.941836][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.964205][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.083122][ T5094] team0: Port device team_slave_0 added [ 87.114273][ T5094] team0: Port device team_slave_1 added [ 87.201806][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.203814][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.222339][ T5131] loop1: detected capacity change from 0 to 2048 [ 87.223948][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 87.228104][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 87.230582][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.245371][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.247324][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.254379][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.328215][ T5131] EXT4-fs (loop1): failed to initialize system zone (-117) [ 87.330314][ T5131] EXT4-fs (loop1): mount failed [ 87.424500][ T5094] device hsr_slave_0 entered promiscuous mode [ 87.465618][ T5094] device hsr_slave_1 entered promiscuous mode [ 87.471016][ T26] audit: type=1326 audit(600.435:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 87.503066][ T26] audit: type=1326 audit(600.465:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 87.509205][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.511217][ T5094] Cannot create hsr debugfs directory [ 87.534390][ T26] audit: type=1326 audit(600.495:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 87.540621][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 87.575003][ T26] audit: type=1326 audit(600.495:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 87.581369][ T26] audit: type=1326 audit(600.505:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f518a8 code=0x7ffc0000 [ 87.652497][ T5151] loop1: detected capacity change from 0 to 512 [ 87.712117][ T5151] EXT4-fs (loop1): too many log groups per flexible block group [ 87.712256][ T5151] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 87.712329][ T5151] EXT4-fs (loop1): mount failed [ 88.367471][ T136] tipc: Disabling bearer [ 88.368704][ T136] tipc: Left network mode [ 88.438426][ T5094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.478831][ T5094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.516564][ T5177] loop2: detected capacity change from 0 to 512 [ 88.561933][ T5177] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 88.564047][ T5177] EXT4-fs (loop2): Ignoring removed bh option [ 88.564073][ T5177] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.583345][ T5094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.587498][ T5177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.613971][ T5177] EXT4-fs (loop2): 1 truncate cleaned up [ 88.613995][ T5177] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 88.624639][ T5094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.909861][ T5183] netlink: 'syz.0.403': attribute type 13 has an invalid length. [ 89.001280][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.013505][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.014020][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.018153][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.029413][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.029973][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.030353][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.042635][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.044666][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.098611][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.099157][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.099513][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.099566][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.099978][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.119241][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.124129][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.134535][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.142133][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.155831][ T5094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.155857][ T5094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.158987][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.159718][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.160277][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.160716][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.161351][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.161847][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.162337][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.346238][ T5194] loop2: detected capacity change from 0 to 512 [ 89.390312][ T5194] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.407136][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.409325][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.423152][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.434573][ T5194] EXT4-fs (loop2): 1 truncate cleaned up [ 89.443375][ T5194] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.615101][ T4222] Bluetooth: hci4: command 0x041b tx timeout [ 89.632323][ T5204] loop1: detected capacity change from 0 to 512 [ 89.743200][ T5204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 89.763262][ T5204] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.767575][ T5204] EXT4-fs warning (device loop1): ext4_enable_quotas:6456: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 89.772272][ T5204] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 89.783868][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.786883][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.801064][ T5204] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.408: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 89.808127][ T5094] device veth0_vlan entered promiscuous mode [ 89.811857][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.814621][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.834663][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.838499][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.843125][ T5094] device veth1_vlan entered promiscuous mode [ 89.852165][ T5204] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.408: couldn't read orphan inode 13 (err -117) [ 89.863813][ T5094] device veth0_macvtap entered promiscuous mode [ 89.867304][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.869931][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.872569][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.897029][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.904106][ T5204] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 89.917198][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.942596][ T5094] device veth1_macvtap entered promiscuous mode [ 89.972621][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.973826][ T5204] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 89.995609][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.996174][ T5204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 89.999090][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.003354][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.025341][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.035176][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.038299][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.039294][ T5204] EXT4-fs warning (device loop1): ext4_enable_quotas:6456: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 90.040952][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.040971][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.052835][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.076783][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.079834][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.104637][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.107994][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.110538][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.113467][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.135007][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.145227][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.147899][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.160981][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.165505][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.211202][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.214064][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.220039][ T5094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.222615][ T5094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.232747][ T5094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.235387][ T5094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.422710][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.425467][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.478981][ T136] device hsr_slave_0 left promiscuous mode [ 90.505984][ T136] device hsr_slave_1 left promiscuous mode [ 90.595905][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.598782][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.601324][ T136] device bridge_slave_1 left promiscuous mode [ 90.603917][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.679635][ T136] device bridge_slave_0 left promiscuous mode [ 90.679810][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.093040][ T136] team0 (unregistering): Port device team_slave_1 removed [ 91.132862][ T136] team0 (unregistering): Port device team_slave_0 removed [ 91.153560][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.247270][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.445947][ T5241] 9pnet_virtio: no channels available for device syz [ 91.605293][ T136] bond0 (unregistering): Released all slaves [ 91.705208][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 91.722571][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.732887][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 91.771075][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.773429][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.783389][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.101773][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 92.101785][ T26] audit: type=1326 audit(605.065:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8ead8a8 code=0x7ffc0000 [ 92.131311][ T26] audit: type=1326 audit(605.095:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa8ead8a8 code=0x7ffc0000 [ 92.139186][ T26] audit: type=1326 audit(605.105:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8ead8a8 code=0x7ffc0000 [ 92.171134][ T26] audit: type=1326 audit(605.125:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa8ead8a8 code=0x7ffc0000 [ 92.192869][ T26] audit: type=1326 audit(605.125:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8ead8a8 code=0x7ffc0000 [ 92.205055][ T26] audit: type=1326 audit(605.125:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa8ead8a8 code=0x7ffc0000 [ 92.236809][ T26] audit: type=1326 audit(605.125:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8ead8a8 code=0x7ffc0000 [ 92.322790][ T26] audit: type=1326 audit(605.125:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa8ead8a8 code=0x7ffc0000 [ 92.360923][ T26] audit: type=1326 audit(605.125:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8ead8a8 code=0x7ffc0000 [ 92.383113][ T26] audit: type=1326 audit(605.125:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=35 compat=0 ip=0xffffa8ead8a8 code=0x7ffc0000 [ 93.221143][ T5280] IPv6: Can't replace route, no match found [ 93.803516][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 94.695867][ T5308] loop1: detected capacity change from 0 to 8192 [ 95.249578][ T5308] loop1: p1 p2 [ 95.250751][ T5308] loop1: partition table partially beyond EOD, truncated [ 95.259456][ T5308] loop1: p2 start 3506442254 is beyond EOD, truncated [ 95.838091][ T4018] udevd[4018]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 96.488603][ T5337] device syzkaller0 entered promiscuous mode [ 97.070906][ T5350] loop1: detected capacity change from 0 to 164 [ 97.077061][ T5326] chnl_net:caif_netlink_parms(): no params data found [ 97.153634][ T5352] binfmt_misc: register: failed to install interpreter file ./file0 [ 97.312863][ T5326] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.325055][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.352896][ T5326] device bridge_slave_0 entered promiscuous mode [ 97.383223][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.396189][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.405334][ T5326] device bridge_slave_1 entered promiscuous mode [ 97.482929][ T5326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.544549][ T5326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.599432][ T5326] team0: Port device team_slave_0 added [ 97.603316][ T5326] team0: Port device team_slave_1 added [ 97.635880][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.639153][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.683187][ T5326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.689218][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.691114][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.733224][ T5326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.740505][ T5370] netlink: 'syz.1.471': attribute type 6 has an invalid length. [ 97.847022][ T5326] device hsr_slave_0 entered promiscuous mode [ 97.855190][ T4222] Bluetooth: hci5: command 0x0409 tx timeout [ 97.866392][ T5326] device hsr_slave_1 entered promiscuous mode [ 97.930333][ T5326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.932441][ T5326] Cannot create hsr debugfs directory [ 97.934385][ T5377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 98.253068][ T5382] device syz_tun entered promiscuous mode [ 98.254730][ T5382] device macsec1 entered promiscuous mode [ 98.259806][ T5382] device syz_tun left promiscuous mode [ 98.321784][ T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.365892][ T5394] loop4: detected capacity change from 0 to 164 [ 98.456399][ T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.558264][ T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.643501][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.657955][ T5408] loop1: detected capacity change from 0 to 128 [ 98.698580][ T5408] FAT-fs (loop1): Directory bread(block 32) failed [ 98.700459][ T5408] FAT-fs (loop1): Directory bread(block 33) failed [ 98.702363][ T5408] FAT-fs (loop1): Directory bread(block 34) failed [ 98.704121][ T5408] FAT-fs (loop1): Directory bread(block 35) failed [ 98.715997][ T5408] FAT-fs (loop1): Directory bread(block 36) failed [ 98.720396][ T5408] FAT-fs (loop1): Directory bread(block 37) failed [ 98.722359][ T5408] FAT-fs (loop1): Directory bread(block 38) failed [ 98.724274][ T5408] FAT-fs (loop1): Directory bread(block 39) failed [ 98.732273][ T5408] FAT-fs (loop1): Directory bread(block 40) failed [ 98.734528][ T5408] FAT-fs (loop1): Directory bread(block 41) failed [ 98.883324][ T5406] udc-core: couldn't find an available UDC or it's busy [ 98.885462][ T5406] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 99.755303][ T5408] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 99.757480][ T5408] FAT-fs (loop1): Filesystem has been set read-only [ 99.919193][ T5326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.941803][ T1981] Bluetooth: hci5: command 0x041b tx timeout [ 99.993892][ T5326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.067563][ T5326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.127116][ T5326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.436985][ T5326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.483324][ T5326] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.497457][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.500211][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.595495][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.596053][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.596352][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.596384][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.596740][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.597194][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.597535][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.597565][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.608453][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.608984][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.609676][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.611681][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.689388][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.722372][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.729230][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.743485][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.918910][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.926620][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.950099][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.952951][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.862524][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.864735][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.903036][ T5326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.025322][ T4222] Bluetooth: hci5: command 0x040f tx timeout [ 102.208750][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 102.208763][ T26] audit: type=1326 audit(615.175:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 102.225355][ T26] audit: type=1326 audit(615.185:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 102.248136][ T26] audit: type=1326 audit(615.185:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 102.281480][ T26] audit: type=1326 audit(615.195:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 102.304190][ T26] audit: type=1326 audit(615.195:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 102.352130][ T26] audit: type=1326 audit(615.195:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 102.371569][ T26] audit: type=1326 audit(615.195:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 102.384157][ T26] audit: type=1326 audit(615.195:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=87 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 102.434989][ T26] audit: type=1326 audit(615.195:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 102.462004][ T5523] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 102.553210][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.557760][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.613930][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.626119][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.660867][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.667142][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.699790][ T5326] device veth0_vlan entered promiscuous mode [ 102.715829][ T5531] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 102.748939][ T5531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.762979][ T136] device hsr_slave_0 left promiscuous mode [ 102.833085][ T136] device hsr_slave_1 left promiscuous mode [ 102.905313][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.907690][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.928834][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.936854][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.948410][ T136] device bridge_slave_1 left promiscuous mode [ 