last executing test programs: 52.613660881s ago: executing program 0 (id=14): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="74e77474749ada47befe086cf7bba216879ec1adf408af43f1261ba5f81dc6a4a665c16e66f6d3fdb5e6b994a9b1a17fa159eadb70ccb6901fd2ac240cc40e2487cc124c4d80910e785abf8fdca4e235fe894e237c19c1184320ac08b456a5da6c46aaee7939c3e005558c64f37a8bba9ec5af12ace3853f49b9e09cef811389fabc2bb215ba6944757c89f729dbc0400af013c0b78c0678a98089b69d23798ab43b450edd3a9cd26e4f64966f5d4d3be68f638f97fa826c6e3afa517a8777ba", @ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES64, @ANYRESDEC], 0x1, 0xda6, &(0x7f0000003c80)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = fanotify_init(0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x8000000, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0700000004070000000000000000e2ff00000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000800)={r6, &(0x7f0000000300)="92", 0x0}, 0x20) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 49.428262805s ago: executing program 0 (id=20): r0 = timerfd_create(0x7, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x495, &(0x7f0000000a40)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT=r2, @ANYRES8=r2, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16=0x0, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socketpair(0x0, 0x0, 0x20, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000180)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, r1+60000000}}, 0x0) read(r0, &(0x7f0000000480)=""/265, 0x109) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000080)={0x0, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x100000000, 0x2000000d}}) 46.731481304s ago: executing program 0 (id=23): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf4240, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r5, 0x29, 0x50, 0x0, &(0x7f0000000340)) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000340), 0x20001341) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 44.81666187s ago: executing program 0 (id=26): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000004900), 0x4) fcntl$dupfd(r0, 0x0, r1) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x60e) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffd4) write$cgroup_type(r0, &(0x7f00000000c0), 0x9) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$PIO_UNISCRNMAP(r5, 0x4b32, 0x0) accept(r6, &(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 42.506745464s ago: executing program 0 (id=31): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r5 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000680)={0x8098f903, 0x0, "5d77c3defd75c9bd8354a99d4fb1d91e7427ce0f7bcfad5e9d03616e0ab7235f"}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x12, &(0x7f00000002c0)=0x5b, 0x4) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000480)="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", 0x282, 0xc000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r6}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) 40.429539626s ago: executing program 0 (id=35): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x100, 0x24) write$P9_RWALK(r0, &(0x7f0000000000)=ANY=[], 0x9) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc30570500000008000500f7"], 0x154}}, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x0, 0x1, {0x1, 0x1}, {0x1, 0xf0, 0x1}, 0xfe, 0xfe}, {0x0, 0x1, {0x2, 0xf0, 0x1}, {0x1, 0xff}, 0xff, 0x1}, {0x2, 0x1, {0x1, 0xf0, 0x4}, {0x0, 0x1, 0x5}, 0xff, 0xff}, {0x2, 0x0, {0x1, 0xff, 0x2}, {0x1, 0xf0, 0x3}, 0xff, 0x1}, {0x3, 0x0, {0x1, 0x0, 0x2}, {0x0, 0x1, 0x3}, 0xff, 0x1}], 0xa0) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) syz_io_uring_setup(0x7933, &(0x7f0000000100)={0x0, 0x1, 0x8, 0x1, 0xffffffff, 0x0, r0}, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast1, 0x9}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0xfffffecc) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendfile(r9, r8, 0x0, 0xffefffff) splice(r6, 0x0, r5, 0x0, 0x8001, 0x0) r10 = fsopen(&(0x7f00000004c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 36.198719767s ago: executing program 1 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) syz_emit_ethernet(0xa7, &(0x7f0000000380)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x71, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "0000000004002600040000"}, {}]}}}}}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000f3ff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x0, 0x300) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 34.10541666s ago: executing program 1 (id=44): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0/file0\x00') unlink(&(0x7f0000000180)='./file1\x00') r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000004c0)='./bus\x00', r4, &(0x7f0000000500)='./file0\x00', 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r7) 32.746300465s ago: executing program 1 (id=47): unshare(0x2a020400) r0 = io_uring_setup(0x7291, &(0x7f0000000a00)) r1 = io_uring_setup(0x3737, &(0x7f0000001200)={0x0, 0x0, 0x420, 0x0, 0x0, 0x0, r0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, 'mnt\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f0000000100)=""/148, &(0x7f0000000080)=0x94) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clock_gettime(0x7, &(0x7f0000000780)={0x0}) clock_settime(0x0, &(0x7f00000007c0)={r4}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0/file1\x00', 0x400, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000004000003000000001000000000000000209b32b0cf00000000000000"], 0x24, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), &(0x7f0000001180)=ANY=[], 0x1e5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x2, &(0x7f00000008c0)=[{0x2d}, {0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r8, &(0x7f0000000200)=@known='trusted.overlay.metacopy\x00', &(0x7f00000003c0)='\x00\x00o;\xc8\xdd1\xa4lB&\xa9\xb6\x06\x06\x99\t\xf5\x10\x17\'\xcaV\xab\\rw9+\xba\tl|\xde\x93\xea\x95A}\x89\x82\x8c\nN\x97\xbf\xab\xa4_\xc2\x17\xe7+\xc5\xfe\x16-\xdd\xa7\x00\xfe\xa0\xa2\xbdUw\x01\x80\x92\xea\x15\xc2opg\xee\xbd\t\xba\x9d\x98\x983\xfd\v\xc1\xbd\x1e\xd5r\xb17\x83\xaf\xfa\x90\x8bh\xc3@\xda\xee\x97\xd5~\xee\xd6$\xc6\x8c\x01l\x1e\xd3\x1f\xe4<\xee\b\xe4\x16\xc3Ku\x84\xa3\xfa\xe9\t\x87\x01>\xcc\xcb~X\x16d\xf65\x15\xcd\x89\xb8\x1bF\xcd\r\xbc\xc0\xbb\xf5Q\x06\xb71>\xcd\xdb\x0f\x8c\x14\xc5\t\x92m/u,^\xe6\xc7V\xca|;j\xc1\xf4$\xe1A\x17\xeb\xf1M\x8c\x82\\\x89\x89\x00\x98\xadr\xd4\x86;\xed+\x899\x8a\xe9\x18\xb4]a\xd2\x15\x93\x84\x8b\x85\xae\'\xf4\xc9\xcb\x8c\'\x88\xff\x02\b\xaf\xe9vc\x9au\xba\xce]\x85\x98>\xa6\xe1\xc0)\xff`}\xbd;\xbc5\xda^\xfb\x91\xe6\xc6\n4!\xfa\x87*c\x8e\x9b\x95\x89D\xc0/\x17U\xd6\xc8\x8f\"<\x95O\xaf\xf0y\x11\xceL\x1bE\x9d\x03\xaf\x0f,\xd9O\x9aa\x94\xe4\x11l\x17\x8c\x7f[\xcb%Wg\xf1\t\x820\x11\xae+\x8e\xd0%|\xb7\xd9\xc0\x9e\xc1\xd1\xdc\xb7O\xd3\xce\xeb2\x18\x96\x03\xfc\n\xe4\x15d\a\xe7\x7f\x8b\x05\x880\xaa\x11\xcf\x85\xe3c\x88{\xb1E\xae\xfa\xbf\aj\x05P\x96fj5]\x16\r,\x15\xdd\f\x942\x05\xb10I\xe7\xfe\xdb\xaasT\x90\xf7O\xb4\xb1\xc1\x1de|\xf11\xd1\xc1x\xce\x11u\x16~6\xa3\xf7', 0x1a0, 0x0) flistxattr(r8, 0x0, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x2) 31.441345266s ago: executing program 1 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20084000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000011) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000300)=""/132) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@fwd={0x2}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000240)=""/168) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) getitimer(0x0, &(0x7f0000000040)) r7 = signalfd(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r7, 0x448b}], 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="20002cbd7000ffdbdf25020000000900010073797a30000000000900030073797a300000000014000d006d6163766c616e31000000000000002b7bd9fff12700140002006e72300000000000000000000000000005000400020000000900010073797a32000000001400020070696d36726567300000000000000000140002006261746164765f736c"], 0x90}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000828bd7000fcdbdf25030000000900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0xc040) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000c00)={[{@norecovery}, {@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$UHID_DESTROY(r10, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r10, 0x0) fallocate(r10, 0x0, 0x0, 0x1001f0) pread64(r9, &(0x7f0000004180)=""/4096, 0x1000, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x9) ioperm(0x100000001, 0x9, 0x6) 30.113358389s ago: executing program 1 (id=54): socket$packet(0x11, 0x2, 0x300) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x48}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_netfilter(r9, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x16c, 0x13, 0x7, 0x201, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x2}, [@nested={0x90, 0x59, 0x0, 0x1, [@generic="5222fc03886ca817461b1ecdfd5a9cba92d81224aa15f4c33ba3d514373af45a34c08f2377b3b38cb4c1b157a61f16c1920efd992adc715904259d6a1e262a8178578054a1185d8f4332a2d4db8c7276cb0a9ca016fbba5c9d369088b0f7ed6ed0f8d2091d0419d1", @typed={0x4, 0xaa}, @typed={0x8, 0x76, 0x0, 0x0, @uid}, @typed={0xc, 0xb4, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x71}]}, @nested={0xc6, 0xae, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @pid}, @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@loopback}, @typed={0xc, 0x3e, 0x0, 0x0, @u64=0xf}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x5}, @generic="43ca1c360db8f136f636d12d8650229327fefc0adc6b2d978881b7e68fe0ab99106bc500fc0b9fca9cf3b454ae5169b21dd991f516c4374bd7b5d07931ec0f0d05b55f41c834747af797da232d3617384afa6939360cc53d7a50de876d3d57b51f2fc60d121c0b1920cd2f6a0d36db4f1a5f040e423f3bc796eb8b70c15a80303571", @typed={0x8, 0x95, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r11}, @typed={0xc, 0x57, 0x0, 0x0, @str='ip_vti0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4880) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) 24.247648811s ago: executing program 3 (id=59): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5e29bab85a7e9abd}}, 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) mmap(&(0x7f000069f000/0x2000)=nil, 0x2000, 0xb635773f04ebbee8, 0x8031, 0xffffffffffffffff, 0x6cc5a000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045300, &(0x7f00000000c0)) tkill(r1, 0x7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000307000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000299000/0x4000)=nil) madvise(&(0x7f0000227000/0x1000)=nil, 0x1000, 0x19) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000140001000000000000000000ac1414bb000000000080000000000000fc0200000000000000000000140000000000000000485bff0700"/72, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/10], 0x5c}}, 0x8005) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04040aaaaaaaaaaa005a54a701"], 0xd) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}, {&(0x7f0000000140)=""/9, 0x9}], 0x3, 0x0, 0x400) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x3}]}}}]}, 0x44}}, 0x0) 24.200666365s ago: executing program 4 (id=60): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000002700)={@random="5b37182347bc", @broadcast, @val, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f75372", 0x14, 0x6, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6f}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x401, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008810}, 0x400d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) open$dir(&(0x7f0000000480)='./file0\x00', 0x200, 0x102) r7 = epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5437, 0x0) capset(0x0, &(0x7f0000000280)) fchdir(0xffffffffffffffff) 21.678467828s ago: executing program 4 (id=64): r0 = socket$inet6(0xa, 0x2, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = eventfd(0x5) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000000340)="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", 0x1000, 0x6, 0x0, 0x3, r2}, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r3, 0x0, 