102.957146][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.039881][ T136] device bridge_slave_0 left promiscuous mode [ 103.041800][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.189380][ T136] device veth1_macvtap left promiscuous mode [ 103.192419][ T136] device veth0_macvtap left promiscuous mode [ 103.194207][ T136] device veth1_vlan left promiscuous mode [ 103.201268][ T136] device veth0_vlan left promiscuous mode [ 103.684078][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 103.756140][ T5544] hub 6-0:1.0: USB hub found [ 103.766231][ T5544] hub 6-0:1.0: 8 ports detected [ 103.815262][ T136] team0 (unregistering): Port device team_slave_1 removed [ 103.834869][ T136] team0 (unregistering): Port device team_slave_0 removed [ 103.864010][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.927996][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.071627][ T136] bond0 (unregistering): Released all slaves [ 104.105175][ T4222] Bluetooth: hci5: command 0x0419 tx timeout [ 104.173777][ T5326] device veth1_vlan entered promiscuous mode [ 104.201778][ T5531] bond1: (slave gretap1): making interface the new active one [ 104.215792][ T5531] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 104.219113][ T5539] netlink: 52 bytes leftover after parsing attributes in process `syz.1.528'. [ 104.221796][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.224612][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 104.264244][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.268077][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.288057][ T5326] device veth0_macvtap entered promiscuous mode [ 104.309171][ T5326] device veth1_macvtap entered promiscuous mode [ 104.350916][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.360959][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.364297][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.372310][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.382778][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.389671][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.392434][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.400439][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.405910][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.409539][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.411221][ T5543] infiniband syz!: set active [ 104.412294][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.413189][ T5543] infiniband syz!: added team_slave_0 [ 104.416896][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.422098][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.427406][ T5564] loop8: detected capacity change from 0 to 16384 [ 104.437538][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.440236][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.459081][ T5543] RDS/IB: syz!: added [ 104.460664][ T5543] smc: adding ib device syz! with port count 1 [ 104.462370][ T5543] smc: ib device syz! port 1 has pnetid [ 104.469169][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.471840][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.474802][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.478317][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.480948][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.483786][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.490026][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.495990][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.498714][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.529282][ T5326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.549803][ T5326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.567157][ T5567] dns_resolver: Unsupported content type (2) [ 104.577084][ T5326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.579396][ T5326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.594846][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'. [ 104.623445][ T5567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.634080][ T5567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.653376][ T5567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.683371][ T5567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.906883][ T4662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.928689][ T4662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.965669][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.026515][ T4662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.028838][ T4662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.034490][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.133498][ T5586] loop4: detected capacity change from 0 to 512 [ 105.323829][ T26] audit: type=1326 audit(618.285:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 105.462606][ T5586] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.795924][ T5613] loop4: detected capacity change from 0 to 1764 [ 105.887975][ T5621] device macvtap0 entered promiscuous mode [ 105.890476][ T5621] device macvtap0 left promiscuous mode [ 106.198019][ T5637] tipc: Started in network mode [ 106.199795][ T5637] tipc: Node identity e6a9389dbe, cluster identity 4711 [ 106.209113][ T5637] tipc: Enabled bearer , priority 0 [ 106.229460][ T5637] tipc: Resetting bearer [ 106.251917][ T5636] tipc: Disabling bearer [ 106.813390][ T5662] loop4: detected capacity change from 0 to 2048 [ 106.870897][ T5672] tipc: Started in network mode [ 106.872369][ T5672] tipc: Node identity 2, cluster identity 3142 [ 106.874117][ T5672] tipc: Node number set to 2 [ 106.878770][ T5672] tipc: Cannot configure node identity twice [ 106.882317][ T5662] EXT4-fs (loop4): failed to initialize system zone (-117) [ 106.884415][ T5662] EXT4-fs (loop4): mount failed [ 106.995705][ T5680] netlink: 156 bytes leftover after parsing attributes in process `syz.1.568'. [ 107.324408][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 107.429159][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 107.429171][ T26] audit: type=1326 audit(620.395:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b9b8a8 code=0x7ffc0000 [ 107.456843][ T26] audit: type=1326 audit(620.425:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff88b9b8a8 code=0x7ffc0000 [ 107.469134][ T26] audit: type=1326 audit(620.435:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff88b9b8dc code=0x7ffc0000 [ 107.524953][ T26] audit: type=1326 audit(620.435:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff88b9b8dc code=0x7ffc0000 [ 107.530892][ T26] audit: type=1326 audit(620.435:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b9b8a8 code=0x7ffc0000 [ 107.576178][ T26] audit: type=1326 audit(620.455:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff88b9b8a8 code=0x7ffc0000 [ 107.614871][ T26] audit: type=1326 audit(620.455:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b9b8a8 code=0x7ffc0000 [ 107.757727][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 107.833743][ T26] audit: type=1326 audit(620.795:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b9b8a8 code=0x7ffc0000 [ 107.866915][ T26] audit: type=1326 audit(620.835:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88b9b8a8 code=0x7ffc0000 [ 107.892265][ T26] audit: type=1326 audit(620.845:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b9b8a8 code=0x7ffc0000 [ 111.928868][ T5814] netlink: 'syz.5.609': attribute type 10 has an invalid length. [ 111.979075][ T5814] team0: Port device dummy0 added [ 111.995254][ T5817] netlink: 'syz.5.609': attribute type 10 has an invalid length. [ 111.998249][ T5817] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.017015][ T4024] ODEBUG: Out of memory. ODEBUG disabled [ 112.123756][ T5817] team0: Failed to send options change via netlink (err -105) [ 112.143399][ T5817] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.177990][ T5817] team0: Port device dummy0 removed [ 112.196398][ T5817] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 112.215555][ T5825] netlink: 'syz.4.613': attribute type 4 has an invalid length. [ 112.275063][ T5825] netlink: 'syz.4.613': attribute type 4 has an invalid length. [ 112.653894][ T5839] loop5: detected capacity change from 0 to 164 [ 113.455377][ T5848] netlink: 'syz.2.610': attribute type 1 has an invalid length. [ 113.457498][ T5848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.610'. [ 113.729535][ T5857] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.848362][ T5857] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.956647][ T5857] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.073045][ T5857] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.301167][ T5857] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.366956][ T5857] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.373441][ T5857] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.424001][ T5857] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.447308][ T5895] netlink: 'syz.2.633': attribute type 298 has an invalid length. [ 115.287436][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 115.287448][ T26] audit: type=1326 audit(628.255:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.5.645" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 115.304471][ T26] audit: type=1326 audit(628.265:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.5.645" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 115.329477][ T26] audit: type=1326 audit(628.265:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 115.355771][ T26] audit: type=1326 audit(628.265:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 115.396455][ T26] audit: type=1326 audit(628.285:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 115.423970][ T26] audit: type=1326 audit(628.285:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 115.459969][ T26] audit: type=1326 audit(628.285:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.5.645" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 115.485182][ T26] audit: type=1326 audit(628.285:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 115.491359][ T26] audit: type=1326 audit(628.285:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 115.505882][ T26] audit: type=1326 audit(628.285:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5930 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9651d8a8 code=0x7ffc0000 [ 117.053809][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.677'. [ 117.653136][ T6058] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 118.986912][ T6079] netlink: 40 bytes leftover after parsing attributes in process `syz.4.701'. [ 119.161521][ T6087] netlink: 'syz.2.704': attribute type 10 has an invalid length. [ 119.197207][ T6087] team0: Port device dummy0 added [ 119.205443][ T6087] netlink: 'syz.2.704': attribute type 10 has an invalid length. [ 119.229651][ T6087] team0: Port device dummy0 removed [ 120.034187][ T6113] IPv6: Can't replace route, no match found [ 120.390821][ T6139] loop5: detected capacity change from 0 to 512 [ 120.460940][ T6139] EXT4-fs (loop5): Ignoring removed oldalloc option [ 120.501555][ T6139] EXT4-fs (loop5): 1 truncate cleaned up [ 120.503200][ T6139] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 120.548832][ T6154] loop4: detected capacity change from 0 to 1024 [ 120.605772][ T6154] EXT4-fs (loop4): Ignoring removed bh option [ 120.607682][ T6154] EXT4-fs (loop4): inline encryption not supported [ 120.651167][ T6154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 120.663087][ T6154] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.726: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.704854][ T6154] __quota_error: 83 callbacks suppressed [ 120.704867][ T6154] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 120.710667][ T6154] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.726: lblock 0 mapped to illegal pblock 48 (length 1) [ 120.716715][ T6154] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 120.725347][ T6154] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.726: Failed to acquire dquot type 0 [ 120.731620][ T6154] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 120.791560][ T6154] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.726: mark_inode_dirty error [ 120.811023][ T6154] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 120.816684][ T6154] EXT4-fs (loop4): 1 orphan inode deleted [ 120.818442][ T6154] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 120.893848][ T4924] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.911112][ T4924] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 120.913456][ T4924] EXT4-fs error (device loop4): ext4_release_dquot:6240: comm kworker/u4:14: Failed to release dquot type 0 [ 120.932478][ T6154] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 120.993813][ T26] audit: type=1326 audit(633.955:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 121.008872][ T26] audit: type=1326 audit(633.965:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 121.029238][ T26] audit: type=1326 