0xa0028000}, 0x38) syz_io_uring_setup(0x2374, &(0x7f0000000040)={0x0, 0x0, 0x426}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4) socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x3e}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002f80)=ANY=[@ANYBLOB="880000000000000029"], 0xa0}}], 0x2, 0x4000010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000013c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) io_uring_setup(0x1956, &(0x7f0000001440)={0x0, 0xaf3, 0x2, 0x3, 0xfffffffb}) 21.176942744s ago: executing program 1 (id=65): syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c90010000c000500150308"], 0x15) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000013c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000100), 0xfe, 0x253, &(0x7f0000000a40)="$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") r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000008c40)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESOCT=r2, @ANYRES32=r3]) lchown(0x0, 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, 0x0, &(0x7f0000002600)) r6 = socket(0x28, 0x5, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, &(0x7f0000000040), 0x4) getsockopt$sock_timeval(r6, 0x1, 0x5, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) syz_io_uring_submit(r0, r1, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x40000103}) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x55, 0x3f, 0x0, 0x1, 0x3f, '\x00', 0x0, r4, 0x2, 0x1, 0x4, 0xd, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) tgkill(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file1\x00', 0x2008000, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d6370313235302c6e6f6164696e6963622c6e6f6164696e6963622c73686f727461642c7569643d666f726765742c6769643d666f726765742c6769643d69676e6f72652c6e6f6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c00508d5c6fd14a140518c2f8949ec502a29ec1c3795fd47c03a3a72c97984a3502b51d8bfa33ab6090f2e4dc00fe8ed0b41f905b98973a0ca9e4c5eea9e8f394f5f12b6f8f8f86dda2c5d5dd18d0075da59034af306372c1b6cf04e02375a1f7ce9a910a4fc47c7e3a34fd"], 0x2, 0xc40, &(0x7f0000002740)="$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") mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0, 0x0) 21.099732011s ago: executing program 4 (id=66): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0xefc1}, &(0x7f0000000380), &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050000000000000000", @ANYRES32=r5], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xdf, "fc0a318129aa48c65fd2fb782e2ed4788cfa2865bdb1036c73648f88007a3ca9ae7f513b48c85001ed92b4edff5697b72abca317f40c39054a029c94a49e82b5e72b85e8c33d62ed676861bf6a43595790a480d761956485cf8b1e81baaec267fe77dbbaa3f2f330065b03ed92c64756de5f3ab9ca5e83b7afc5b80ff3ab8cf5fd90fe50419229d02eec49fbb0ee1de26c191cc708e480c541af2669856c2ca0912f4f5338c1879cd254c231ad29dd123794e16eea364d33888fe4069de5c1ba7094cac00e0d888f765fc23c9367e1555453c5bd1753ca21089a19a20bab67"}, {0xdd, 0x39, "7d8a8cce1981f95b5a3087fc3c8fa013e226d4c16c7a7924eab5eda1d2581d3da8921eb96d69e2be8ec6c7647688ff19e63927fba812ef612a"}, {0xdd, 0x8b, "3a8796be3a80e8c7e330ae27b61fb798452801816f79b7cd6d19adf1f7e8786af07f4f10709715d86311cbaa8bb4c7845924b05c4260b65e501a8162cbcacebfac1c79b528d7439c76b29207ea17f46633274b0582d1f8e48cc8426f81ef3941051ce9a574fcf99454f91b5ec1a6ddec19bee0281225d77a6b9a0791b09913c169f9f121b8fa6005469e59"}, {0xdd, 0x13, "b5d59f0db5263b93bc576c0c0aefc5b82c8e89"}]}, 0x1f4) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f0000000100)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008025600000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'team0\x00', @link_local}) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000000)='pstore\x00', 0x0, 0x0) 20.671110631s ago: executing program 3 (id=68): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="67b8ed77ab82513664511ea67d1fcaadffba39938d78be1ff85280771cf63d5f423eadaf2193d1e15762b9fe3a3f3c7d8a18f88d43f98558a0422d07ccaab56ad8ab2b9b747b61f26421cc72cc01f6ca35858dbe4b83312410696970ed243f36e1d5630000000000", @ANYRES32, @ANYRES8, @ANYBLOB="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", @ANYRES16], 0x9, 0x2af, &(0x7f00000001c0)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000004c0)={0x81, 0x5, 0x6a8, 0x2ea1, 0x6}) lseek(r3, 0x851, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1152c08, 0x0, 0xfe, 0x0, &(0x7f0000000000)) sysinfo(&(0x7f0000000080)) 16.439875132s ago: executing program 4 (id=69): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0xefc1}, &(0x7f0000000380), &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xdf, "fc0a318129aa48c65fd2fb782e2ed4788cfa2865bdb1036c73648f88007a3ca9ae7f513b48c85001ed92b4edff5697b72abca317f40c39054a029c94a49e82b5e72b85e8c33d62ed676861bf6a43595790a480d761956485cf8b1e81baaec267fe77dbbaa3f2f330065b03ed92c64756de5f3ab9ca5e83b7afc5b80ff3ab8cf5fd90fe50419229d02eec49fbb0ee1de26c191cc708e480c541af2669856c2ca0912f4f5338c1879cd254c231ad29dd123794e16eea364d33888fe4069de5c1ba7094cac00e0d888f765fc23c9367e1555453c5bd1753ca21089a19a20bab67"}, {0xdd, 0x39, "7d8a8cce1981f95b5a3087fc3c8fa013e226d4c16c7a7924eab5eda1d2581d3da8921eb96d69e2be8ec6c7647688ff19e63927fba812ef612a"}, {0xdd, 0x8b, "3a8796be3a80e8c7e330ae27b61fb798452801816f79b7cd6d19adf1f7e8786af07f4f10709715d86311cbaa8bb4c7845924b05c4260b65e501a8162cbcacebfac1c79b528d7439c76b29207ea17f46633274b0582d1f8e48cc8426f81ef3941051ce9a574fcf99454f91b5ec1a6ddec19bee0281225d77a6b9a0791b09913c169f9f121b8fa6005469e59"}, {0xdd, 0x13, "b5d59f0db5263b93bc576c0c0aefc5b82c8e89"}]}, 0x1f4) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f0000000100)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008025600000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'team0\x00', @link_local}) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000000)='pstore\x00', 0x0, 0x0) 16.431124452s ago: executing program 2 (id=70): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffee5) bind$xdp(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, 0x0) io_pgetevents(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0xa83f, 0x0, 0xff, 0x2}, {0x7f, 0xb1, 0x7, 0xfffffeff}, {0xfba, 0x1, 0xf4, 0x8}, {0x7f, 0x3, 0x9}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000000010000000000000000000000000000180001801400018008000100ac1414bb08000200ac0314bb240002801400018008b2a6eb93c60a14bd000100ac1414aa08000200ac"], 0x50}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="d824000028000100020000080000000003", @ANYRES8=r6, @ANYRESHEX=r6, @ANYRESDEC=r6, @ANYRESHEX=r6, @ANYRESHEX=r7], 0x24d8}], 0x1, 0x0, 0x0, 0x8}, 0x0) 16.345499621s ago: executing program 3 (id=71): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000002380)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x10008a3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0x4004662b, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="c8635595a1b859943e0a86296278cbf3daa1362827ccc485ac73a861c8dfe26c26778b87fd802f5512040429d0e2e1678e8eea2bdfe7b7b0a9e3ac6f2399d1adde15187e3e7b10160e44d6982a6f0803557819b7c2c2031bd5744d858835ed16776e7313b00000c0d221528dd4efff9ab3f9767c0911bb1624710113d51e02e294a275343d0c05f797d9b310678d13bc10fe6f532dc2302d5f3a2aa8498f20b90069006033978fc5", @ANYRES64=r2, @ANYBLOB="f1287c0aa4785a514c08c93751c50f69420670e4b9208d6fc695efc3e412425cfde6d78176409904000000000000a8cf97087db3d09d2cf7cc8a65cc97d3c867e1acb7b74cbbbac0a394ca7f518ecc9c1dc5400700577e1b1d1921bdf69539fece0db2b5f2db2471361ce9b14690d47ad8ba299fb11a67500cadb9859627a859878e"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa010000000000000000000000000002ff0200000000000000000000000000018900907800000000fc0100000000000000000000000000000000000000000000000000000000000031d9c050749dc00fdf983e232b4ff632de2623ab85ee0fb5680452397dea4356ed3af4810d4a3666c612a4884171ba1238f1e6e6952f272ad0a6f46e869b7520e04508af17d97f58ca0f5d5c571462e3d25d7d27aa00"/179], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000fa00000000f8926759f97fb07fde6260c8fd20806228a1827662a71bd68a1a39ab69b464e9cd65f3e1d6531b2d523fee8736f5c702d65602f34f95404632ec0bbf3d425606cec2f4e4dc0b92849546df25e6dc4f4d4c856b31f0ae9af6f55dfd88ac394a5d401fffff6be44d090f5f8d2764294c80b951cd3e96dfec62978ab7dafa158a53b1ddbdc8be389ee37901c009ffd17855590eff77379dc3b13711226f119bae9ec045e0aeb63064df7feaa11419260bd8f540cee0938b9fe6921fc7a175a16d034aabbf2f47bdbcf1111b879e70be91a3a540b4f5cd8447"], 0x0, 0x0}) syz_usb_ep_write(r4, 0x81, 0xfffffffffffffe37, &(0x7f0000000040)="b9425b446505397f00466e5b7462c24a16941ff5f4b4f1f0add7fc8280adbfa66d5b5e62a7000000000000484d4609741adf42b8f59f90604e07d2388862672dfbf3e0c9d396c3304ab34e72a965de8946ad8fcfc19e688f6b86781684ed273a00"/106) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r5, &(0x7f0000000240)={0x78, 0x0, r6, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x78) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}}}, 0x1c}}, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045565, 0xa) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, &(0x7f0000000040)) r10 = memfd_create(&(0x7f0000000140)='\xf1q\x97.\x8e\xc3\xfe\r\a\xee\xc9[\x9a%=\x01#\x00\r\x9a\xbf\xd9\xcb\xe4\"mqo\xa1\xd2dhV\xf3\n*_A\xef\xc7\xa4\xee\xb2z\xc0\r\n\xd2\xa3\x98_\xf6\xb6\f\xbdOS\t\xfe\x8a\xf9>\x05+\xfc\x9c\xa5y\xf8\x17Vo\x83l\v\xe5\xff\x92\xc9\xaeH\xeeK\x00S\xf6\xecz\x87iiO\xdauvJ\xad\x82\xa5\xa1]\xd5+=\xb4\xf0\x02\xadT\x81\x00\x00\x017\xc5\x8e\\\x00\x8a\x0e\xc50L \xd5\xf3\xee\xa8\x82-\xcb\x00\x00\x00\x00\x00\x00\x00\x04\xa6\x19\xe1\b\x84a\xb9^\xc4\xa3\xa2\xd8\x82\xd0\x8e\xd2\xd2m\xea\x92\xd4\x1f\x1d\xeb\xa0\xf7A\xf8\x00Wzh\xd6\x9a\x1d-\x03m^c\x05O\xa2wVA\xe2\xc0\"\xa9\x15\x1e\x13\x82o\xfe\x0e\x1a\x1a\xbb_.Bt\xa7\x8c\v\x92\x90H\xb9\xfd\xf4c\f{\x86\xfd`\xce_k\x17\xf9r\xe8^\xc0N\x8b>\xd6:\x1d\x02z\xec\x9d\xd64/\xc7&\x91\xa3C\xd4\xf8\x16\x82aS]\xa0\x9a\x9bE{\xf6\xfc\x8b\xfb\x96k\xfc0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) sendfile(r9, r8, 0x0, 0x4) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c010000100001000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb00001a000000000000000000000000006c000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00000000000c0015000000000000000000"], 0x14c}}, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r5, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="674980ad53066fb22822580005400000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x68, &(0x7f0000000200)=""/104, 0x41100, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x7, 0x7, 0x4f7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000300)=[r10], &(0x7f0000000480)=[{0x0, 0x1, 0x8, 0x1}, {0x5, 0x3, 0x7, 0xb}, {0x2, 0x5, 0x8}, {0x5, 0x3, 0x0, 0x8}, {0x5, 0x4, 0x4, 0x1}, {0x4, 0x4, 0xb, 0xc}, {0x3, 0x3, 0xa, 0x2}, {0x0, 0x1, 0x5, 0x5}, {0x1, 0x5, 0x5, 0x1}], 0x10, 0xa8, @void, @value}, 0x90) syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000040)='xfrm0\x00', 0x10) r12 = dup(r11) sendmsg$inet(r12, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}, 0x0) 12.369748977s ago: executing program 2 (id=73): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000001600)={[{@usrjquota}], [{@permit_directio}]}, 0x1, 0x254, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x10, &(0x7f0000000680)={[{@jqfmt_vfsold}, {@delalloc}]}, 0x1, 0x47c, &(0x7f00000001c0)="$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") r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs(0x0, 0x0) r5 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001280)=""/217, 0xd9) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) r6 = openat$cgroup_int(r3, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0), 0x12) 12.354953319s ago: executing program 3 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x8995, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@private1}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x3a) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xffeffffffffffffe}}, {{@in6=@mcast1, 0x0, 0x2b}, 0xa}}, 0xe8) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = getpid() write$P9_RGETLOCK(r2, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5e, 0x3, 0x9, 0x9, 0xafb0, r5}) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) 10.300449059s ago: executing program 2 (id=76): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x82}]}]}, 0x28}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f00000003c0)}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETSF(r6, 0x5409, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzs279qU1EABvAvNmrVIRmcxOGCi1NI+gQWqSAGBCWDgqDYFqRXChYCOthuLj6Ez9QncewgHGlv6Z+QDg71QvL7Lfng5INzhnvPPRfu+4efdzZ397aH7w6z2umk+yRVjjrp50ZW0jgIALBIjkrJ71JKuX2QO79SSml7RgDAdbP/A8Dysf8DwPKx/wPA8nn95u2L9fF441VVrSb1j+lkOml+m/H17XxKna0M08ufHD8gnGrys+fjjWF1op+f9f5pf386WbncH6WX/vz+qOlXl/s3c/dify293J/fX5vbv5XHjy70B+nl8GN2U2czx93z/vdRVT19OZ7p3zv5HwAAACyCQXVm7vl9MLhqvOn/w/uBmfN1Nw+67a4dAJbV3tdvOx/qeuuLIAjCWWj7zgRct/OLvu2ZAAAAAAAAAAAAAAAAV/kfnxO1vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACY9TcAAP//xBqwEw==") chmod(&(0x7f0000000180)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 10.192452739s ago: executing program 4 (id=77): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001300)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-7'], 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000040850000002600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x80000001, 0x7, 0x204, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xf, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904000001", @ANYRES8], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x204400, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nogrpid}, {@quota}]}, 0x1, 0x763, &(0x7f00000019c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x1e, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820040000006d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a354ec72d71e14ef9cc093fce47d85272036dc78e9b496ec00", "0000000000d300e6d60200000000000000000000000100"}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000640), &(0x7f0000000740)=""/175, 0x0, 0x0, 0x1ffc0000, r7}, 0x38) 8.860800452s ago: executing program 3 (id=78): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0xf48, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0xff, 0x7}, {0x24, 0x0, 0x0, 0x48}, {0x6, 0x0, 0x0, 0x80000000}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200ac1414010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800400010000000000240001"], 0x80}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x3) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00694ba7e2ae8959c3a1a1006a809454d1b9e49ca9bcfc4fc4988c654d24bf47f27cf5182a66907790f63da0382e7e8b6fa7bc01215b438ad0a0c54300383d371f98a51969e94000800000d1a09c066c83c90eb1659f642d9740b323fc7da8f03a2e547ee2dd62af8c0b51da0e3b75a1ccf23bb04d83fa977502819dcc5fbe622c4c35880cfe115f8743ddf5255ed6532d8ce9391e704bb6c64bf7bd3c353b218ccf99b00749bc4d22cdc096d92b7eaf583df7f136a59dade8dafa14bcefad343a259d07d5b6e7152b1031acbba628c1f5310e53cd87b92cdfd51281dba68af9b738f0a097f69b277ef9a9bd361570f431b43d9a107367e5ed6f27bd9ef071148bc60b4845accf826763066baf9b092754602e7fe53fbd347a39262850be890a0300863518f5cd8e1d6d388c66123eac43a65f0b3a585c80576666c4ee5d579c349d415741bd3de7fd5af2fa9b50f63bbd192fa1ee4eb9d2eb2b4afffa5dd5a32f292bffcecbcc18071375b13a01e4643601001601b7a1eca9816df0137b589441fca8b569993caed53c6d9deae2183ebdb1d37c31837dd8"], 0x1, 0x249, &(0x7f00000001c0)="$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") 8.240353909s ago: executing program 2 (id=79): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0xefc1}, &(0x7f0000000380), &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0500000000000000000006000000080003", @ANYRES32=r5], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xdf, "fc0a318129aa48c65fd2fb782e2ed4788cfa2865bdb1036c73648f88007a3ca9ae7f513b48c85001ed92b4edff5697b72abca317f40c39054a029c94a49e82b5e72b85e8c33d62ed676861bf6a43595790a480d761956485cf8b1e81baaec267fe77dbbaa3f2f330065b03ed92c64756de5f3ab9ca5e83b7afc5b80ff3ab8cf5fd90fe50419229d02eec49fbb0ee1de26c191cc708e480c541af2669856c2ca0912f4f5338c1879cd254c231ad29dd123794e16eea364d33888fe4069de5c1ba7094cac00e0d888f765fc23c9367e1555453c5bd1753ca21089a19a20bab67"}, {0xdd, 0x39, "7d8a8cce1981f95b5a3087fc3c8fa013e226d4c16c7a7924eab5eda1d2581d3da8921eb96d69e2be8ec6c7647688ff19e63927fba812ef612a"}, {0xdd, 0x8b, "3a8796be3a80e8c7e330ae27b61fb798452801816f79b7cd6d19adf1f7e8786af07f4f10709715d86311cbaa8bb4c7845924b05c4260b65e501a8162cbcacebfac1c79b528d7439c76b29207ea17f46633274b0582d1f8e48cc8426f81ef3941051ce9a574fcf99454f91b5ec1a6ddec19bee0281225d77a6b9a0791b09913c169f9f121b8fa6005469e59"}, {0xdd, 0x13, "b5d59f0db5263b93bc576c0c0aefc5b82c8e89"}]}, 0x1f4) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f0000000100)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008025600000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'team0\x00', @link_local}) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000000)='pstore\x00', 0x0, 0x0) 5.165552263s ago: executing program 3 (id=80): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0xefc1}, &(0x7f0000000380), &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0500000000000000000006000000", @ANYRES32=r5], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xdf, "fc0a318129aa48c65fd2fb782e2ed4788cfa2865bdb1036c73648f88007a3ca9ae7f513b48c85001ed92b4edff5697b72abca317f40c39054a029c94a49e82b5e72b85e8c33d62ed676861bf6a43595790a480d761956485cf8b1e81baaec267fe77dbbaa3f2f330065b03ed92c64756de5f3ab9ca5e83b7afc5b80ff3ab8cf5fd90fe50419229d02eec49fbb0ee1de26c191cc708e480c541af2669856c2ca0912f4f5338c1879cd254c231ad29dd123794e16eea364d33888fe4069de5c1ba7094cac00e0d888f765fc23c9367e1555453c5bd1753ca21089a19a20bab67"}, {0xdd, 0x39, "7d8a8cce1981f95b5a3087fc3c8fa013e226d4c16c7a7924eab5eda1d2581d3da8921eb96d69e2be8ec6c7647688ff19e63927fba812ef612a"}, {0xdd, 0x8b, "3a8796be3a80e8c7e330ae27b61fb798452801816f79b7cd6d19adf1f7e8786af07f4f10709715d86311cbaa8bb4c7845924b05c4260b65e501a8162cbcacebfac1c79b528d7439c76b29207ea17f46633274b0582d1f8e48cc8426f81ef3941051ce9a574fcf99454f91b5ec1a6ddec19bee0281225d77a6b9a0791b09913c169f9f121b8fa6005469e59"}, {0xdd, 0x13, "b5d59f0db5263b93bc576c0c0aefc5b82c8e89"}]}, 0x1f4) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f0000000100)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008025600000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'team0\x00', @link_local}) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000000)='pstore\x00', 0x0, 0x0) 5.079946201s ago: executing program 4 (id=81): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x12508, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0xc3}}, {@grpjquota}, {@noinit_itable}]}, 0x0, 0x50a, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) gettid() bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x28}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {0x1}, 0x0, 0x0, 0x2}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f"}}]}, 0x150}}, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 0s ago: executing program 2 (id=82): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000400), 0x0, 0x0, 0x0, &(0x7f0000000500), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f00000005c0)='ns/ipc\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x40fb559d7f0000) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0xc) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000600)={[{@nouid32}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. syzkaller login: [ 59.484238][ T3626] cgroup: Unknown subsys name 'net' [ 59.619215][ T3626] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.169698][ T3626] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.132951][ T3649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.143218][ T3656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.149609][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.153046][ T3656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.159072][ T3651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.164947][ T3656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.173129][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.179582][ T3656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.186609][ T3651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.193066][ T3656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.201369][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.214693][ T3656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.217060][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.222859][ T3656] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.229631][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.236058][ T3656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.244454][ T3651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.251221][ T3656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.257326][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.264323][ T3656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.271109][ T3651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.278218][ T3656] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.292072][ T3642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.292190][ T3656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.299352][ T3642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.307786][ T3656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.321044][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.340877][ T3642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.348662][ T3642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.362517][ T3658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.716023][ T3638] chnl_net:caif_netlink_parms(): no params data found [ 63.919232][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.927538][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.937453][ T3638] device bridge_slave_0 entered promiscuous mode [ 63.947055][ T3652] chnl_net:caif_netlink_parms(): no params data found [ 63.960266][ T3641] chnl_net:caif_netlink_parms(): no params data found [ 63.978022][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.985259][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.993798][ T3638] device bridge_slave_1 entered promiscuous mode [ 64.060409][ T3639] chnl_net:caif_netlink_parms(): no params data found [ 64.073491][ T3638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.088654][ T3638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.149956][ T3650] chnl_net:caif_netlink_parms(): no params data found [ 64.160456][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.167864][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.176277][ T3652] device bridge_slave_0 entered promiscuous mode [ 64.197763][ T3638] team0: Port device team_slave_0 added [ 64.209951][ T3638] team0: Port device team_slave_1 added [ 64.216381][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.223913][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.231758][ T3652] device bridge_slave_1 entered promiscuous mode [ 64.307686][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.314738][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.341485][ T3638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.362529][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.369684][ T3641] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.377906][ T3641] device bridge_slave_0 entered promiscuous mode [ 64.398269][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.405567][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.431669][ T3638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.445660][ T3652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.455964][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.463532][ T3641] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.471565][ T3641] device bridge_slave_1 entered promiscuous mode [ 64.496766][ T3652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.519143][ T3639] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.526399][ T3639] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.534898][ T3639] device bridge_slave_0 entered promiscuous mode [ 64.543786][ T3639] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.550886][ T3639] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.558989][ T3639] device bridge_slave_1 entered promiscuous mode [ 64.626744][ T3641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.638560][ T3641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.648290][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.655801][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.664054][ T3650] device bridge_slave_0 entered promiscuous mode [ 64.682692][ T3639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.704120][ T3652] team0: Port device team_slave_0 added [ 64.714312][ T3638] device hsr_slave_0 entered promiscuous mode [ 64.721080][ T3638] device hsr_slave_1 entered promiscuous mode [ 64.737862][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.745291][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.753727][ T3650] device bridge_slave_1 entered promiscuous mode [ 64.762920][ T3639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.782675][ T3652] team0: Port device team_slave_1 added [ 64.848153][ T3641] team0: Port device team_slave_0 added [ 64.864113][ T3639] team0: Port device team_slave_0 added [ 64.872146][ T3650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.895145][ T3641] team0: Port device team_slave_1 added [ 64.909596][ T3639] team0: Port device team_slave_1 added [ 64.917634][ T3650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.927654][ T3652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.934722][ T3652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.960826][ T3652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.010688][ T3652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.018214][ T3652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.044595][ T3652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.064730][ T3641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.071704][ T3641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.097910][ T3641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.130179][ T3650] team0: Port device team_slave_0 added [ 65.141513][ T3650] team0: Port device team_slave_1 added [ 65.148219][ T3641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.155292][ T3641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.181629][ T3641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.193634][ T3639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.200626][ T3639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.226742][ T3639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.238926][ T3639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.245978][ T3639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.272114][ T3639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.350322][ T3652] device hsr_slave_0 entered promiscuous mode [ 65.357446][ T3652] device hsr_slave_1 entered promiscuous mode [ 65.363217][ T3651] Bluetooth: hci2: command tx timeout [ 65.363869][ T3658] Bluetooth: hci0: command tx timeout [ 65.375812][ T3652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.383797][ T3652] Cannot create hsr debugfs directory [ 65.411646][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.419064][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.445806][ T3658] Bluetooth: hci3: command tx timeout [ 65.445825][ T3651] Bluetooth: hci4: command tx timeout [ 65.446012][ T3651] Bluetooth: hci1: command tx timeout [ 65.452080][ T3650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.501102][ T3639] device hsr_slave_0 entered promiscuous mode [ 65.508048][ T3639] device hsr_slave_1 entered promiscuous mode [ 65.515206][ T3639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.523991][ T3639] Cannot create hsr debugfs directory [ 65.539066][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.546081][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.572329][ T3650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.615210][ T3641] device hsr_slave_0 entered promiscuous mode [ 65.622692][ T3641] device hsr_slave_1 entered promiscuous mode [ 65.629303][ T3641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.637027][ T3641] Cannot create hsr debugfs directory [ 65.806420][ T3650] device hsr_slave_0 entered promiscuous mode [ 65.814191][ T3650] device hsr_slave_1 entered promiscuous mode [ 65.820823][ T3650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.828496][ T3650] Cannot create hsr debugfs directory [ 65.971491][ T3638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.983632][ T3638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.992843][ T3638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.016887][ T3638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.079305][ T3652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.095034][ T3652] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.107406][ T3652] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.117002][ T3652] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.224198][ T3639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.240963][ T3639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.260658][ T3638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.280455][ T3639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.291139][ T3639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.307190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.316627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.341199][ T3638] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.361150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.374065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.383495][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.390799][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.399831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.434834][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.444333][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.453051][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.460118][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.468104][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.497631][ T3650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.510439][ T3650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.523685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.535085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.545155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.556016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.565422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.574837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.584204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.604121][ T3650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.622961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.631129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.640112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.655629][ T3652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.677911][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.686947][ T3650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.739428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.749607][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.784656][ T3652] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.806305][ T3641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.845112][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.855596][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.867045][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.874256][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.882961][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.891632][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.906824][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.913990][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.922259][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.931404][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.940163][ T3641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.949645][ T3641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.961041][ T3641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.996262][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.020313][ T3639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.052462][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.062338][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.071098][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.081591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.092904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.111732][ T3639] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.137618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.146452][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.155923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.165508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.196840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.206315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.215996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.226076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.235683][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.242813][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.251333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.262160][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.279401][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.288710][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.297971][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.305220][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.318769][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.327101][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.370928][ T3650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.380833][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.411401][ T3638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.442067][ T3651] Bluetooth: hci2: command tx timeout [ 67.447612][ T3651] Bluetooth: hci0: command tx timeout [ 67.455834][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.483287][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.500473][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.512685][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.520860][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.528802][ T3651] Bluetooth: hci1: command tx timeout [ 67.532976][ T3657] Bluetooth: hci3: command tx timeout [ 67.535956][ T3651] Bluetooth: hci4: command tx timeout [ 67.553786][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.562794][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.571703][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.585081][ T3650] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.616457][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.630983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.665256][ T3639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.676943][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.693919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.703638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.722503][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.729645][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.767477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.776777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.787400][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.794571][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.804269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.813578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.830189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.838518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.848467][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.857634][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.869359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.883139][ T3641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.901972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.910123][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.922937][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.959526][ T3650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.975999][ T3650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.992559][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.000047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.010710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.019655][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.029791][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.038839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.062706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.101105][ T3652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.115734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.128453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.147469][ T3641] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.210481][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.219826][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.239205][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.246410][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.272416][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.292636][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.312680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.323677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.366914][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.381705][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.397136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.408376][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.415617][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.426181][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.441884][ T3638] device veth0_vlan entered promiscuous mode [ 68.465765][ T3652] device veth0_vlan entered promiscuous mode [ 68.478565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.488726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.498515][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.507439][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.516258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.526555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.534389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.548377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.556612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.564920][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.572938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.580729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.590101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.603490][ T3639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.624270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.633725][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.642665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.658155][ T3652] device veth1_vlan entered promiscuous mode [ 68.667580][ T3638] device veth1_vlan entered promiscuous mode [ 68.707259][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.715806][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.724983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.733955][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.743892][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.751328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.759381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.768041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.776894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.786373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.805442][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.826920][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.840224][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.850555][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.859902][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.872197][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.893974][ T3638] device veth0_macvtap entered promiscuous mode [ 68.928499][ T3638] device veth1_macvtap entered promiscuous mode [ 68.943556][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.953738][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.975643][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.990488][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.000248][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.015460][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.027239][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.039307][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.056034][ T3639] device veth0_vlan entered promiscuous mode [ 69.073425][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.082862][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.096864][ T3650] device veth0_vlan entered promiscuous mode [ 69.105729][ T3652] device veth0_macvtap entered promiscuous mode [ 69.126596][ T3639] device veth1_vlan entered promiscuous mode [ 69.144060][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.158431][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.167678][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.176109][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.194901][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.210109][ T3652] device veth1_macvtap entered promiscuous mode [ 69.228243][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.237262][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.251645][ T3650] device veth1_vlan entered promiscuous mode [ 69.265951][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.293432][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.301747][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.311007][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.328779][ T3641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.338769][ T3638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.348764][ T3638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.358521][ T3638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.367723][ T3638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.389814][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.398190][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.406575][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.429937][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.440824][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.453580][ T3652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.469728][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.480851][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.493135][ T3652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.504485][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.513411][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.522772][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.525271][ T3651] Bluetooth: hci0: command tx timeout [ 69.530698][ T3658] Bluetooth: hci2: command tx timeout [ 69.545614][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.555820][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.564969][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.585409][ T3639] device veth0_macvtap entered promiscuous mode [ 69.597719][ T3652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.606657][ T3658] Bluetooth: hci4: command tx timeout [ 69.613002][ T3657] Bluetooth: hci3: command tx timeout [ 69.613946][ T3652] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.618416][ T3657] Bluetooth: hci1: command tx timeout [ 69.627575][ T3652] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.641937][ T3652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.676706][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.686058][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.695589][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.704708][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.714045][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.724696][ T3650] device veth0_macvtap entered promiscuous mode [ 69.734320][ T3639] device veth1_macvtap entered promiscuous mode [ 69.769924][ T3650] device veth1_macvtap entered promiscuous mode [ 69.806918][ T3641] device veth0_vlan entered promiscuous mode [ 69.831536][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.847801][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.858319][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.866909][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.876185][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.885448][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.893686][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.935191][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.946495][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.957147][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.967632][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.979629][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.989971][ T3641] device veth1_vlan entered promiscuous mode [ 70.000892][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.011741][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.022056][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.032845][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.042967][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.055497][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.066720][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.084306][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.092736][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.101381][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.112913][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.121519][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.134010][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.145806][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.155713][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.166635][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.178068][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.194812][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.205748][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.215896][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.226401][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.236749][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.248144][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.259630][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.270919][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.283600][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.283772][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.300387][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.309689][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.318678][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.329657][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.340597][ T3639] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.349689][ T3639] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.359279][ T3639] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.368354][ T3639] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.431146][ T3650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.445186][ T3650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.454286][ T3650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.463388][ T3650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.513148][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.521770][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.533412][ T3641] device veth0_macvtap entered promiscuous mode [ 70.554662][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.569518][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.569583][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.586481][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.613505][ T3641] device veth1_macvtap entered promiscuous mode [ 70.625062][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.634158][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.642695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.650555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.731003][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.744238][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.754505][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.765252][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.775625][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.786240][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.796468][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.807405][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.819176][ T3641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.876230][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.882740][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.892826][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.906157][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.923279][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.946840][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.961364][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.984017][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.002112][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.032101][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.047653][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.058509][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.075967][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.089788][ T3641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.099245][ T3701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.107019][ T3641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.116236][ T3641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.130218][ T3641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.139643][ T3641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.148820][ T3701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.186746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.205261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.233302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.272682][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.306526][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.365893][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.372522][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.400015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.436880][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.472859][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.497906][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.511366][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.548483][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.580679][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.602599][ T3657] Bluetooth: hci2: command tx timeout [ 71.608051][ T3657] Bluetooth: hci0: command tx timeout [ 71.637322][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.683774][ T3657] Bluetooth: hci1: command tx timeout [ 71.689605][ T3657] Bluetooth: hci3: command tx timeout [ 71.695264][ T3658] Bluetooth: hci4: command tx timeout [ 71.695294][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.710287][ T3698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.873867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.882872][ T3698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.896533][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.011405][ T3743] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.479825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.522233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.530603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.581905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 73.921872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.930835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.939344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 73.948280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 73.956512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 73.965470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 74.216492][ T3745] loop0: detected capacity change from 0 to 256 [ 74.532201][ T3743] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 202) [ 75.869397][ T3764] loop4: detected capacity change from 0 to 256 [ 76.716402][ T3761] sched: RT throttling activated [ 76.793120][ T3743] FAT-fs (loop0): Filesystem has been set read-only [ 76.841776][ T3764] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.881348][ T26] audit: type=1804 audit(1727225857.545:2): pid=3763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8" name="/newroot/1/file0/file0" dev="loop4" ino=1048596 res=1 errno=0 [ 78.114636][ T3775] loop3: detected capacity change from 0 to 512 [ 78.279124][ T3787] loop2: detected capacity change from 0 to 256 [ 78.286090][ T3787] ======================================================= [ 78.286090][ T3787] WARNING: The mand mount option has been deprecated and [ 78.286090][ T3787] and is ignored by this kernel. Remove the mand [ 78.286090][ T3787] option from the mount to silence this warning. [ 78.286090][ T3787] ======================================================= [ 78.321589][ T3787] exfat: Deprecated parameter 'codepage' [ 78.327277][ T3787] exfat: Bad value for 'codepage' [ 78.336129][ T3775] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 78.374718][ T3727] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.393264][ T3775] EXT4-fs (loop3): 1 truncate cleaned up [ 78.405963][ T3775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.591626][ T3790] loop0: detected capacity change from 0 to 4096 [ 78.913125][ T3792] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 4: comm syz.3.10: lblock 0 mapped to illegal pblock 4 (length 1) [ 79.034933][ T3790] NILFS (loop0): invalid segment: Checksum error in segment payload [ 79.120805][ T3790] NILFS (loop0): trying rollback from an earlier position [ 79.239086][ T3782] syz.4.12 uses obsolete (PF_INET,SOCK_PACKET) [ 79.265092][ T3790] NILFS (loop0): recovery complete [ 79.281760][ T3650] EXT4-fs (loop3): unmounting filesystem. [ 79.302926][ T3782] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 79.329435][ T3799] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.474008][ T3801] loop3: detected capacity change from 0 to 64 [ 79.820761][ T3804] loop1: detected capacity change from 0 to 256 [ 79.949855][ T3808] overlayfs: upper fs does not support tmpfile. [ 79.961549][ T3808] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.969008][ T3808] overlayfs: failed to set xattr on upper [ 79.987428][ T3809] overlayfs: upper fs does not support tmpfile. [ 79.994137][ T3809] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.001118][ T3809] overlayfs: failed to set xattr on upper [ 80.006915][ T3809] overlayfs: ...falling back to index=off,metacopy=off. [ 80.014259][ T3809] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 80.035052][ T3808] overlayfs: ...falling back to index=off,metacopy=off. [ 81.365048][ T3804] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.643316][ T22] cfg80211: failed to load regulatory.db [ 82.482697][ T3816] x_tables: duplicate underflow at hook 2 [ 82.723409][ T3824] loop0: detected capacity change from 0 to 128 [ 82.776213][ T3651] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 82.821074][ T3824] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 82.835982][ T3827] netlink: 'syz.4.21': attribute type 5 has an invalid length. [ 82.894964][ T3824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.981095][ T26] audit: type=1326 audit(1727225863.645:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.4.21" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7404d7def9 code=0x0 [ 83.098569][ T3831] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 83.105457][ T3831] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 83.677028][ T3838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 83.782293][ T3831] vhci_hcd vhci_hcd.0: Device attached [ 83.912661][ T3720] vhci_hcd: vhci_device speed not set [ 83.992180][ T3720] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 84.419630][ T3847] syz.2.22 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.370788][ T3834] vhci_hcd: connection closed [ 85.373234][ T3698] vhci_hcd: stop threads [ 85.395155][ T3698] vhci_hcd: release socket [ 85.422814][ T3698] vhci_hcd: disconnect device [ 85.460786][ T3831] netlink: 'syz.4.21': attribute type 1 has an invalid length. [ 85.496680][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 85.560739][ T3831] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.571876][ T3831] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.581101][ T3831] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.600424][ T3831] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.632263][ T3852] capability: warning: `syz.0.23' uses 32-bit capabilities (legacy support in use) [ 85.662115][ T152] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.942044][ T152] usb 3-1: Using ep0 maxpacket: 32 [ 86.050624][ T3859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 86.065643][ T152] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.110318][ T152] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.149509][ T152] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.280627][ T152] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 86.311887][ T152] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 86.321597][ T152] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 86.733190][ T152] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.808871][ T152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.839619][ T152] usb 3-1: Product: syz [ 86.846077][ T152] usb 3-1: Manufacturer: syz [ 86.851144][ T152] usb 3-1: SerialNumber: syz [ 86.899249][ T3867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27'. [ 87.861991][ T3687] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.923510][ T152] cdc_ncm 3-1:1.0: bind() failure [ 87.940748][ T152] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 87.950339][ T152] cdc_ncm 3-1:1.1: bind() failure [ 87.981054][ T152] usb 3-1: USB disconnect, device number 2 [ 88.175799][ T3890] capability: warning: `syz.3.30' uses deprecated v2 capabilities in a way that may be insecure [ 88.208809][ T3886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 88.336466][ T3687] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 88.355199][ T3687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.384993][ T3687] usb 5-1: config 0 descriptor?? [ 89.594892][ T3903] loop0: detected capacity change from 0 to 128 [ 89.904828][ T3903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.916240][ T3903] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 90.252514][ T3720] vhci_hcd: vhci_device speed not set [ 90.468106][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 91.069336][ T3871] netlink: 'syz.4.27': attribute type 4 has an invalid length. [ 91.634132][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 91.644217][ T3687] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 91.669214][ T3687] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 91.701962][ T3687] [drm:udl_init] *ERROR* Selecting channel failed [ 91.872738][ T3687] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 91.943256][ T3687] [drm] Initialized udl on minor 2 [ 92.041702][ T3687] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 92.133702][ T3687] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 92.230564][ T3687] usb 5-1: USB disconnect, device number 2 [ 92.238575][ T3934] loop3: detected capacity change from 0 to 8 [ 92.339129][ T3934] SQUASHFS error: lzo decompression failed, data probably corrupt [ 92.362099][ T3934] SQUASHFS error: Failed to read block 0x91: -5 [ 92.400268][ T3934] SQUASHFS error: Unable to read metadata cache entry [8f] [ 92.447875][ T3934] SQUASHFS error: Unable to read inode 0x11f [ 95.938923][ T3961] 9pnet_fd: Insufficient options for proto=fd [ 98.331932][ T3974] loop2: detected capacity change from 0 to 128 [ 98.397961][ T3983] loop1: detected capacity change from 0 to 512 [ 98.426308][ T3974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.435370][ T3974] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 98.481176][ T3990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.48'. [ 98.491767][ T26] audit: type=1326 audit(1727225879.157:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3982 comm="syz.1.47" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a3777def9 code=0x0 [ 98.822925][ T3997] process 'syz.4.49' launched '/dev/fd/9' with NULL argv: empty string added [ 98.942595][ T3695] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.403937][ T3695] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 99.421848][ T3695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.506292][ T3695] usb 4-1: config 0 descriptor?? [ 99.755881][ T4006] loop1: detected capacity change from 0 to 1024 [ 99.798149][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 99.839559][ T4006] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.890253][ T3991] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 100.392115][ T3695] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 100.418362][ T3695] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 100.431123][ T3639] EXT4-fs (loop1): unmounting filesystem. [ 100.522489][ T3695] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 100.582176][ T3695] [drm] Initialized udl on minor 2 [ 100.753379][ T3695] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 100.796689][ T3695] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 100.907719][ T3695] usb 4-1: USB disconnect, device number 2 [ 101.189294][ T3652] EXT4-fs (loop2): unmounting filesystem. [ 102.808790][ T3657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.902121][ T3657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.913579][ T3657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.922599][ T3657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.931013][ T3657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.939077][ T3657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.955045][ T3651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.964206][ T4046] loop2: detected capacity change from 0 to 512 [ 102.970887][ T3651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.980113][ T3651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.988367][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.003905][ T4047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.024288][ T4047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.038122][ T4047] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 103.064963][ T4047] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 103.116145][ T3651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.153742][ T3651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.370878][ T4051] loop2: detected capacity change from 0 to 16 [ 104.395628][ T4051] erofs: (device loop2): mounted with root inode @ nid 36. [ 105.441971][ T3651] Bluetooth: hci2: command tx timeout [ 105.532614][ T3698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.874373][ T4065] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.58'. [ 106.024284][ T3698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.655460][ T3698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.824409][ T4040] chnl_net:caif_netlink_parms(): no params data found [ 107.522900][ T3657] Bluetooth: hci2: command tx timeout [ 107.879184][ T3698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.138550][ T11] bond0: (slave bond_slave_0): interface is now down [ 109.172418][ T11] bond0: (slave bond_slave_1): interface is now down [ 109.272445][ T3766] bond0: (slave bond_slave_0): interface is now down [ 109.281652][ T3766] bond0: (slave bond_slave_1): interface is now down [ 109.426215][ T32] bond0: (slave bond_slave_0): interface is now down [ 109.441542][ T32] bond0: (slave bond_slave_1): interface is now down [ 109.500005][ T102] bond0: (slave bond_slave_0): interface is now down [ 109.515101][ T4100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 109.528328][ T102] bond0: (slave bond_slave_1): interface is now down [ 109.564774][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.572023][ T3766] bond0: (slave bond_slave_0): interface is now down [ 109.609206][ T3766] bond0: (slave bond_slave_1): interface is now down [ 109.612852][ T3651] Bluetooth: hci2: command tx timeout [ 109.629898][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.638365][ T4040] device bridge_slave_0 entered promiscuous mode [ 109.647503][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.654821][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.663286][ T4040] device bridge_slave_1 entered promiscuous mode [ 109.742193][ T102] bond0: (slave bond_slave_0): interface is now down [ 109.748942][ T102] bond0: (slave bond_slave_1): interface is now down [ 109.853091][ T3766] bond0: (slave bond_slave_0): interface is now down [ 109.859890][ T3766] bond0: (slave bond_slave_1): interface is now down [ 109.887909][ T4040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.919091][ T4115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.67'. [ 110.022019][ T3766] bond0: (slave bond_slave_0): interface is now down [ 110.033803][ T3766] bond0: (slave bond_slave_1): interface is now down [ 110.052090][ T3767] bond0: (slave bond_slave_0): interface is now down [ 110.128227][ T3767] bond0: (slave bond_slave_1): interface is now down [ 110.141206][ T4040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.241977][ T152] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.255911][ T4121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.275019][ T4121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.288043][ T4121] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 110.857800][ T152] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 110.870705][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.456006][ T152] usb 3-1: config 0 descriptor?? [ 111.469489][ T4123] loop3: detected capacity change from 0 to 256 [ 111.685791][ T3651] Bluetooth: hci2: command tx timeout [ 112.698677][ T4119] loop1: detected capacity change from 0 to 128 [ 112.802612][ T3766] bond0: (slave bond_slave_0): interface is now down [ 112.809345][ T3766] bond0: (slave bond_slave_1): interface is now down [ 112.825654][ T4123] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.872145][ T3766] bond0: (slave bond_slave_0): interface is now down [ 114.032471][ T3766] bond0: (slave bond_slave_1): interface is now down [ 114.121984][ T9] bond0: (slave bond_slave_0): interface is now down [ 114.142049][ T9] bond0: (slave bond_slave_1): interface is now down [ 114.199548][ T4040] team0: Port device team_slave_0 added [ 114.211979][ T9] bond0: (slave bond_slave_0): interface is now down [ 114.219369][ T9] bond0: (slave bond_slave_1): interface is now down [ 114.219896][ T4117] netlink: 'syz.2.67': attribute type 4 has an invalid length. [ 114.262209][ T3766] bond0: (slave bond_slave_0): interface is now down [ 114.302720][ T4040] team0: Port device team_slave_1 added [ 114.328872][ T3766] bond0: (slave bond_slave_1): interface is now down [ 114.430520][ T152] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 114.442883][ T152] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 114.467618][ T152] [drm:udl_init] *ERROR* Selecting channel failed [ 114.481990][ T3701] bond0: (slave bond_slave_0): interface is now down [ 114.488739][ T3701] bond0: (slave bond_slave_1): interface is now down [ 114.511688][ T152] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 114.657652][ T152] [drm] Initialized udl on minor 2 [ 114.691980][ T152] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 114.811971][ T4139] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.70'. [ 115.613884][ T152] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 115.636652][ T152] usb 3-1: USB disconnect, device number 3 [ 115.672363][ T3766] bond0: (slave bond_slave_0): interface is now down [ 115.679108][ T3766] bond0: (slave bond_slave_1): interface is now down [ 115.850744][ T4143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.870952][ T4143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.883316][ T4143] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.916609][ T9] bond0: (slave bond_slave_0): interface is now down [ 115.946802][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.957955][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.707306][ T4040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.726767][ T9] bond0: (slave bond_slave_1): interface is now down [ 117.762004][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.597855][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.632383][ T9] bond0: (slave bond_slave_0): interface is now down [ 118.643948][ T9] bond0: (slave bond_slave_1): interface is now down [ 118.733673][ T4152] loop2: detected capacity change from 0 to 128 [ 118.744597][ T4152] ext4: Unknown parameter 'permit_directio' [ 119.622362][ T3767] bond0: (slave bond_slave_0): interface is now down [ 119.629115][ T3767] bond0: (slave bond_slave_1): interface is now down [ 119.661479][ T4150] loop2: detected capacity change from 0 to 512 [ 119.682231][ T4040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.693043][ T3767] bond0: (slave bond_slave_0): interface is now down [ 119.710295][ T3767] bond0: (slave bond_slave_1): interface is now down [ 119.737928][ T4150] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.73: casefold flag without casefold feature [ 119.751466][ T4150] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.73: couldn't read orphan inode 15 (err -117) [ 119.763554][ T4150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.779200][ T4150] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.73: Directory hole found for htree leaf block 0 [ 119.798535][ T4150] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.73: Directory hole found for htree leaf block 0 [ 119.816412][ T4150] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.73: Directory hole found for htree leaf block 0 [ 120.389561][ T3652] EXT4-fs (loop2): unmounting filesystem. [ 120.412014][ T9] bond0: (slave bond_slave_0): interface is now down [ 120.418768][ T9] bond0: (slave bond_slave_1): interface is now down [ 120.535432][ T3767] bond0: (slave bond_slave_0): interface is now down [ 120.552509][ T3767] bond0: (slave bond_slave_1): interface is now down [ 120.584877][ T3701] bond0: (slave bond_slave_0): interface is now down [ 120.632009][ T3701] bond0: (slave bond_slave_1): interface is now down [ 120.886468][ T11] bond0: (slave bond_slave_0): interface is now down [ 120.954385][ T11] bond0: (slave bond_slave_1): interface is now down [ 121.121954][ T3767] bond0: (slave bond_slave_0): interface is now down [ 121.151935][ T3767] bond0: (slave bond_slave_1): interface is now down [ 121.194824][ T4174] loop2: detected capacity change from 0 to 128 [ 121.204816][ T3767] bond0: (slave bond_slave_0): interface is now down [ 121.387948][ T3767] bond0: (slave bond_slave_1): interface is now down [ 121.406932][ T32] bond0: (slave bond_slave_0): interface is now down [ 121.422620][ T32] bond0: (slave bond_slave_1): interface is now down [ 121.461897][ T3701] bond0: (slave bond_slave_0): interface is now down [ 121.468722][ T3701] bond0: (slave bond_slave_1): interface is now down [ 121.487084][ T3695] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.822427][ T3701] bond0: (slave bond_slave_0): interface is now down [ 121.832269][ T3701] bond0: (slave bond_slave_1): interface is now down [ 121.872350][ T3701] bond0: (slave bond_slave_0): interface is now down [ 121.892399][ T3701] bond0: (slave bond_slave_1): interface is now down [ 121.942144][ T3695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.967330][ T3695] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.973262][ T102] bond0: (slave bond_slave_0): interface is now down [ 122.008821][ T3695] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 122.042930][ T3695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.045809][ T102] bond0: (slave bond_slave_1): interface is now down [ 122.092586][ T3695] usb 5-1: config 0 descriptor?? [ 122.114325][ T3767] bond0: (slave bond_slave_0): interface is now down [ 122.121047][ T3767] bond0: (slave bond_slave_1): interface is now down [ 122.162024][ T3767] bond0: (slave bond_slave_0): interface is now down [ 122.235993][ T3767] bond0: (slave bond_slave_1): interface is now down [ 122.270796][ T4184] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 122.288227][ T3767] bond0: now running without any active interface! [ 122.482208][ T4184] loop3: detected capacity change from 0 to 256 [ 122.492561][ T4184] FAT-fs (loop3): bogus logical sector size 8 [ 122.498671][ T4184] FAT-fs (loop3): Can't find a valid FAT filesystem [ 122.557445][ T4170] loop4: detected capacity change from 0 to 2048 [ 122.593830][ T3721] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.662137][ T4170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.672821][ T4170] ext4 filesystem being mounted at /15/bus supports timestamps until 2038 (0x7fffffff) [ 122.708883][ T4040] device hsr_slave_0 entered promiscuous mode [ 122.754385][ T4040] device hsr_slave_1 entered promiscuous mode [ 122.764460][ T3657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.774404][ T3657] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.783424][ T3657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.791658][ T3657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.800524][ T3657] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 122.813465][ T3657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.827867][ T3651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.838207][ T3651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.846938][ T3651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.856316][ T4040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.914858][ T4170] loop4: detected capacity change from 2048 to 64 [ 122.928973][ T3651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.947870][ T3651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.078060][ T3651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.078100][ T4040] Cannot create hsr debugfs directory [ 123.270830][ T4199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.289854][ T4199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.302560][ T4199] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.711760][ T3695] usb 5-1: USB disconnect, device number 3 [ 125.123039][ T3651] Bluetooth: hci5: command tx timeout [ 125.501381][ T3721] udevd[3721]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.953308][ T4205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.972978][ T4205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.986709][ T4205] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 127.218978][ T3651] Bluetooth: hci5: command tx timeout [ 127.686292][ T4189] kmmpd-loop4: attempt to access beyond end of device [ 127.686292][ T4189] loop4: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 128.700583][ T3638] EXT4-fs (loop4): unmounting filesystem. [ 129.458263][ T3651] Bluetooth: hci5: command tx timeout [ 130.742556][ T4189] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 130.776207][ T4189] EXT4-fs error (device loop4): kmmpd:186: comm kmmpd-loop4: Error writing to MMP block [ 130.845386][ T4189] kmmpd-loop4: attempt to access beyond end of device [ 130.845386][ T4189] loop4: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 130.895558][ T4189] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 131.084281][ T3638] ------------[ cut here ]------------ [ 131.089804][ T3638] ODEBUG: free active (active state 0) object type: timer_list hint: print_daily_error_info+0x0/0x490 [ 131.102714][ T3638] WARNING: CPU: 0 PID: 3638 at lib/debugobjects.c:517 debug_check_no_obj_freed+0x38e/0x4e0 [ 131.113158][ T3638] Modules linked in: [ 131.117139][ T3638] CPU: 0 PID: 3638 Comm: syz-executor Not tainted 6.1.111-syzkaller #0 [ 131.125475][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 131.135856][ T3638] RIP: 0010:debug_check_no_obj_freed+0x38e/0x4e0 [ 131.142322][ T3638] Code: ef e8 56 dc a3 fd 4c 8b 45 00 48 c7 c7 20 77 5d 8b 48 c7 c6 e0 73 5d 8b 48 c7 c2 80 78 5d 8b 8b 0c 24 49 89 d9 e8 b2 4c 14 fd <0f> 0b ff 05 f2 c4 5b 0a 48 83 c5 30 48 89 e8 48 c1 e8 03 48 b9 00 [ 131.162041][ T3638] RSP: 0018:ffffc90003fffa80 EFLAGS: 00010246 [ 131.168152][ T3638] RAX: 7cf1bed825a79600 RBX: ffffffff824ae2f0 RCX: ffff88802d039dc0 [ 131.176197][ T3638] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 131.184232][ T3638] RBP: ffffffff8b0dda60 R08: ffffffff8152a48e R09: fffff520007ffeb1 [ 131.192266][ T3638] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801b292698 [ 131.200271][ T3638] R13: ffffffff975aefe8 R14: ffff88801b293000 R15: ffff888065aabd08 [ 131.208321][ T3638] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 131.217323][ T3638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.223970][ T3638] CR2: 00007ffe5d583008 CR3: 000000007e4b4000 CR4: 00000000003506f0 [ 131.232008][ T3638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.240003][ T3638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.248125][ T3638] Call Trace: [ 131.251428][ T3638] [ 131.254411][ T3638] ? __warn+0x15a/0x520 [ 131.258603][ T3638] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 131.264397][ T3638] ? report_bug+0x2af/0x500 [ 131.268925][ T3638] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 131.274724][ T3638] ? handle_bug+0x3d/0x70 [ 131.279083][ T3638] ? exc_invalid_op+0x16/0x40 [ 131.283818][ T3638] ? asm_exc_invalid_op+0x16/0x20 [ 131.288881][ T3638] ? ext4_group_desc_init+0x1de0/0x1de0 [ 131.294586][ T3638] ? __warn_printk+0x28e/0x350 [ 131.299389][ T3638] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 131.305197][ T3638] __kmem_cache_free+0x205/0x3c0 [ 131.310173][ T3638] ? generic_shutdown_super+0x130/0x340 [ 131.315815][ T3638] ? ext4_drop_inode+0x2e0/0x2e0 [ 131.320880][ T3638] generic_shutdown_super+0x130/0x340 [ 131.326333][ T3638] kill_block_super+0x7a/0xe0 [ 131.331050][ T3638] deactivate_locked_super+0xa0/0x110 [ 131.336511][ T3638] cleanup_mnt+0x490/0x520 [ 131.340974][ T3638] ? lockdep_hardirqs_on+0x94/0x130 [ 131.346252][ T3638] task_work_run+0x246/0x300 [ 131.350870][ T3638] ? kasan_quarantine_put+0xd4/0x220 [ 131.356238][ T3638] ? task_work_cancel+0x2e0/0x2e0 [ 131.361296][ T3638] ? kmem_cache_free+0x292/0x510 [ 131.366297][ T3638] ? do_exit+0xa6e/0x26a0 [ 131.370670][ T3638] do_exit+0xa73/0x26a0 [ 131.374911][ T3638] ? put_task_struct+0x80/0x80 [ 131.379712][ T3638] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 131.385767][ T3638] ? print_irqtrace_events+0x210/0x210 [ 131.391267][ T3638] ? _raw_spin_unlock_irq+0x1f/0x40 [ 131.396525][ T3638] ? lockdep_hardirqs_on+0x94/0x130 [ 131.401755][ T3638] do_group_exit+0x202/0x2b0 [ 131.406415][ T3638] __x64_sys_exit_group+0x3b/0x40 [ 131.411469][ T3638] do_syscall_64+0x3b/0xb0 [ 131.415955][ T3638] ? clear_bhb_loop+0x45/0xa0 [ 131.420672][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.426625][ T3638] RIP: 0033:0x7f7404d7def9 [ 131.431080][ T3638] Code: Unable to access opcode bytes at 0x7f7404d7decf. [ 131.438146][ T3638] RSP: 002b:00007ffe0ef0a518 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 131.446618][ T3638] RAX: ffffffffffffffda RBX: 00007f7404df0a86 RCX: 00007f7404d7def9 [ 131.454646][ T3638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 131.462669][ T3638] RBP: 0000000000000010 R08: 00007ffe0ef082b6 R09: 00007ffe0ef0b7d0 [ 131.470666][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0ef0b7d0 [ 131.478696][ T3638] R13: 00007f7404df0a14 R14: 0000555559d9d4a8 R15: 00007ffe0ef0c890 [ 131.486737][ T3638] [ 131.489780][ T3638] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.497087][ T3638] CPU: 0 PID: 3638 Comm: syz-executor Not tainted 6.1.111-syzkaller #0 [ 131.505345][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 131.515508][ T3638] Call Trace: [ 131.518887][ T3638] [ 131.521830][ T3638] dump_stack_lvl+0x1e3/0x2cb [ 131.526548][ T3638] ? nf_tcp_handle_invalid+0x642/0x642 [ 131.532046][ T3638] ? panic+0x764/0x764 [ 131.536159][ T3638] ? vscnprintf+0x59/0x80 [ 131.540516][ T3638] panic+0x318/0x764 [ 131.544437][ T3638] ? __warn+0x169/0x520 [ 131.548618][ T3638] ? memcpy_page_flushcache+0xfc/0xfc [ 131.554033][ T3638] __warn+0x348/0x520 [ 131.558044][ T3638] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 131.563805][ T3638] report_bug+0x2af/0x500 [ 131.568163][ T3638] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 131.573921][ T3638] handle_bug+0x3d/0x70 [ 131.578119][ T3638] exc_invalid_op+0x16/0x40 [ 131.582664][ T3638] asm_exc_invalid_op+0x16/0x20 [ 131.587558][ T3638] RIP: 0010:debug_check_no_obj_freed+0x38e/0x4e0 [ 131.593934][ T3638] Code: ef e8 56 dc a3 fd 4c 8b 45 00 48 c7 c7 20 77 5d 8b 48 c7 c6 e0 73 5d 8b 48 c7 c2 80 78 5d 8b 8b 0c 24 49 89 d9 e8 b2 4c 14 fd <0f> 0b ff 05 f2 c4 5b 0a 48 83 c5 30 48 89 e8 48 c1 e8 03 48 b9 00 [ 131.613564][ T3638] RSP: 0018:ffffc90003fffa80 EFLAGS: 00010246 [ 131.619802][ T3638] RAX: 7cf1bed825a79600 RBX: ffffffff824ae2f0 RCX: ffff88802d039dc0 [ 131.627807][ T3638] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 131.635879][ T3638] RBP: ffffffff8b0dda60 R08: ffffffff8152a48e R09: fffff520007ffeb1 [ 131.643896][ T3638] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801b292698 [ 131.651900][ T3638] R13: ffffffff975aefe8 R14: ffff88801b293000 R15: ffff888065aabd08 [ 131.659911][ T3638] ? ext4_group_desc_init+0x1de0/0x1de0 [ 131.665494][ T3638] ? __warn_printk+0x28e/0x350 [ 131.670306][ T3638] __kmem_cache_free+0x205/0x3c0 [ 131.675288][ T3638] ? generic_shutdown_super+0x130/0x340 [ 131.680861][ T3638] ? ext4_drop_inode+0x2e0/0x2e0 [ 131.685834][ T3638] generic_shutdown_super+0x130/0x340 [ 131.691239][ T3638] kill_block_super+0x7a/0xe0 [ 131.695954][ T3638] deactivate_locked_super+0xa0/0x110 [ 131.701355][ T3638] cleanup_mnt+0x490/0x520 [ 131.705818][ T3638] ? lockdep_hardirqs_on+0x94/0x130 [ 131.711053][ T3638] task_work_run+0x246/0x300 [ 131.715673][ T3638] ? kasan_quarantine_put+0xd4/0x220 [ 131.720990][ T3638] ? task_work_cancel+0x2e0/0x2e0 [ 131.726055][ T3638] ? kmem_cache_free+0x292/0x510 [ 131.731021][ T3638] ? do_exit+0xa6e/0x26a0 [ 131.735392][ T3638] do_exit+0xa73/0x26a0 [ 131.739677][ T3638] ? put_task_struct+0x80/0x80 [ 131.744474][ T3638] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 131.750515][ T3638] ? print_irqtrace_events+0x210/0x210 [ 131.756037][ T3638] ? _raw_spin_unlock_irq+0x1f/0x40 [ 131.761269][ T3638] ? lockdep_hardirqs_on+0x94/0x130 [ 131.766498][ T3638] do_group_exit+0x202/0x2b0 [ 131.771125][ T3638] __x64_sys_exit_group+0x3b/0x40 [ 131.776269][ T3638] do_syscall_64+0x3b/0xb0 [ 131.780718][ T3638] ? clear_bhb_loop+0x45/0xa0 [ 131.785427][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.791354][ T3638] RIP: 0033:0x7f7404d7def9 [ 131.795791][ T3638] Code: Unable to access opcode bytes at 0x7f7404d7decf. [ 131.802928][ T3638] RSP: 002b:00007ffe0ef0a518 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 131.811654][ T3638] RAX: ffffffffffffffda RBX: 00007f7404df0a86 RCX: 00007f7404d7def9 [ 131.819646][ T3638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 131.827659][ T3638] RBP: 0000000000000010 R08: 00007ffe0ef082b6 R09: 00007ffe0ef0b7d0 [ 131.835656][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0ef0b7d0 [ 131.843649][ T3638] R13: 00007f7404df0a14 R14: 0000555559d9d4a8 R15: 00007ffe0ef0c890 [ 131.851666][ T3638] [ 131.854835][ T3638] Kernel Offset: disabled [ 131.859228][ T3638] Rebooting in 86400 seconds..