audit(633.965:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 121.042595][ T6172] loop4: detected capacity change from 0 to 512 [ 121.064414][ T6170] device syzkaller1 entered promiscuous mode [ 121.069271][ T26] audit: type=1326 audit(633.965:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 121.105838][ T26] audit: type=1326 audit(633.965:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 121.115347][ T6172] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.131616][ T6172] EXT4-fs (loop4): 1 truncate cleaned up [ 121.133173][ T6172] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,grpjquota=,errors=remount-ro,max_batch_time=0x0000000000000008,. Quota mode: none. [ 121.137986][ T26] audit: type=1326 audit(633.985:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 121.166410][ T26] audit: type=1326 audit(633.985:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab4258a8 code=0x7ffc0000 [ 121.203118][ T6181] udc-core: couldn't find an available UDC or it's busy [ 121.205272][ T6181] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.927874][ T4076] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.285329][ T4076] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.288930][ T4076] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.292234][ T4076] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 123.294622][ T4076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.304740][ T6254] udc-core: couldn't find an available UDC or it's busy [ 123.312124][ T6254] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.406155][ T4076] usb 1-1: config 0 descriptor?? [ 125.685533][ T4076] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 125.688257][ T4076] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 125.690579][ T4076] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 125.755142][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 125.763063][ T4076] usb 1-1: USB disconnect, device number 2 [ 126.425084][ T4076] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 126.541399][ T6324] udc-core: couldn't find an available UDC or it's busy [ 126.564139][ T6324] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.610425][ T6329] udc-core: couldn't find an available UDC or it's busy [ 126.629031][ T6329] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.785121][ T4076] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 126.796899][ T4076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.806824][ T4076] usb 1-1: config 0 descriptor?? [ 126.847013][ T4076] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 127.065103][ T4076] gp8psk: usb in 128 operation failed. [ 127.210326][ T6348] binder: 6347:6348 ioctl c00c6211 20001780 returned -22 [ 127.325116][ T4076] gp8psk: usb in 146 operation failed. [ 127.326670][ T4076] gp8psk: failed to get FW version [ 127.365902][ T4076] gp8psk: FPGA Version = 225 [ 127.595356][ T4076] gp8psk: usb in 138 operation failed. [ 127.597503][ T4076] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 127.628985][ T4076] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 127.833811][ T4076] usb 1-1: USB disconnect, device number 3 [ 128.227948][ T6362] udc-core: couldn't find an available UDC or it's busy [ 128.235042][ T6362] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 128.520965][ T6379] udc-core: couldn't find an available UDC or it's busy [ 128.523210][ T6379] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.857144][ T6414] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.937158][ T6418] input: syz1 as /devices/virtual/input/input2 [ 130.213857][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.218013][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.890287][ T4070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.057230][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.059183][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.505907][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.530131][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.930057][ T4076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.945900][ T4070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.094707][ T6454] netlink: 80 bytes leftover after parsing attributes in process `syz.1.803'. [ 132.816546][ T4220] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 132.820774][ T4220] Bluetooth: hci5: Injecting HCI hardware error event [ 132.833782][ T4029] Bluetooth: hci5: hardware error 0x00 [ 132.984300][ T6460] netlink: 'syz.1.804': attribute type 29 has an invalid length. [ 132.987736][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.990591][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.006893][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 133.013840][ T6460] netlink: 'syz.1.804': attribute type 29 has an invalid length. [ 133.017409][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 133.275386][ T21] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 133.304027][ T6485] udc-core: couldn't find an available UDC or it's busy [ 133.307706][ T6485] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.416345][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.482988][ T6503] udc-core: couldn't find an available UDC or it's busy [ 134.497366][ T6503] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 135.305699][ T21] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 135.309756][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.312026][ T21] usb 1-1: Product: syz [ 135.313115][ T21] usb 1-1: Manufacturer: syz [ 135.314362][ T21] usb 1-1: SerialNumber: syz [ 135.376834][ T21] usb 1-1: config 0 descriptor?? [ 135.380488][ T3606] net_ratelimit: 5 callbacks suppressed [ 135.380498][ T3606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.500677][ T6530] netlink: 'syz.5.819': attribute type 29 has an invalid length. [ 135.509278][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 135.519379][ T6530] netlink: 'syz.5.819': attribute type 29 has an invalid length. [ 135.521556][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 136.308745][ T21] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 136.310975][ T21] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 136.315798][ T21] usb 1-1: USB disconnect, device number 4 [ 136.415236][ T3606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.427708][ T337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.427812][ T6550] udc-core: couldn't find an available UDC or it's busy [ 136.430461][ T337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.431881][ T6550] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.455141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.513754][ T4220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.518276][ T3606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.639742][ T6582] netlink: 'syz.2.834': attribute type 29 has an invalid length. [ 137.641899][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 137.669006][ T6582] netlink: 'syz.2.834': attribute type 29 has an invalid length. [ 137.671573][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 137.781286][ T6588] netlink: 132 bytes leftover after parsing attributes in process `syz.5.835'. [ 138.544272][ T6589] udc-core: couldn't find an available UDC or it's busy [ 138.546261][ T6589] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.566508][ T6589] device ip6gretap0 entered promiscuous mode [ 138.568172][ T6589] device vlan3 entered promiscuous mode [ 138.575994][ T4067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.655168][ T4217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.657787][ T4217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.717751][ T6602] udc-core: couldn't find an available UDC or it's busy [ 138.719775][ T6602] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.702885][ T4220] net_ratelimit: 4 callbacks suppressed [ 140.702897][ T4220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.707602][ T3606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.885064][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.887393][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.866838][ T3606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.695603][ T337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.698380][ T337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.106674][ T3606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.777250][ T4220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.948952][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.798838][ T6701] udc-core: couldn't find an available UDC or it's busy [ 144.800836][ T6701] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.777240][ T21] net_ratelimit: 5 callbacks suppressed [ 145.777255][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.476781][ T6724] udc-core: couldn't find an available UDC or it's busy [ 146.478897][ T6724] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.892130][ T4220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.136018][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.881988][ T4924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.884312][ T4924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.218744][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.655288][ T4067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.858931][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.908838][ T6797] fuse: Unknown parameter 'fd0x0000000000000007' [ 151.011473][ T4222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.040221][ T4217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.042588][ T4217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.130716][ T6808] udc-core: couldn't find an available UDC or it's busy [ 151.132965][ T6808] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.334788][ T4067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.075170][ T6816] loop8: detected capacity change from 0 to 7 [ 153.084064][ T4018] Dev loop8: unable to read RDB block 7 [ 153.090058][ T4018] loop8: AHDI p1 p3 p4 [ 153.091219][ T4018] loop8: partition table partially beyond EOD, truncated [ 153.100714][ T4018] loop8: p1 start 975770946 is beyond EOD, truncated [ 153.102515][ T4018] loop8: p3 start 6514546 is beyond EOD, truncated [ 153.272824][ T6816] Dev loop8: unable to read RDB block 7 [ 153.274564][ T6816] loop8: AHDI p1 p3 p4 [ 153.282856][ T6816] loop8: partition table partially beyond EOD, truncated [ 153.455081][ T6834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.689063][ T6816] loop8: p1 start 975770946 is beyond EOD, truncated [ 153.691072][ T6816] loop8: p3 start 6514546 is beyond EOD, truncated [ 153.961002][ T4067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.964488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.374719][ T4222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.737305][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.526571][ T6865] udc-core: couldn't find an available UDC or it's busy [ 155.528578][ T6865] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.453234][ T4094] net_ratelimit: 3 callbacks suppressed [ 156.453246][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.487542][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.509528][ T4067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.511825][ T4067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.132897][ T6913] [ 158.133573][ T6913] ====================================================== [ 158.135480][ T6913] WARNING: possible circular locking dependency detected [ 158.137452][ T6913] 5.15.185-syzkaller #0 Not tainted [ 158.138921][ T6913] ------------------------------------------------------ [ 158.140899][ T6913] syz.2.942/6913 is trying to acquire lock: [ 158.142565][ T6913] ffff0000d4464c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 158.145620][ T6913] [ 158.145620][ T6913] but task is already holding lock: [ 158.147613][ T6913] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 158.150192][ T6913] [ 158.150192][ T6913] which lock already depends on the new lock. [ 158.150192][ T6913] [ 158.153024][ T6913] [ 158.153024][ T6913] the existing dependency chain (in reverse order) is: [ 158.155466][ T6913] [ 158.155466][ T6913] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 158.157637][ T6913] __mutex_lock_common+0x194/0x1edc [ 158.159258][ T6913] mutex_lock_nested+0xac/0x11c [ 158.160732][ T6913] rfkill_register+0x44/0x77c [ 158.162134][ T6913] hci_register_dev+0x3d8/0x854 [ 158.163638][ T6913] vhci_create_device+0x2bc/0x564 [ 158.165372][ T6913] vhci_write+0x30c/0x3ac [ 158.166712][ T6913] vfs_write+0x7c8/0xa2c [ 158.168017][ T6913] ksys_write+0x120/0x210 [ 158.169268][ T6913] __arm64_sys_write+0x7c/0x90 [ 158.170764][ T6913] invoke_syscall+0x98/0x2b8 [ 158.172156][ T6913] el0_svc_common+0x138/0x258 [ 158.173587][ T6913] do_el0_svc+0x58/0x14c [ 158.174893][ T6913] el0_svc+0x78/0x1e0 [ 158.176169][ T6913] el0t_64_sync_handler+0xcc/0xe4 [ 158.177692][ T6913] el0t_64_sync+0x1a0/0x1a4 [ 158.179073][ T6913] [ 158.179073][ T6913] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 158.181149][ T6913] __mutex_lock_common+0x194/0x1edc [ 158.182768][ T6913] mutex_lock_nested+0xac/0x11c [ 158.184278][ T6913] vhci_send_frame+0x88/0x118 [ 158.185790][ T6913] hci_send_frame+0x194/0x2f0 [ 158.187300][ T6913] hci_tx_work+0x7e4/0x1394 [ 158.188681][ T6913] process_one_work+0x79c/0x1140 [ 158.190271][ T6913] worker_thread+0x8f4/0x101c [ 158.191753][ T6913] kthread+0x374/0x454 [ 158.193026][ T6913] ret_from_fork+0x10/0x20 [ 158.194397][ T6913] [ 158.194397][ T6913] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 158.196902][ T6913] __flush_work+0xf4/0x1bc [ 158.198337][ T6913] flush_work+0x24/0x38 [ 158.199623][ T6913] hci_dev_do_close+0x164/0x105c [ 158.201132][ T6913] hci_unregister_dev+0x23c/0x4c0 [ 158.202669][ T6913] vhci_release+0x74/0xc4 [ 158.204050][ T6913] __fput+0x1c0/0x7f8 [ 158.205298][ T6913] ____fput+0x20/0x30 [ 158.206520][ T6913] task_work_run+0x12c/0x1e0 [ 158.207885][ T6913] do_exit+0x67c/0x1f58 [ 158.209165][ T6913] do_group_exit+0x100/0x268 [ 158.210560][ T6913] __wake_up_parent+0x0/0x60 [ 158.211936][ T6913] invoke_syscall+0x98/0x2b8 [ 158.213310][ T6913] el0_svc_common+0x138/0x258 [ 158.214735][ T6913] do_el0_svc+0x58/0x14c [ 158.216119][ T6913] el0_svc+0x78/0x1e0 [ 158.217339][ T6913] el0t_64_sync_handler+0xcc/0xe4 [ 158.218829][ T6913] el0t_64_sync+0x1a0/0x1a4 [ 158.220279][ T6913] [ 158.220279][ T6913] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 158.222422][ T6913] __mutex_lock_common+0x194/0x1edc [ 158.224011][ T6913] mutex_lock_nested+0xac/0x11c [ 158.225473][ T6913] bg_scan_update+0x48/0x3d0 [ 158.226903][ T6913] process_one_work+0x79c/0x1140 [ 158.228418][ T6913] worker_thread+0x8f4/0x101c [ 158.229813][ T6913] kthread+0x374/0x454 [ 158.231073][ T6913] ret_from_fork+0x10/0x20 [ 158.232362][ T6913] [ 158.232362][ T6913] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 158.235055][ T6913] __lock_acquire+0x2928/0x651c [ 158.236513][ T6913] lock_acquire+0x1f4/0x620 [ 158.237917][ T6913] __flush_work+0xf4/0x1bc [ 158.239262][ T6913] __cancel_work_timer+0x2ec/0x448 [ 158.240761][ T6913] cancel_work_sync+0x24/0x38 [ 158.242213][ T6913] hci_request_cancel_all+0xbc/0x2d0 [ 158.243767][ T6913] hci_dev_do_close+0x54/0x105c [ 158.245190][ T6913] hci_rfkill_set_block+0xdc/0x1d0 [ 158.246762][ T6913] rfkill_set_block+0x18c/0x374 [ 158.248205][ T6913] rfkill_fop_write+0x4a4/0x5cc [ 158.249639][ T6913] vfs_write+0x280/0xa2c [ 158.250949][ T6913] ksys_write+0x120/0x210 [ 158.252310][ T6913] __arm64_sys_write+0x7c/0x90 [ 158.253774][ T6913] invoke_syscall+0x98/0x2b8 [ 158.255207][ T6913] el0_svc_common+0x138/0x258 [ 158.256677][ T6913] do_el0_svc+0x58/0x14c [ 158.258024][ T6913] el0_svc+0x78/0x1e0 [ 158.259361][ T6913] el0t_64_sync_handler+0xcc/0xe4 [ 158.260864][ T6913] el0t_64_sync+0x1a0/0x1a4 [ 158.262265][ T6913] [ 158.262265][ T6913] other info that might help us debug this: [ 158.262265][ T6913] [ 158.265185][ T6913] Chain exists of: [ 158.265185][ T6913] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 158.265185][ T6913] [ 158.269477][ T6913] Possible unsafe locking scenario: [ 158.269477][ T6913] [ 158.271561][ T6913] CPU0 CPU1 [ 158.273072][ T6913] ---- ---- [ 158.274579][ T6913] lock(rfkill_global_mutex); [ 158.275911][ T6913] lock(&data->open_mutex); [ 158.277872][ T6913] lock(rfkill_global_mutex); [ 158.279914][ T6913] lock((work_completion)(&hdev->bg_scan_update)); [ 158.281820][ T6913] [ 158.281820][ T6913] *** DEADLOCK *** [ 158.281820][ T6913] [ 158.284089][ T6913] 1 lock held by syz.2.942/6913: [ 158.285443][ T6913] #0: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 158.288373][ T6913] [ 158.288373][ T6913] stack backtrace: [ 158.290011][ T6913] CPU: 0 PID: 6913 Comm: syz.2.942 Not tainted 5.15.185-syzkaller #0 [ 158.292228][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.295030][ T6913] Call trace: [ 158.295970][ T6913] dump_backtrace+0x0/0x43c [ 158.297190][ T6913] show_stack+0x2c/0x3c [ 158.298385][ T6913] __dump_stack+0x30/0x40 [ 158.299685][ T6913] dump_stack_lvl+0xf8/0x160 [ 158.301014][ T6913] dump_stack+0x1c/0x5c [ 158.302148][ T6913] print_circular_bug+0x148/0x1b0 [ 158.303498][ T6913] check_noncircular+0x240/0x2d4 [ 158.304941][ T6913] __lock_acquire+0x2928/0x651c [ 158.306273][ T6913] lock_acquire+0x1f4/0x620 [ 158.307530][ T6913] __flush_work+0xf4/0x1bc [ 158.308822][ T6913] __cancel_work_timer+0x2ec/0x448 [ 158.310252][ T6913] cancel_work_sync+0x24/0x38 [ 158.311513][ T6913] hci_request_cancel_all+0xbc/0x2d0 [ 158.313007][ T6913] hci_dev_do_close+0x54/0x105c [ 158.314343][ T6913] hci_rfkill_set_block+0xdc/0x1d0 [ 158.315733][ T6913] rfkill_set_block+0x18c/0x374 [ 158.317066][ T6913] rfkill_fop_write+0x4a4/0x5cc [ 158.318387][ T6913] vfs_write+0x280/0xa2c [ 158.319470][ T6913] ksys_write+0x120/0x210 [ 158.320640][ T6913] __arm64_sys_write+0x7c/0x90 [ 158.321914][ T6913] invoke_syscall+0x98/0x2b8 [ 158.323192][ T6913] el0_svc_common+0x138/0x258 [ 158.324479][ T6913] do_el0_svc+0x58/0x14c [ 158.325617][ T6913] el0_svc+0x78/0x1e0 [ 158.326771][ T6913] el0t_64_sync_handler+0xcc/0xe4 [ 158.328135][ T6913] el0t_64_sync+0x1a0/0x1a4 [ 158.335244][ T4215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.337900][ T4215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.575246][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.455110][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.457432][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.616316][ T4070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.695283][ T5816] net_ratelimit: 5 callbacks suppressed [ 161.695297][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.699386][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.705091][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.739590][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.805146][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.807603][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.615168][ T4220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.785108][ T4070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.915100][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.917728][ T4094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.900757][ T4070] net_ratelimit: 8 callbacks suppressed [ 166.900772][ T4070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.275096][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.277613][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.945112][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog