last executing test programs: 3m53.971872488s ago: executing program 0 (id=67): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) epoll_create(0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0xfe, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x40}) close_range(r3, 0xffffffffffffffff, 0x0) 3m53.524580211s ago: executing program 0 (id=70): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m5.786709888s ago: executing program 0 (id=70): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m39.551714256s ago: executing program 2 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r5, 0x0, &(0x7f000000a500)={0x0, 0x0, &(0x7f0000008280)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2025}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m38.153948752s ago: executing program 2 (id=221): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfd, 0x1}, 0x10) r4 = dup2(r1, r0) close_range(r4, 0xffffffffffffffff, 0x0) 2m37.75996505s ago: executing program 2 (id=223): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4080) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='.{\x00', &(0x7f0000000180)='-\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/145, 0x91}], 0x1) tkill(r1, 0xb) socket(0x10, 0x3, 0x0) 2m35.124578632s ago: executing program 2 (id=228): socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000000d) 2m34.075093859s ago: executing program 2 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x1) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000140)) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000100), 0x0, 0x0) 2m33.612605374s ago: executing program 2 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0xff}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m32.942691649s ago: executing program 32 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0xff}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m5.858317064s ago: executing program 0 (id=70): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m34.590792803s ago: executing program 5 (id=355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket(0x3, 0x3, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x281, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000110400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000400000000000c001a80080002"], 0x34}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m32.040704771s ago: executing program 5 (id=362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1], 0x28) openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x980000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}, @selector_unit={0x6, 0x24, 0x5, 0x0, 0x0, "91"}, @selector_unit={0x6, 0x24, 0x5, 0x0, 0x0, '\b'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, "2a5232500ee6"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 1m28.248475655s ago: executing program 5 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev, 0xfffffffe}}, 0xe8) 1m27.223766512s ago: executing program 5 (id=374): capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000240), 0x1b, 0x4ed, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000280)={[{@inode_readahead_blks}, {}, {@bh}, {@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noinit_itable}]}, 0x5, 0x775, &(0x7f0000001180)="$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") r0 = syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x8000ce, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES32, @ANYBLOB="2c6f626a5f726f6c653d060a387b2640402c66736d616769633d3078303030303030303030303030303038302c66736d616769633d3078303030303030303030303030303030332c657569643d", @ANYRESDEC, @ANYRES32], 0x1, 0x6da, &(0x7f0000004980)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 1m26.183537629s ago: executing program 5 (id=378): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) 1m24.352046575s ago: executing program 5 (id=384): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 1m22.861515153s ago: executing program 33 (id=384): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 1m16.996604533s ago: executing program 0 (id=70): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 53.083217708s ago: executing program 0 (id=70): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.500839437s ago: executing program 1 (id=510): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_80211_inject_frame(0x0, 0x0, 0x10e) mkdir(0x0, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_io_uring_setup(0x19d1, 0xfffffffffffffffc, 0x0, 0x0) fsopen(&(0x7f0000000480)='adfs\x00', 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0xc) 11.30840215s ago: executing program 6 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) close(r1) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) close(r0) 10.754946789s ago: executing program 1 (id=504): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x37}}, 0x14}}, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'lo\x00'}) 10.735560344s ago: executing program 6 (id=505): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40044c4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000e10000000005"], 0x28}}, 0x0) 10.159336957s ago: executing program 1 (id=507): mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.779843693s ago: executing program 1 (id=511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x4, 0x0, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.736546764s ago: executing program 3 (id=512): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x29, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) 5.799977283s ago: executing program 4 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.431851751s ago: executing program 4 (id=515): openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)={0x14, 0x0, 0x1}, 0x14}}, 0x20000850) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="01002abd7000fd"], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x2, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.988682402s ago: executing program 3 (id=516): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x2e34, &(0x7f0000000180)) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 3.831237443s ago: executing program 1 (id=517): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d312c6e6f7374726963742c6c617374626c6f636b3d30303030303030303030303030303030303534362c6769643d666f726765742c6c6f6e6761642c6c6f6e6761642c756e64656c6574652c6d6f64653d30303030303030303030303030303030303030303030352c66696c657365743d30303030303030303030303030303030303030352c00dec7384d8361a83b0c62d0234b0736200709c52d3e3f9a6b8c5dc6bb7c76b4915fba54683d202192d9190f2b60a16fc088c41f1a3eb4a78b4ac61f8bee04ae1cf7901c792b3a8eff396e2065bc6c5f90f860a13e0bd7a8f1ff"], 0x1, 0xc43, &(0x7f00000001c0)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 3.721176622s ago: executing program 4 (id=518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) sendto$inet6(r2, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) 3.512607972s ago: executing program 3 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0x0, '.\x00'}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in=@broadcast, @in=@loopback}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@newsa={0x128, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6097}, {0x0, 0x0, 0x0, 0x100000000000000}, {0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x2, 0x1}, [@lastused={0xc, 0xf, 0x609}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in=@empty, 0x0, 0x2}}]}, 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x9}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000000) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r3, 0x0, 0x0) 3.454272428s ago: executing program 4 (id=520): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r2, &(0x7f0000000240)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0)={0x1}) poll(0x0, 0x0, 0x9) 3.359115419s ago: executing program 6 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f4, 0x1, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0xc0) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.085570427s ago: executing program 3 (id=522): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.756546623s ago: executing program 4 (id=523): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @empty}, {0x306, @remote}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) keyctl$restrict_keyring(0x6, 0xfffffffffffffffc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x443, &(0x7f0000001040)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.791728512s ago: executing program 3 (id=524): alarm(0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x70bd2b, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) 1.724119751s ago: executing program 6 (id=525): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000005740)={0x0, 0xea60}, 0x10) recvmsg(r1, &(0x7f0000006100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 1.203601872s ago: executing program 6 (id=526): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) setitimer(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48894}, 0x8000) 1.040922645s ago: executing program 4 (id=527): io_submit(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x7) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x2, 0x0) 968.163182ms ago: executing program 1 (id=528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 211.86211ms ago: executing program 3 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r1, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') 0s ago: executing program 6 (id=530): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xac, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x9b, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b948256585655"]}]}, 0xac}], 0x1}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): 1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.222807][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.230028][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.294891][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.411351][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.418751][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.500373][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.507762][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.527215][ T5845] Bluetooth: hci2: command tx timeout [ 105.532707][ T5845] Bluetooth: hci0: command tx timeout [ 105.540586][ T5839] Bluetooth: hci4: command tx timeout [ 105.540607][ T54] Bluetooth: hci1: command tx timeout [ 105.546035][ T5839] Bluetooth: hci3: command tx timeout [ 105.716428][ T5837] veth0_vlan: entered promiscuous mode [ 105.853361][ T5837] veth1_vlan: entered promiscuous mode [ 105.889940][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.022960][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.061296][ T5837] veth0_macvtap: entered promiscuous mode [ 106.097605][ T5837] veth1_macvtap: entered promiscuous mode [ 106.204843][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.231896][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.279658][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.365154][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.380855][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.390059][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.399220][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.515715][ T5832] veth0_vlan: entered promiscuous mode [ 106.601944][ T5832] veth1_vlan: entered promiscuous mode [ 106.623857][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.701187][ T5831] veth0_vlan: entered promiscuous mode [ 106.749746][ T1905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.764811][ T1905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.794167][ T5831] veth1_vlan: entered promiscuous mode [ 106.823212][ T5835] veth0_vlan: entered promiscuous mode [ 106.843883][ T5832] veth0_macvtap: entered promiscuous mode [ 106.892229][ T5835] veth1_vlan: entered promiscuous mode [ 106.901048][ T5832] veth1_macvtap: entered promiscuous mode [ 106.921961][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.944198][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.014045][ T5831] veth0_macvtap: entered promiscuous mode [ 107.033316][ T5833] veth0_vlan: entered promiscuous mode [ 107.051426][ T5831] veth1_macvtap: entered promiscuous mode [ 107.066020][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.086888][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.100403][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.122275][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.134958][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.149066][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.183694][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.194112][ T5835] veth0_macvtap: entered promiscuous mode [ 107.217074][ T5833] veth1_vlan: entered promiscuous mode [ 107.245998][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.262245][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.273349][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.292501][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.317842][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.328890][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.339385][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.350265][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.374252][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.390920][ T5835] veth1_macvtap: entered promiscuous mode [ 107.430140][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.459250][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.473404][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.489797][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.502081][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.591605][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.602674][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.609601][ T5839] Bluetooth: hci1: command tx timeout [ 107.615798][ T5845] Bluetooth: hci4: command tx timeout [ 107.617082][ T54] Bluetooth: hci2: command tx timeout [ 107.622224][ T5845] Bluetooth: hci3: command tx timeout [ 107.627738][ T5843] Bluetooth: hci0: command tx timeout [ 107.635644][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.647561][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.701680][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.714957][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.732470][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.744867][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.756554][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.772003][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.790985][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.815273][ T5833] veth0_macvtap: entered promiscuous mode [ 107.840907][ T5833] veth1_macvtap: entered promiscuous mode [ 107.863511][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.884734][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.896338][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.903027][ T5920] loop3: detected capacity change from 0 to 2048 [ 107.917072][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.928201][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.939048][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.951341][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.972446][ T5920] loop3: p1 < > p4 < > [ 108.059359][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.068433][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.078287][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.089064][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.117304][ T1905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.125643][ T1905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.434016][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.446803][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.462547][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.473194][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.506854][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.518808][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.528927][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.540290][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.552928][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.616665][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.624551][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.859993][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.872038][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.882130][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.894312][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.904344][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.927269][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.972992][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.260801][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.331419][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.755964][ T5938] input: syz0 as /devices/virtual/input/input5 [ 109.795295][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.847407][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.869132][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.888513][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.984309][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.025279][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.134826][ T5942] loop3: detected capacity change from 0 to 512 [ 110.152484][ T5942] ======================================================= [ 110.152484][ T5942] WARNING: The mand mount option has been deprecated and [ 110.152484][ T5942] and is ignored by this kernel. Remove the mand [ 110.152484][ T5942] option from the mount to silence this warning. [ 110.152484][ T5942] ======================================================= [ 110.188601][ T5942] EXT4-fs: quotafile must be on filesystem root [ 110.240716][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.272959][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.311679][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.319944][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.503110][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.523767][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.666211][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.715463][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.824675][ T5950] loop1: detected capacity change from 0 to 512 [ 111.051699][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.162387][ T5954] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.910751][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.075045][ T5950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.090030][ T5950] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.401624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.607062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.708859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.811221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.118771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.220774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.322958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.425549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.528028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.795488][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.069908][ T5970] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.648397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 116.507373][ T5991] loop3: detected capacity change from 0 to 2048 [ 116.595817][ T5991] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.224842][ T5987] loop0: detected capacity change from 0 to 2048 [ 118.869997][ T6003] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.275626][ T6017] loop3: detected capacity change from 0 to 16 [ 120.339326][ T6017] erofs (device loop3): mounted with root inode @ nid 36. [ 120.456505][ T6017] erofs (device loop3): inline data across blocks @ nid 36 [ 120.500467][ T6017] syz.3.26: attempt to access beyond end of device [ 120.500467][ T6017] loop3: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 122.450405][ T6039] syz.3.31 uses obsolete (PF_INET,SOCK_PACKET) [ 123.544903][ T6049] netlink: 'syz.0.34': attribute type 10 has an invalid length. [ 124.042643][ T6051] evm: overlay not supported [ 124.100398][ T6051] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 128.187408][ T29] audit: type=1804 audit(1738832286.303:2): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.44" name="/newroot/8/bus/file0" dev="overlay" ino=79 res=1 errno=0 [ 128.799604][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 128.986230][ T6138] loop4: detected capacity change from 0 to 512 [ 129.034773][ T6138] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 129.065949][ T6138] EXT4-fs (loop4): invalid journal inode [ 129.087858][ T6138] EXT4-fs (loop4): can't get journal size [ 129.151159][ T6138] EXT4-fs (loop4): 1 truncate cleaned up [ 129.159552][ T6138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.261554][ T6138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.813202][ T6162] vcan0: entered allmulticast mode [ 132.337889][ T6162] vcan0 (unregistering): left allmulticast mode [ 133.825383][ T6188] capability: warning: `syz.4.62' uses deprecated v2 capabilities in a way that may be insecure [ 133.890894][ T6191] warning: `syz.0.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.931627][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.940656][ C0] Unknown status report in ack skb [ 134.123549][ T5884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.166809][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 134.205120][ T5884] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.249944][ T5884] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.272558][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.303499][ T5884] usb 3-1: Product: syz [ 134.325227][ T5884] usb 3-1: Manufacturer: syz [ 134.336126][ T5884] usb 3-1: SerialNumber: syz [ 134.420225][ T5884] cdc_ncm 3-1:1.0: skipping garbage [ 134.437158][ T5884] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 134.452279][ T5884] cdc_ncm 3-1:1.0: bind() failure [ 134.624777][ T5884] usb 3-1: USB disconnect, device number 2 [ 134.908506][ T6120] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.055843][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.232614][ T6120] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.266734][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 135.274369][ T25] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 135.297129][ T25] usb 2-1: config 0 has no interface number 0 [ 135.303312][ T25] usb 2-1: config 0 interface 12 has no altsetting 0 [ 135.359121][ T25] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 135.390402][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.417089][ T25] usb 2-1: Product: syz [ 135.428310][ T25] usb 2-1: Manufacturer: syz [ 135.466771][ T25] usb 2-1: SerialNumber: syz [ 135.479356][ T25] usb 2-1: config 0 descriptor?? [ 135.510200][ T6120] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.781761][ T6120] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.331923][ T6120] bridge_slave_1: left allmulticast mode [ 136.371418][ T6120] bridge_slave_1: left promiscuous mode [ 136.395815][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.435525][ T6120] bridge_slave_0: left allmulticast mode [ 136.457006][ T6120] bridge_slave_0: left promiscuous mode [ 136.464367][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.653261][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.663848][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.674215][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.683869][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.692683][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 136.700948][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.913336][ T6211] loop4: detected capacity change from 0 to 32768 [ 138.223921][ T25] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 138.255962][ T25] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 138.293475][ T25] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 138.306860][ T25] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 138.353280][ T25] usb 2-1: USB disconnect, device number 2 [ 138.605147][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.634451][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.067467][ T5839] Bluetooth: hci0: command tx timeout [ 140.593608][ T29] audit: type=1326 audit(1738832298.723:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 141.383387][ T5839] Bluetooth: hci0: command tx timeout [ 141.528557][ T29] audit: type=1326 audit(1738832298.733:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 141.550609][ T29] audit: type=1326 audit(1738832298.733:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 141.581610][ T6245] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.594195][ T29] audit: type=1326 audit(1738832298.733:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 141.607490][ T6120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.632040][ T29] audit: type=1326 audit(1738832298.733:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 141.656144][ T29] audit: type=1326 audit(1738832298.733:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 141.706444][ T29] audit: type=1326 audit(1738832299.793:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8bcb5bf6a5 code=0x7ffc0000 [ 141.741438][ T6120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.749517][ T29] audit: type=1326 audit(1738832299.793:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 141.777823][ T6120] bond0 (unregistering): Released all slaves [ 141.864001][ T29] audit: type=1326 audit(1738832299.793:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 143.086876][ T29] audit: type=1326 audit(1738832299.933:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 143.499682][ T5839] Bluetooth: hci0: command tx timeout [ 146.199645][ T5839] Bluetooth: hci0: command tx timeout [ 146.861255][ T6271] loop4: detected capacity change from 0 to 40427 [ 148.158677][ T6271] F2FS-fs (loop4): Unable to read 1th superblock [ 148.165665][ T6271] F2FS-fs (loop4): Unable to read 2th superblock [ 150.415838][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 150.415858][ T29] audit: type=1804 audit(1738832308.543:22): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.93" name="/newroot/16/bus/bus" dev="overlay" ino=128 res=1 errno=0 [ 150.468815][ T6294] Invalid ELF header magic: != ELF [ 150.490054][ T6302] loop4: detected capacity change from 0 to 128 [ 150.511881][ T6120] hsr_slave_0: left promiscuous mode [ 150.548554][ T6120] hsr_slave_1: left promiscuous mode [ 150.555077][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.570583][ T6302] gfs2: gfs2 mount does not exist [ 150.582755][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.993180][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.065597][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.379597][ T6120] veth1_macvtap: left promiscuous mode [ 151.389859][ T6120] veth0_macvtap: left promiscuous mode [ 151.395670][ T6120] veth1_vlan: left promiscuous mode [ 151.429083][ T6120] veth0_vlan: left promiscuous mode [ 151.614776][ T6317] loop2: detected capacity change from 0 to 1024 [ 151.648579][ T6317] hfsplus: Unknown parameter '"' [ 153.150118][ T29] audit: type=1326 audit(1738832311.283:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x0 [ 154.813168][ T6342] loop1: detected capacity change from 0 to 256 [ 154.872959][ T6342] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.676930][ T6120] team0 (unregistering): Port device team_slave_1 removed [ 156.816784][ T6120] team0 (unregistering): Port device team_slave_0 removed [ 156.962469][ T5839] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 157.686117][ T6218] chnl_net:caif_netlink_parms(): no params data found [ 157.941513][ T6359] bridge1: entered promiscuous mode [ 157.978668][ T6359] bridge1: entered allmulticast mode [ 158.810705][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.116'. [ 158.920847][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.948823][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.980622][ T6218] bridge_slave_0: entered allmulticast mode [ 159.004919][ T6218] bridge_slave_0: entered promiscuous mode [ 159.046051][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.134089][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.162208][ T6218] bridge_slave_1: entered allmulticast mode [ 159.189341][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 159.189503][ T6218] bridge_slave_1: entered promiscuous mode [ 159.637371][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.644842][ T6384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.522967][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.627121][ T6384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.886303][ T6397] loop3: detected capacity change from 0 to 2048 [ 160.996291][ T6397] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 161.036922][ T6397] System zones: 0-7 [ 161.049104][ T5839] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 161.057617][ T5839] Bluetooth: hci3: Injecting HCI hardware error event [ 161.065231][ T5839] Bluetooth: hci3: hardware error 0x00 [ 161.101109][ T6218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.172440][ T6397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.356910][ T978] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 161.588215][ T978] usb 5-1: config 0 has an invalid interface number: 82 but max is 0 [ 161.601861][ T6218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.621859][ T978] usb 5-1: config 0 has no interface number 0 [ 162.326723][ T6218] team0: Port device team_slave_0 added [ 162.361004][ T6218] team0: Port device team_slave_1 added [ 162.404897][ T978] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=bc.cc [ 162.414241][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.426981][ T978] usb 5-1: config 0 descriptor?? [ 162.439998][ T978] usb 5-1: Found UVC 0.00 device (1bcf:0b40) [ 162.472359][ T978] usb 5-1: Forcing UVC version to 1.0a [ 162.474172][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.505963][ T978] usb 5-1: No valid video chain found. [ 163.376784][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 163.493273][ T5959] usb 5-1: USB disconnect, device number 2 [ 163.545896][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.593828][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.626890][ T6218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.650728][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.679169][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.591519][ T6218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.590705][ T6218] hsr_slave_0: entered promiscuous mode [ 166.035747][ T6218] hsr_slave_1: entered promiscuous mode [ 166.049377][ T6218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.082436][ T6218] Cannot create hsr debugfs directory [ 166.768043][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 166.870155][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 171.959264][ T6218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.006417][ T5882] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 172.021016][ T6218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.110357][ T6218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.145734][ T6218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.189484][ T5882] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 172.222597][ T5882] usb 2-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 172.269765][ T5882] usb 2-1: config 0 has no interface number 0 [ 172.318724][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 172.335967][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.360283][ T5882] usb 2-1: Product: syz [ 172.364523][ T5882] usb 2-1: Manufacturer: syz [ 172.388545][ T5882] usb 2-1: SerialNumber: syz [ 172.404462][ T5882] usb 2-1: config 0 descriptor?? [ 172.622623][ T6218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.738803][ T6218] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.810829][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.818241][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.834753][ T5882] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 172.855117][ T5882] usb 2-1: No valid video chain found. [ 172.872697][ T5882] usb 2-1: USB disconnect, device number 3 [ 172.931677][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.938952][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.176960][ T6218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.555283][ T6218] veth0_vlan: entered promiscuous mode [ 174.756520][ T6595] loop1: detected capacity change from 0 to 256 [ 174.897037][ T6595] FAT-fs (loop1): Directory bread(block 64) failed [ 174.904075][ T6595] FAT-fs (loop1): Directory bread(block 65) failed [ 174.911381][ T6595] FAT-fs (loop1): Directory bread(block 66) failed [ 174.918200][ T6595] FAT-fs (loop1): Directory bread(block 67) failed [ 174.925617][ T6595] FAT-fs (loop1): Directory bread(block 68) failed [ 174.932429][ T6595] FAT-fs (loop1): Directory bread(block 69) failed [ 174.939731][ T6595] FAT-fs (loop1): Directory bread(block 70) failed [ 174.946403][ T6595] FAT-fs (loop1): Directory bread(block 71) failed [ 174.953638][ T6595] FAT-fs (loop1): Directory bread(block 72) failed [ 174.960445][ T6595] FAT-fs (loop1): Directory bread(block 73) failed [ 176.047636][ T29] audit: type=1800 audit(1738832334.133:24): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.155" name="/" dev="9p" ino=2 res=0 errno=0 [ 176.614584][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 176.650331][ T6218] veth1_vlan: entered promiscuous mode [ 177.094254][ T6218] veth0_macvtap: entered promiscuous mode [ 177.186038][ T6218] veth1_macvtap: entered promiscuous mode [ 177.311480][ T6218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.353760][ T6218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.386319][ T6218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.432659][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 177.523073][ T6218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.683888][ T6218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.786923][ T6218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.813141][ T46] usb 3-1: device descriptor read/all, error -71 [ 177.970479][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.071083][ T6218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.147704][ T6218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.177665][ T6218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.206276][ T6218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.231732][ T6218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.255946][ T6218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.306994][ T6631] loop1: detected capacity change from 0 to 512 [ 178.328303][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.341123][ T6631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 178.426485][ T6631] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.435784][ T6218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.487594][ T6218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.506751][ T6631] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 178.542634][ T6218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.595906][ T6218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.671090][ T6639] loop3: detected capacity change from 0 to 1024 [ 178.719892][ T6639] EXT4-fs: Ignoring removed oldalloc option [ 178.745014][ T6639] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 178.774923][ T6641] netlink: 32 bytes leftover after parsing attributes in process `syz.4.161'. [ 178.874235][ T6639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.953136][ T6641] Zero length message leads to an empty skb [ 178.959242][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 179.153741][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 179.160936][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.185441][ T29] audit: type=1804 audit(1738832337.313:25): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.162" name="/newroot/38/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 179.187897][ T25] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.233347][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.359652][ T6650] netlink: 'syz.2.163': attribute type 4 has an invalid length. [ 179.374477][ T6111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.387452][ T25] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.427217][ T6111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.449650][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 179.467862][ T25] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 179.496772][ T25] usb 2-1: Product: syz [ 179.501186][ T25] usb 2-1: Manufacturer: syz [ 179.530977][ T25] hub 2-1:4.0: USB hub found [ 179.574019][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.731825][ T25] hub 2-1:4.0: 2 ports detected [ 180.025292][ T6664] loop3: detected capacity change from 0 to 1024 [ 181.621848][ T5884] hub 2-1:4.0: activate --> -90 [ 182.336511][ T25] usb 2-1: USB disconnect, device number 4 [ 182.338837][ T978] usb 2-1-port2: cannot warm reset (err = -71) [ 183.303705][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.705053][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.940754][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.145512][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.224571][ T6704] block device autoloading is deprecated and will be removed. [ 186.477737][ T34] bridge_slave_1: left allmulticast mode [ 186.506773][ T34] bridge_slave_1: left promiscuous mode [ 186.526958][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.803315][ T34] bridge_slave_0: left allmulticast mode [ 186.829581][ T34] bridge_slave_0: left promiscuous mode [ 186.859280][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.445528][ T6723] loop2: detected capacity change from 0 to 164 [ 188.791054][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.804041][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.815288][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.855647][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.864518][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.875096][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.237536][ T6714] loop4: detected capacity change from 0 to 32768 [ 189.844553][ T6714] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop4": -EINTR [ 189.920089][ T6734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.183'. [ 190.684081][ T6736] loop3: detected capacity change from 0 to 512 [ 190.966710][ T5839] Bluetooth: hci0: command tx timeout [ 190.975997][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.004705][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.059639][ T34] bond0 (unregistering): Released all slaves [ 191.081671][ T6736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.108940][ T6736] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.594192][ T6750] loop1: detected capacity change from 0 to 1024 [ 192.627964][ T6750] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.797281][ T6750] EXT4-fs (loop1): can't mount with commit=3, fs mounted w/o journal [ 192.853278][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.047290][ T5839] Bluetooth: hci0: command tx timeout [ 193.148301][ T6750] loop1: detected capacity change from 0 to 2048 [ 193.298149][ T6761] loop4: detected capacity change from 0 to 2048 [ 193.750132][ T6761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.770159][ T6750] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 193.835328][ T6750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.258347][ T5839] Bluetooth: hci0: command tx timeout [ 196.319235][ T6786] loop2: detected capacity change from 0 to 1024 [ 196.416820][ T5884] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.607145][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 196.672581][ T5884] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 196.817632][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.139191][ T5884] usb 2-1: config 0 descriptor?? [ 197.286824][ T5839] Bluetooth: hci0: command tx timeout [ 197.320869][ T6097] hfsplus: b-tree write err: -5, ino 3 [ 197.366227][ T6791] hfsplus: b-tree write err: -5, ino 3 [ 198.470708][ T34] hsr_slave_0: left promiscuous mode [ 198.569058][ T34] hsr_slave_1: left promiscuous mode [ 198.575874][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.716716][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.820029][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.894528][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.862462][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.869004][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.916517][ T3473] hfsplus: b-tree write err: -5, ino 3 [ 200.199866][ T34] veth1_macvtap: left promiscuous mode [ 200.206238][ T34] veth0_macvtap: left promiscuous mode [ 200.247731][ T34] veth1_vlan: left promiscuous mode [ 200.253269][ T34] veth0_vlan: left promiscuous mode [ 200.375995][ T6808] loop3: detected capacity change from 0 to 1024 [ 200.398319][ T6808] EXT4-fs: Ignoring removed orlov option [ 200.443289][ T6808] EXT4-fs (loop3): Test dummy encryption mode enabled [ 200.633466][ T6808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.505353][ T5884] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 202.526921][ T5884] asix 2-1:0.0: probe with driver asix failed with error -71 [ 202.567337][ T5884] usb 2-1: USB disconnect, device number 5 [ 202.591157][ T6808] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 202.671838][ T6808] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.218757][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.230866][ T6851] dccp_close: ABORT with 2 bytes unread [ 206.604979][ T29] audit: type=1326 audit(1738832364.723:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 206.630216][ T29] audit: type=1326 audit(1738832364.723:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 206.655957][ T29] audit: type=1326 audit(1738832364.723:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 206.680097][ T29] audit: type=1326 audit(1738832364.723:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 206.719868][ T29] audit: type=1326 audit(1738832364.723:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 206.723510][ T34] team0 (unregistering): Port device team_slave_1 removed [ 206.762497][ T29] audit: type=1326 audit(1738832364.723:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 206.786208][ T29] audit: type=1326 audit(1738832364.733:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 206.810586][ T29] audit: type=1326 audit(1738832364.733:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 206.835702][ T29] audit: type=1326 audit(1738832364.733:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 206.861218][ T29] audit: type=1326 audit(1738832364.763:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f583dd83da7 code=0x7ffc0000 [ 206.887883][ T34] team0 (unregistering): Port device team_slave_0 removed [ 209.013479][ T6874] loop1: detected capacity change from 0 to 1024 [ 209.876705][ T6874] hfsplus: unable to load nls mapping "asca»æ-šii" [ 210.688888][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 210.695403][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 210.999049][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 211.137235][ T6885] ceph: No mds server is up or the cluster is laggy [ 211.151554][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 213.220717][ T6724] chnl_net:caif_netlink_parms(): no params data found [ 213.263040][ T6906] loop2: detected capacity change from 0 to 256 [ 213.364348][ T6906] exfat: Deprecated parameter 'namecase' [ 213.537256][ T6906] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 213.909277][ T5959] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 213.962397][ T6724] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.978474][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.005788][ T6724] bridge_slave_0: entered allmulticast mode [ 214.060080][ T6724] bridge_slave_0: entered promiscuous mode [ 214.077908][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 214.096222][ T6724] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.129028][ T5959] usb 5-1: config 0 has no interfaces? [ 214.157949][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.165440][ T6724] bridge_slave_1: entered allmulticast mode [ 214.181139][ T5959] usb 5-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=bf.0a [ 214.207179][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.217868][ T6724] bridge_slave_1: entered promiscuous mode [ 214.276779][ T5959] usb 5-1: Product: syz [ 214.281004][ T5959] usb 5-1: Manufacturer: syz [ 214.285646][ T5959] usb 5-1: SerialNumber: syz [ 214.354295][ T5959] usb 5-1: config 0 descriptor?? [ 214.459215][ T6724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.469158][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 214.489360][ T6724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.625935][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.674847][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.722357][ T6724] team0: Port device team_slave_0 added [ 214.741134][ T5959] usb 5-1: USB disconnect, device number 3 [ 214.762641][ T6724] team0: Port device team_slave_1 added [ 215.028073][ T6724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.039108][ T6724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.071712][ T6724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.085128][ T6724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.092855][ T6724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.124796][ T6724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.305325][ T6724] hsr_slave_0: entered promiscuous mode [ 215.334476][ T6724] hsr_slave_1: entered promiscuous mode [ 215.361102][ T6724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.383586][ T6724] Cannot create hsr debugfs directory [ 221.396972][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.420769][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.437010][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.450533][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.468719][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.476811][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.730215][ T5959] IPVS: starting estimator thread 0... [ 221.836875][ T7008] IPVS: using max 18 ests per chain, 43200 per kthread [ 222.312753][ T7017] loop4: detected capacity change from 0 to 4096 [ 222.333606][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 222.377871][ T7017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.463147][ T7017] fs-verity: sha256 using implementation "sha256-avx2" [ 222.547257][ T7017] fs-verity (loop4, inode 16): fs-verity keyring is empty, rejecting signed file! [ 222.619553][ T7025] mmap: syz.3.252 (7025) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 223.249930][ T6724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.323240][ T6724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.522578][ T6724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.589519][ T6724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.614075][ T5839] Bluetooth: hci2: command tx timeout [ 223.720465][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.793869][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 224.275827][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.286866][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.300711][ T7002] bridge_slave_0: entered allmulticast mode [ 224.329225][ T7002] bridge_slave_0: entered promiscuous mode [ 224.360416][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.403471][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.424019][ T7002] bridge_slave_1: entered allmulticast mode [ 224.435926][ T7002] bridge_slave_1: entered promiscuous mode [ 224.552758][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.579804][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.803882][ T7002] team0: Port device team_slave_0 added [ 224.873850][ T7002] team0: Port device team_slave_1 added [ 224.954228][ T6724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.738972][ T5839] Bluetooth: hci2: command tx timeout [ 225.986210][ T6724] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.010710][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.046966][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 226.058294][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.151428][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.234158][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.241458][ T6130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.208663][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.235169][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.285967][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.342211][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.349432][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.586237][ T7002] hsr_slave_0: entered promiscuous mode [ 227.635976][ T7002] hsr_slave_1: entered promiscuous mode [ 227.653676][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.655355][ T7087] loop1: detected capacity change from 0 to 64 [ 227.702321][ T7002] Cannot create hsr debugfs directory [ 227.713113][ T7087] minix: Unknown parameter '>' [ 227.768304][ T5839] Bluetooth: hci2: command tx timeout [ 230.306632][ T5839] Bluetooth: hci2: command tx timeout [ 232.121218][ T7002] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.212710][ T7125] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 232.256985][ T7002] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.352056][ T7002] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.445858][ T7129] gfs2: not a GFS2 filesystem [ 233.466698][ T7002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.557450][ T6724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.009385][ T7136] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 234.345245][ T6724] veth0_vlan: entered promiscuous mode [ 234.536592][ T6724] veth1_vlan: entered promiscuous mode [ 235.453098][ T6724] veth0_macvtap: entered promiscuous mode [ 235.489683][ T7152] netlink: 'syz.4.275': attribute type 6 has an invalid length. [ 235.641438][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.690274][ T6724] veth1_macvtap: entered promiscuous mode [ 235.784320][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.836900][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.866970][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.887310][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.927998][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.957068][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.988868][ T6724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.043080][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.075957][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.106760][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.129987][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.154358][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.190165][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.200880][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.213670][ T6724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.240308][ T6724] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.250553][ T6724] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.262845][ T6724] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.269658][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 236.287758][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 236.297356][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 236.312480][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 236.322320][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 237.087492][ T6724] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.222339][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.229592][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.309267][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.316656][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.566708][ T6111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.587005][ T6111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.144064][ T7180] ip6gretap0: entered promiscuous mode [ 239.257336][ T7180] batadv_slave_0: entered promiscuous mode [ 239.729423][ T6111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.775480][ T6111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.964189][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'. [ 240.075170][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 240.081716][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.089712][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.097618][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.105581][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.113470][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.121470][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.129356][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.137361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.145219][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.153265][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.161166][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.169222][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.177106][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.185061][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.192975][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.200970][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.208868][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.216871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.224721][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.232720][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.240611][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.248622][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.256474][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.264497][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.272401][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.280401][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.288307][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.296317][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.304223][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.312226][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.320134][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.328139][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.335999][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.344070][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.351948][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.359968][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.367851][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.375818][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.383720][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.391713][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.399614][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.407595][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.415436][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.423434][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.431321][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.439362][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.447253][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.455219][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.463115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.471113][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.478990][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.487026][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.494886][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.502896][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.510788][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.518796][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.526686][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.534661][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.542586][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.550597][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.558510][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.566468][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.574387][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.582401][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.590312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.598351][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.606237][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.614284][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.622184][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 241.257260][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.555514][ T7207] bridge_slave_0: left allmulticast mode [ 241.570536][ T7207] bridge_slave_0: left promiscuous mode [ 241.589558][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.677970][ T7207] bridge_slave_1: left allmulticast mode [ 241.696802][ T7207] bridge_slave_1: left promiscuous mode [ 241.722727][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.744922][ T7207] bond0: (slave bond_slave_0): Releasing backup interface [ 241.764401][ T7207] bond0: (slave bond_slave_1): Releasing backup interface [ 241.832848][ T7207] team0: Port device team_slave_0 removed [ 241.865562][ T7207] team0: Port device team_slave_1 removed [ 241.878245][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.888801][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.907857][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.915334][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.005548][ T7216] loop3: detected capacity change from 0 to 128 [ 242.075786][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.086470][ T7209] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 242.104823][ T7209] bond0: (slave ipip0): Error -95 calling set_mac_address [ 242.498900][ T6102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.663161][ T6102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.832217][ T6102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.981853][ T6102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.012330][ T7002] veth0_vlan: entered promiscuous mode [ 243.070564][ T7002] veth1_vlan: entered promiscuous mode [ 243.179512][ T7227] loop1: detected capacity change from 0 to 16 [ 243.196376][ T7227] erofs: Unknown parameter 'óacl' [ 243.500926][ T7002] veth0_macvtap: entered promiscuous mode [ 244.483833][ T7002] veth1_macvtap: entered promiscuous mode [ 244.904879][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.988772][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.969920][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.980482][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.003318][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.067672][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.083882][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.118959][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.131954][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.145891][ T6102] bridge_slave_1: left allmulticast mode [ 246.154139][ T6102] bridge_slave_1: left promiscuous mode [ 246.159936][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.168746][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.200665][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.209318][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 246.218743][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.284202][ T6102] bridge_slave_0: left allmulticast mode [ 246.297319][ T6102] bridge_slave_0: left promiscuous mode [ 246.303211][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.497202][ T7265] netlink: 'syz.3.300': attribute type 27 has an invalid length. [ 247.715069][ T6102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.730529][ T6102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.753531][ T6102] bond0 (unregistering): Released all slaves [ 247.793941][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.826612][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.836479][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.847134][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.896688][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.912722][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.944857][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.229671][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.239458][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.330763][ T54] Bluetooth: hci0: command tx timeout [ 249.452640][ T7265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.490287][ T7265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.697867][ T7265] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.707598][ T7265] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.717013][ T7265] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.733275][ T7265] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.792543][ T7282] loop1: detected capacity change from 0 to 164 [ 249.828357][ T7282] rock: directory entry would overflow storage [ 249.835016][ T7282] rock: sig=0x66, size=4, remaining=3 [ 249.944260][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.954028][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.966216][ T7267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.017559][ T7002] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.034241][ T7267] syz.3.300 (7267) used greatest stack depth: 18736 bytes left [ 250.045895][ T7002] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.056330][ T7002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.065187][ T7002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.223897][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 250.223917][ T29] audit: type=1326 audit(1738832408.353:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 250.359352][ T29] audit: type=1326 audit(1738832408.493:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 250.419796][ T54] Bluetooth: hci0: command tx timeout [ 250.456844][ T29] audit: type=1326 audit(1738832408.493:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 250.494665][ T29] audit: type=1326 audit(1738832408.493:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583dd8cde9 code=0x7ffc0000 [ 250.942413][ T7275] netlink: 6 bytes leftover after parsing attributes in process `syz.4.301'. [ 251.099196][ T7275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.406737][ T25] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 251.597019][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.626662][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 251.641909][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.678482][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 251.696191][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.713888][ T25] usb 4-1: config 0 descriptor?? [ 251.720704][ T6102] hsr_slave_0: left promiscuous mode [ 251.723412][ T7292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 251.743030][ T6102] hsr_slave_1: left promiscuous mode [ 251.761697][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.796811][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.827854][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.835363][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.894805][ T6102] veth1_macvtap: left promiscuous mode [ 251.901076][ T6102] veth0_macvtap: left promiscuous mode [ 251.914655][ T6102] veth1_vlan: left promiscuous mode [ 251.920307][ T6102] veth0_vlan: left promiscuous mode [ 251.968733][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.981563][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.221683][ T25] lenovo 0003:17EF:6067.0001: item fetching failed at offset 0/2 [ 252.257116][ T25] lenovo 0003:17EF:6067.0001: hid_parse failed [ 252.273849][ T25] lenovo 0003:17EF:6067.0001: probe with driver lenovo failed with error -22 [ 252.428649][ T978] usb 4-1: USB disconnect, device number 2 [ 252.486872][ T54] Bluetooth: hci0: command tx timeout [ 252.562255][ T7294] loop1: detected capacity change from 0 to 40427 [ 252.575697][ T7294] F2FS-fs (loop1): Invalid segment/section count (31 != 24 * 1) [ 252.594560][ T7294] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 252.617345][ T7294] F2FS-fs (loop1): Unrecognized mount option "aÿÿ" or missing value [ 254.134416][ T6102] team0 (unregistering): Port device team_slave_1 removed [ 254.258801][ T6102] team0 (unregistering): Port device team_slave_0 removed [ 254.739132][ T54] Bluetooth: hci0: command tx timeout [ 255.844824][ T54] Bluetooth: hci4: unknown advertising packet type: 0x65 [ 255.844905][ T54] Bluetooth: hci4: unknown advertising packet type: 0x09 [ 255.852912][ T54] Bluetooth: hci4: unknown advertising packet type: 0x05 [ 255.860174][ T54] Bluetooth: hci4: Dropping invalid advertising data [ 255.877606][ T54] Bluetooth: hci4: Malformed LE Event: 0x02 [ 256.410497][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 256.636947][ T46] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 256.806872][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 256.820966][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.821086][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.854306][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.871297][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.873403][ T46] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 256.889509][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.904495][ T46] usb 5-1: config 0 descriptor?? [ 256.934690][ T7343] loop1: detected capacity change from 0 to 2048 [ 257.169022][ T7350] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.305931][ T6116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.341524][ T6116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.341652][ T46] hid-alps 0003:044E:120C.0002: item fetching failed at offset 2/5 [ 257.411209][ T46] hid-alps 0003:044E:120C.0002: parse failed [ 257.411240][ T7242] chnl_net:caif_netlink_parms(): no params data found [ 257.432338][ T46] hid-alps 0003:044E:120C.0002: probe with driver hid-alps failed with error -22 [ 257.532655][ T7335] netlink: 44 bytes leftover after parsing attributes in process `syz.4.318'. [ 258.304094][ T7335] loop4: detected capacity change from 0 to 512 [ 258.354929][ T7335] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 258.391937][ T7335] UDF-fs: Scanning with blocksize 512 failed [ 258.501352][ T7335] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 258.517819][ T7335] UDF-fs: Scanning with blocksize 1024 failed [ 258.542050][ T7335] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 258.550699][ T7335] UDF-fs: Scanning with blocksize 2048 failed [ 258.582180][ T7335] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 258.723273][ T7335] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 258.816254][ T46] usb 5-1: USB disconnect, device number 4 [ 258.880123][ T7369] overlayfs: failed to resolve './file1': -2 [ 258.974553][ T7368] Invalid ELF header magic: != ELF [ 260.233433][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 260.254727][ T25] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 260.326047][ T7242] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.357592][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.364942][ T7242] bridge_slave_0: entered allmulticast mode [ 260.420099][ T7242] bridge_slave_0: entered promiscuous mode [ 260.456697][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.465760][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.500860][ T7242] bridge_slave_1: entered allmulticast mode [ 260.515627][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 260.527398][ T7242] bridge_slave_1: entered promiscuous mode [ 260.722639][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 260.739974][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 260.743346][ T7242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.784519][ T46] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.809166][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 260.820229][ T46] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 260.835435][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.861385][ T46] usb 5-1: config 0 descriptor?? [ 260.871745][ T7242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.142272][ T7242] team0: Port device team_slave_0 added [ 261.213991][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.223765][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.631017][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 261.646744][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 261.667467][ T7242] team0: Port device team_slave_1 added [ 261.671951][ T46] usb 5-1: USB disconnect, device number 5 [ 263.199921][ T7242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.271504][ T7242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.623838][ T7242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.639798][ T7242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.779400][ T7242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.526655][ T7242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.650218][ T7421] loop1: detected capacity change from 0 to 512 [ 264.720076][ T7421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 264.869201][ T7421] EXT4-fs (loop1): 1 truncate cleaned up [ 264.926039][ T7421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.293195][ T7430] loop4: detected capacity change from 0 to 4096 [ 265.302569][ T7441] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 265.395137][ T7430] NILFS (loop4): invalid segment: Checksum error in segment payload [ 265.525453][ T7430] NILFS (loop4): trying rollback from an earlier position [ 265.831701][ T7242] hsr_slave_0: entered promiscuous mode [ 265.897873][ T7242] hsr_slave_1: entered promiscuous mode [ 265.942659][ T7242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.970597][ T7430] NILFS (loop4): recovery complete [ 266.012826][ T7242] Cannot create hsr debugfs directory [ 266.035111][ T7449] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.041108][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.930568][ T29] audit: type=1804 audit(1738832427.053:277): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.342" name="/newroot/88/file1" dev="fuse" ino=1 res=1 errno=0 [ 269.126327][ T29] audit: type=1800 audit(1738832427.103:278): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.342" name="/" dev="fuse" ino=1 res=0 errno=0 [ 269.226153][ T7468] loop1: detected capacity change from 0 to 1024 [ 269.508816][ T7475] loop4: detected capacity change from 0 to 128 [ 269.542075][ T7475] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 269.740391][ T7475] FAT-fs (loop4): FAT read failed (blocknr 128) [ 270.495246][ T7468] hfsplus: request for non-existent node 2048 in B*Tree [ 271.462945][ T7468] hfsplus: request for non-existent node 2048 in B*Tree [ 271.756926][ T7481] loop5: detected capacity change from 0 to 2048 [ 271.805282][ T7481] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=4096, location=4096 [ 271.866783][ T7481] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 271.933188][ T7481] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 272.003666][ T7481] UDF-fs: Scanning with blocksize 512 failed [ 272.321627][ T7481] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 272.417678][ T7505] Bluetooth: MGMT ver 1.23 [ 272.497553][ T7481] UDF-fs: Scanning with blocksize 1024 failed [ 272.899090][ T7496] loop1: detected capacity change from 0 to 16 [ 272.949923][ T7481] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 272.962829][ T7496] erofs: Unknown parameter '' [ 273.009539][ T7481] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 273.062687][ T7481] UDF-fs: Scanning with blocksize 2048 failed [ 273.147294][ T7481] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 273.238639][ T7481] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 273.262634][ T7481] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 273.292097][ T7481] UDF-fs: Scanning with blocksize 4096 failed [ 273.315003][ T7481] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 273.865094][ T7515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.107746][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.355'. [ 274.557556][ T7520] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 274.640617][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.357'. [ 274.659171][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.357'. [ 274.709870][ T7524] bridge0: entered promiscuous mode [ 274.745280][ T7524] syz_tun: entered promiscuous mode [ 274.766032][ T7524] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 274.794615][ T7524] Cannot create hsr debugfs directory [ 274.835990][ T7524] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 275.038001][ T7242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.961603][ T7242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.074806][ T7242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.127632][ T7242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.384613][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.362'. [ 276.696822][ T7556] NILFS (nullb0): couldn't find nilfs on the device [ 277.616618][ T5959] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 277.736370][ T7242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.817061][ T5959] usb 6-1: Using ep0 maxpacket: 8 [ 277.834287][ T5959] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 277.881566][ T5959] usb 6-1: config 1 has no interface number 1 [ 277.889656][ T7242] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.906361][ T5959] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 277.927200][ T5959] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.968561][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.977296][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.025325][ T5959] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.101598][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.260928][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.269684][ T6118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.366126][ T5959] usb 6-1: Product: syz [ 278.437293][ T5959] usb 6-1: Manufacturer: syz [ 278.510351][ T5959] usb 6-1: SerialNumber: syz [ 279.089183][ T5959] usb 6-1: 2:1 : invalid channels 0 [ 279.887132][ T5959] usb 6-1: USB disconnect, device number 2 [ 280.396625][ T6405] udevd[6405]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.133524][ T7242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.183765][ T7598] loop5: detected capacity change from 0 to 512 [ 281.204987][ T7598] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 281.205032][ T7598] EXT4-fs (loop5): blocks per group (3008) and clusters per group (32768) inconsistent [ 281.350211][ T7598] loop5: detected capacity change from 0 to 2048 [ 281.383528][ T7242] veth0_vlan: entered promiscuous mode [ 281.402241][ T7598] EXT4-fs: Ignoring removed bh option [ 281.472320][ T7242] veth1_vlan: entered promiscuous mode [ 281.504373][ T7598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.681950][ T7242] veth0_macvtap: entered promiscuous mode [ 281.776141][ T7242] veth1_macvtap: entered promiscuous mode [ 281.849937][ T7242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.862893][ T7242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.887334][ T7242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.910574][ T7242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.936400][ T7242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.969781][ T7242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.003067][ T7242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.051390][ T7242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.066078][ T7242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.092019][ T7242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.078974][ T7242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.089604][ T7242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.100686][ T7242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.113961][ T7242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.660689][ T7002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.755436][ T6118] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.070264][ T6118] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.191039][ T6111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.277832][ T6111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.129456][ T6118] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.760242][ T6118] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.003162][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.063821][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.104681][ T7697] loop4: detected capacity change from 0 to 1024 [ 291.181032][ T7686] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 291.599019][ T6118] bridge_slave_1: left allmulticast mode [ 291.609390][ T6118] bridge_slave_1: left promiscuous mode [ 291.616356][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.232868][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.245502][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.266913][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.278819][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.288991][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 292.306117][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.415770][ T6118] bridge_slave_0: left allmulticast mode [ 292.451792][ T3473] hfsplus: b-tree write err: -5, ino 4 [ 292.468219][ T6118] bridge_slave_0: left promiscuous mode [ 292.475230][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.407133][ T54] Bluetooth: hci0: command tx timeout [ 294.862947][ T7749] loop3: detected capacity change from 0 to 256 [ 295.139596][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.152502][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.163697][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.177753][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.189376][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.198947][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.298028][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.397588][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.165849][ T6118] bond0 (unregistering): Released all slaves [ 296.426213][ T7764] loop4: detected capacity change from 0 to 256 [ 296.486791][ T5839] Bluetooth: hci0: command tx timeout [ 296.773786][ T7764] FAT-fs (loop4): Directory bread(block 64) failed [ 296.978526][ T7764] FAT-fs (loop4): Directory bread(block 65) failed [ 297.298410][ T5839] Bluetooth: hci2: command tx timeout [ 297.415303][ T7764] FAT-fs (loop4): Directory bread(block 66) failed [ 297.472089][ T7764] FAT-fs (loop4): Directory bread(block 67) failed [ 297.506015][ T7773] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 297.887904][ T7764] FAT-fs (loop4): Directory bread(block 68) failed [ 298.027733][ T7764] FAT-fs (loop4): Directory bread(block 69) failed [ 298.085343][ T7764] FAT-fs (loop4): Directory bread(block 70) failed [ 298.156655][ T7764] FAT-fs (loop4): Directory bread(block 71) failed [ 298.566642][ T5839] Bluetooth: hci0: command tx timeout [ 298.767797][ T7764] FAT-fs (loop4): Directory bread(block 72) failed [ 298.791667][ T7764] FAT-fs (loop4): Directory bread(block 73) failed [ 299.376789][ T5839] Bluetooth: hci2: command tx timeout [ 299.380176][ T7788] FAT-fs (loop4): Filesystem has been set read-only [ 299.449136][ T29] audit: type=1800 audit(1738832457.450:279): pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.405" name="cpu.stat" dev="loop4" ino=148 res=0 errno=0 [ 299.451821][ T7788] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006c61) [ 300.143095][ T6118] hsr_slave_0: left promiscuous mode [ 300.225956][ T6118] hsr_slave_1: left promiscuous mode [ 300.263011][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.296632][ T46] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 300.303216][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.340843][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.372955][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.629479][ T6118] veth1_macvtap: left promiscuous mode [ 300.636419][ T6118] veth0_macvtap: left promiscuous mode [ 300.645437][ T6118] veth1_vlan: left promiscuous mode [ 300.666587][ T5839] Bluetooth: hci0: command tx timeout [ 301.437417][ T6118] veth0_vlan: left promiscuous mode [ 301.452757][ T5839] Bluetooth: hci2: command tx timeout [ 301.480318][ T46] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 301.501853][ T46] usb 2-1: config 0 has no interface number 0 [ 301.525325][ T46] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 301.542911][ T46] usb 2-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 301.557455][ T46] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 301.577912][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=0417, bcdDevice=96.6b [ 301.589285][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.599933][ T46] usb 2-1: Product: syz [ 301.605131][ T46] usb 2-1: Manufacturer: syz [ 301.611746][ T46] usb 2-1: SerialNumber: syz [ 301.647426][ T46] usb 2-1: config 0 descriptor?? [ 301.876130][ T836] usb 2-1: USB disconnect, device number 6 [ 303.551996][ T5839] Bluetooth: hci2: command tx timeout [ 305.433638][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 305.493410][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 306.503616][ T7705] chnl_net:caif_netlink_parms(): no params data found [ 306.679353][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 306.931678][ T6118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.028387][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.038562][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.051830][ T7705] bridge_slave_0: entered allmulticast mode [ 307.061665][ T7705] bridge_slave_0: entered promiscuous mode [ 307.111517][ T6118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.179176][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.202722][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.211977][ T7705] bridge_slave_1: entered allmulticast mode [ 307.223332][ T7705] bridge_slave_1: entered promiscuous mode [ 307.256105][ T6118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.276850][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.285428][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.299321][ T7754] bridge_slave_0: entered allmulticast mode [ 307.308384][ T7754] bridge_slave_0: entered promiscuous mode [ 307.361264][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.379664][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.388884][ T7754] bridge_slave_1: entered allmulticast mode [ 307.397959][ T7754] bridge_slave_1: entered promiscuous mode [ 307.452550][ T6118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.533133][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.551655][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.568933][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.629175][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.655112][ T7705] team0: Port device team_slave_0 added [ 307.713646][ T7705] team0: Port device team_slave_1 added [ 307.763869][ T7754] team0: Port device team_slave_0 added [ 307.792472][ T7754] team0: Port device team_slave_1 added [ 308.054163][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.063213][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.108789][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.131592][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.145123][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.188516][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.211971][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.226271][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.265018][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.286225][ T6118] bridge_slave_1: left allmulticast mode [ 308.306954][ T6118] bridge_slave_1: left promiscuous mode [ 308.316373][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.331721][ T6118] bridge_slave_0: left allmulticast mode [ 308.339017][ T6118] bridge_slave_0: left promiscuous mode [ 308.345973][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.898737][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.914722][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.927780][ T6118] bond0 (unregistering): Released all slaves [ 308.943300][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.952950][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.986393][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.235862][ T7705] hsr_slave_0: entered promiscuous mode [ 309.245221][ T7705] hsr_slave_1: entered promiscuous mode [ 309.253180][ T7705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.262957][ T7705] Cannot create hsr debugfs directory [ 309.313109][ T7754] hsr_slave_0: entered promiscuous mode [ 309.329476][ T7754] hsr_slave_1: entered promiscuous mode [ 309.337456][ T7754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.351350][ T7754] Cannot create hsr debugfs directory [ 309.487174][ T6118] hsr_slave_0: left promiscuous mode [ 309.494789][ T6118] hsr_slave_1: left promiscuous mode [ 309.509596][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.519400][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.532114][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.542763][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.570193][ T6118] veth1_macvtap: left promiscuous mode [ 309.576962][ T6118] veth0_macvtap: left promiscuous mode [ 309.583841][ T6118] veth1_vlan: left promiscuous mode [ 309.592332][ T6118] veth0_vlan: left promiscuous mode [ 310.216246][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 310.274911][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 311.706734][ T7705] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 311.745556][ T7705] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 311.818906][ T7705] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 311.862068][ T7705] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 311.961501][ T7754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.980140][ T7754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.994162][ T7754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.018575][ T7754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.377077][ T7705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.441340][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.463386][ T7705] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.496776][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.534736][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.543423][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.579666][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.588304][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.642245][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.650932][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.682039][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.690818][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.907911][ T7754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.245723][ T7705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.416177][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.579561][ T7754] veth0_vlan: entered promiscuous mode [ 313.622140][ T7754] veth1_vlan: entered promiscuous mode [ 313.734118][ T7754] veth0_macvtap: entered promiscuous mode [ 313.754823][ T7754] veth1_macvtap: entered promiscuous mode [ 313.850707][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.872107][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.888373][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.985014][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.007800][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.030771][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.045531][ T7754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.059777][ T7754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.076389][ T7754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.088332][ T7754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.109262][ T7705] veth0_vlan: entered promiscuous mode [ 314.141286][ T7705] veth1_vlan: entered promiscuous mode [ 314.279452][ T7705] veth0_macvtap: entered promiscuous mode [ 314.303536][ T7705] veth1_macvtap: entered promiscuous mode [ 314.351176][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.374146][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.429443][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.445318][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.457954][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.470874][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.485839][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.503895][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.517747][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.520516][ T6102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.530273][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.554457][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.566383][ T6102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.578241][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.616100][ T7705] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.628833][ T7705] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.656648][ T7705] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.676948][ T7705] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.938154][ T6106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.955634][ T6106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.000734][ T6106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.011064][ T6106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.264620][ T6106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.512604][ T6106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.685495][ T6106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.844427][ T6106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.212748][ T6106] bridge_slave_1: left allmulticast mode [ 316.225467][ T6106] bridge_slave_1: left promiscuous mode [ 316.233342][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.252592][ T6106] bridge_slave_0: left allmulticast mode [ 316.259692][ T6106] bridge_slave_0: left promiscuous mode [ 316.271873][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.828630][ T7988] loop6: detected capacity change from 0 to 1024 [ 319.871207][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.892579][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.916771][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.928197][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.940268][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 319.949218][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.949612][ T7988] EXT4-fs: Mount option(s) incompatible with ext3 [ 321.336644][ T6106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.470571][ T6106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.527105][ T6106] bond0 (unregistering): Released all slaves [ 322.007875][ T54] Bluetooth: hci2: command tx timeout [ 323.527378][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.535017][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.188685][ T54] Bluetooth: hci2: command tx timeout [ 326.247267][ T54] Bluetooth: hci2: command tx timeout [ 326.363312][ T8042] loop4: detected capacity change from 0 to 2048 [ 327.446790][ T8042] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 327.588950][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 328.156581][ T6106] hsr_slave_0: left promiscuous mode [ 328.179832][ T6106] hsr_slave_1: left promiscuous mode [ 328.314935][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.336940][ T54] Bluetooth: hci2: command tx timeout [ 328.376644][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.433526][ T6405] udevd[6405]: incorrect nilfs2 checksum on /dev/loop4 [ 328.463163][ T8057] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.481666][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.514321][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.692261][ T6106] veth1_macvtap: left promiscuous mode [ 328.749887][ T6106] veth0_macvtap: left promiscuous mode [ 328.839135][ T6106] veth1_vlan: left promiscuous mode [ 328.868474][ T6106] veth0_vlan: left promiscuous mode [ 329.287519][ T29] audit: type=1800 audit(1738832487.290:280): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.439" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 329.355420][ T8042] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 329.433676][ T8042] Remounting filesystem read-only [ 329.482198][ T8070] NILFS (loop4): mounting fs with errors [ 331.329727][ T8088] xt_NFQUEUE: number of queues (1280) out of range (got 65792) [ 333.206830][ T6106] team0 (unregistering): Port device team_slave_1 removed [ 333.286384][ T6106] team0 (unregistering): Port device team_slave_0 removed [ 334.134324][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 337.356274][ T8134] overlayfs: statfs failed on './file0' [ 337.390321][ T7990] chnl_net:caif_netlink_parms(): no params data found [ 337.421344][ T8137] overlayfs: statfs failed on './file0' [ 338.562793][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.894286][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.937225][ T7990] bridge_slave_0: entered allmulticast mode [ 338.978481][ T7990] bridge_slave_0: entered promiscuous mode [ 339.023698][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.077056][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.085794][ T7990] bridge_slave_1: entered allmulticast mode [ 339.170463][ T7990] bridge_slave_1: entered promiscuous mode [ 339.225262][ T8163] loop3: detected capacity change from 0 to 256 [ 340.643458][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.731227][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.351068][ T7990] team0: Port device team_slave_0 added [ 343.426999][ T8193] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 343.507887][ T7990] team0: Port device team_slave_1 added [ 344.808600][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.001522][ T29] audit: type=1326 audit(1738832503.000:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.1.476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x0 [ 345.726715][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.896606][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.070046][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.151994][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.237600][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.261919][ T8226] loop3: detected capacity change from 0 to 16 [ 347.522268][ T8226] erofs (device loop3): mounted with root inode @ nid 36. [ 348.170269][ T8226] syz.3.481: attempt to access beyond end of device [ 348.170269][ T8226] loop3: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 348.188850][ T8226] syz.3.481: attempt to access beyond end of device [ 348.188850][ T8226] loop3: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 348.205549][ T8226] erofs (device loop3): read error -5 @ 0 of nid 89 [ 348.236557][ T29] audit: type=1800 audit(1738832506.210:282): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.481" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 348.322353][ T8226] syz.3.481 (8226) used greatest stack depth: 18512 bytes left [ 348.561266][ T7990] hsr_slave_0: entered promiscuous mode [ 348.583059][ T7990] hsr_slave_1: entered promiscuous mode [ 348.616713][ T7990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.655782][ T7990] Cannot create hsr debugfs directory [ 348.703094][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 348.825188][ T8251] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 349.100220][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 351.634816][ T8271] syzkaller0: entered allmulticast mode [ 353.690744][ T29] audit: type=1326 audit(1738832511.690:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 354.047933][ T29] audit: type=1326 audit(1738832511.690:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 354.080734][ T29] audit: type=1326 audit(1738832512.010:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 354.209765][ T29] audit: type=1326 audit(1738832512.010:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 354.252935][ T29] audit: type=1326 audit(1738832512.010:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 354.330846][ T29] audit: type=1326 audit(1738832512.030:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 354.376292][ T29] audit: type=1326 audit(1738832512.030:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 354.396773][ T25] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 354.405439][ T29] audit: type=1326 audit(1738832512.030:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 354.565507][ T29] audit: type=1326 audit(1738832512.090:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 354.631474][ T25] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 354.640947][ T29] audit: type=1326 audit(1738832512.120:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb58cde9 code=0x7ffc0000 [ 354.684324][ T25] usb 7-1: config 0 has no interface number 0 [ 354.962890][ T25] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 355.494752][ T8303] syz.3.498 (8303) used greatest stack depth: 17040 bytes left [ 355.539409][ T25] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 355.570388][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.596659][ T25] usb 7-1: Product: syz [ 355.641084][ T25] usb 7-1: Manufacturer: syz [ 355.665491][ T25] usb 7-1: SerialNumber: syz [ 355.688332][ T25] usb 7-1: config 0 descriptor?? [ 355.718947][ T8291] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 355.773684][ T25] usb-storage 7-1:0.20: USB Mass Storage device detected [ 355.823027][ T25] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 356.766654][ T8312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.794034][ T25] scsi host1: usb-storage 7-1:0.20 [ 356.917027][ T25] usb 7-1: USB disconnect, device number 2 [ 357.065174][ T8330] loop4: detected capacity change from 0 to 512 [ 357.105394][ T8330] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 357.149768][ T8330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 357.181868][ T8330] System zones: 1-12 [ 357.213039][ T8330] EXT4-fs (loop4): orphan cleanup on readonly fs [ 357.284296][ T8330] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.503: Inode bitmap for bg 0 marked uninitialized [ 357.314958][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 357.364437][ T8330] EXT4-fs (loop4): Remounting filesystem read-only [ 357.367000][ T8326] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 357.400725][ T8330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 357.526889][ T8330] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.503: error -117 reading directory block [ 357.605867][ T8330] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.503: error -117 reading directory block [ 357.655265][ T8343] netlink: 'syz.1.504': attribute type 4 has an invalid length. [ 357.678653][ T8345] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.503: error -117 reading directory block [ 357.764294][ T8330] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.503: error -117 reading directory block [ 357.828635][ T8330] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.503: error -117 reading directory block [ 357.933371][ T8345] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.503: error -117 reading directory block [ 357.939786][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.6.505'. [ 357.996649][ T8330] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.503: error -117 reading directory block [ 358.074441][ T8330] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.503: error -117 reading directory block [ 358.168202][ T8330] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.503: error -117 reading directory block [ 358.267854][ T8330] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.503: error -117 reading directory block [ 358.612373][ T7990] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 358.785191][ T7990] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 359.158019][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.911339][ T7990] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.575851][ T7990] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.224554][ T8373] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 362.274323][ T8373] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 362.355203][ T8373] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 362.406753][ T8373] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 362.435195][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.472340][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.504576][ T8373] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 362.534742][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.543443][ T6130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.553723][ T8373] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 362.806246][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.815162][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.707331][ T8373] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 363.884999][ T8373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.915158][ T8373] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 363.980470][ T8373] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 364.247325][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 364.406836][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 364.566667][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.911817][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.924619][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 364.924638][ T29] audit: type=1326 audit(1738832522.920:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc25f8cde9 code=0x7ffc0000 [ 365.033972][ T29] audit: type=1326 audit(1738832522.920:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc25f8cde9 code=0x7ffc0000 [ 365.043258][ T8408] loop1: detected capacity change from 0 to 2048 [ 365.207209][ T29] audit: type=1326 audit(1738832523.000:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc25f8cde9 code=0x7ffc0000 [ 365.443527][ T29] audit: type=1326 audit(1738832523.000:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc25f8cde9 code=0x7ffc0000 [ 365.557313][ T7990] veth0_vlan: entered promiscuous mode [ 366.219421][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 366.264722][ T8408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.326806][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 366.374087][ T8425] loop4: detected capacity change from 0 to 512 [ 366.393255][ T7990] veth1_vlan: entered promiscuous mode [ 366.394512][ T29] audit: type=1326 audit(1738832523.000:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc25f8cde9 code=0x7ffc0000 [ 366.465166][ T8425] EXT4-fs: Ignoring removed bh option [ 366.487101][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 366.570798][ T8425] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 366.597911][ T7990] veth0_macvtap: entered promiscuous mode [ 366.605036][ T29] audit: type=1326 audit(1738832523.000:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc25f8cde9 code=0x7ffc0000 [ 366.648124][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 366.668921][ T7990] veth1_macvtap: entered promiscuous mode [ 366.704745][ T8425] EXT4-fs (loop4): 1 truncate cleaned up [ 366.727750][ T29] audit: type=1326 audit(1738832523.000:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc25f8cde9 code=0x7ffc0000 [ 366.733148][ T8425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.760025][ T29] audit: type=1326 audit(1738832523.000:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc25f8cde9 code=0x7ffc0000 [ 366.797777][ T29] audit: type=1326 audit(1738832523.000:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc25f8cde9 code=0x7ffc0000 [ 366.825488][ T29] audit: type=1326 audit(1738832523.000:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc25f8cde9 code=0x7ffc0000 [ 366.856668][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.906815][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.951499][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.005160][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.039857][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.089886][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.141007][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.164074][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.196710][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.295920][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.433822][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.453516][ T8443] syz.6.526 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 367.886162][ T7990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.936619][ T7990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.975859][ T7990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.022794][ T7990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.246742][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 368.282460][ T8450] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN PTI [ 368.297608][ T8450] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 368.307719][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.3.529 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0 [ 368.319801][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 368.331893][ T8450] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 368.338992][ T8450] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 db dd e4 ff 48 8b 1b 31 ff [ 368.362527][ T8450] RSP: 0018:ffffc9000514f958 EFLAGS: 00010206 [ 368.369810][ T8450] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 368.379372][ T8450] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88805ffdc390 [ 368.388928][ T8450] RBP: 0000000000000000 R08: ffffffff8ea81ca7 R09: 1ffffffff1d50394 [ 368.398498][ T8450] R10: dffffc0000000000 R11: fffffbfff1d50395 R12: ffff88805ffdc380 [ 368.408064][ T8450] R13: ffff88805ffdc3a0 R14: 1ffff1100620aff0 R15: ffff888031057f80 [ 368.417633][ T8450] FS: 00007f583ec726c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 368.428343][ T8450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.436257][ T8450] CR2: 0000001b30512ff8 CR3: 0000000057fb6000 CR4: 00000000003526f0 [ 368.445841][ T8450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.455460][ T8450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.465155][ T8450] Call Trace: [ 368.469087][ T8450] [ 368.472602][ T8450] ? __die_body+0x5f/0xb0 [ 368.477804][ T8450] ? die_addr+0xb0/0xe0 [ 368.482790][ T8450] ? exc_general_protection+0x3dd/0x5d0 [ 368.489464][ T8450] ? asm_exc_general_protection+0x26/0x30 [ 368.496339][ T8450] ? clone_private_mount+0x184/0x3e0 [ 368.502676][ T8450] ? clone_private_mount+0x83/0x3e0 [ 368.508914][ T8450] ? _raw_spin_unlock+0x28/0x50 [ 368.514741][ T8450] ovl_fill_super+0xe4c/0x3560 [ 368.520483][ T8450] ? shrinker_register+0x118/0x230 [ 368.526637][ T8450] ? __pfx_lock_release+0x10/0x10 [ 368.532698][ T8450] ? __pfx_ovl_fill_super+0x10/0x10 [ 368.538945][ T8450] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 368.545921][ T8450] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 368.553122][ T8450] ? sget_fc+0x909/0x9c0 [ 368.558220][ T8450] ? __pfx_set_anon_super_fc+0x10/0x10 [ 368.564770][ T8450] ? __pfx_ovl_fill_super+0x10/0x10 [ 368.571002][ T8450] get_tree_nodev+0xb7/0x140 [ 368.576519][ T8450] vfs_get_tree+0x90/0x2b0 [ 368.581833][ T8450] do_new_mount+0x2be/0xb40 [ 368.587233][ T8450] ? __pfx_do_new_mount+0x10/0x10 [ 368.593261][ T8450] __se_sys_mount+0x2d6/0x3c0 [ 368.598878][ T8450] ? __pfx___se_sys_mount+0x10/0x10 [ 368.605110][ T8450] ? do_syscall_64+0x100/0x230 [ 368.610842][ T8450] ? __x64_sys_mount+0x20/0xc0 [ 368.616563][ T8450] do_syscall_64+0xf3/0x230 [ 368.621965][ T8450] ? clear_bhb_loop+0x35/0x90 [ 368.627578][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.634646][ T8450] RIP: 0033:0x7f583dd8cde9 [ 368.639946][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.663683][ T8450] RSP: 002b:00007f583ec72038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.673781][ T8450] RAX: ffffffffffffffda RBX: 00007f583dfa5fa0 RCX: 00007f583dd8cde9 [ 368.683346][ T8450] RDX: 0000200000000340 RSI: 00002000000000c0 RDI: 0000000000000000 [ 368.692908][ T8450] RBP: 00007f583de0e2a0 R08: 0000200000000080 R09: 0000000000000000 [ 368.702471][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.712047][ T8450] R13: 0000000000000000 R14: 00007f583dfa5fa0 R15: 00007ffebb1f2d28 [ 368.721621][ T8450] [ 368.725238][ T8450] Modules linked in: [ 368.732738][ T8450] ---[ end trace 0000000000000000 ]--- [ 368.758431][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.768194][ T7990] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 368.784082][ T8452] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=256 (512 ns) > initial count (34 ns). Using initial count to start timer. [ 368.799403][ T8450] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 368.819811][ T7990] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 368.831542][ T6102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.841300][ T6102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.873789][ T8450] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 db dd e4 ff 48 8b 1b 31 ff [ 368.901321][ T8450] RSP: 0018:ffffc9000514f958 EFLAGS: 00010206 [ 368.910381][ T8450] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 368.910408][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.923373][ T8450] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88805ffdc390 [ 368.941591][ T8450] RBP: 0000000000000000 R08: ffffffff8ea81ca7 R09: 1ffffffff1d50394 [ 368.953084][ T8450] R10: dffffc0000000000 R11: fffffbfff1d50395 R12: ffff88805ffdc380 [ 368.975182][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.020487][ T8450] R13: ffff88805ffdc3a0 R14: 1ffff1100620aff0 R15: ffff888031057f80 [ 369.057231][ T8450] FS: 00007f583ec726c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 369.072860][ T8450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.099628][ T8450] CR2: 00007ffdbb89ed3c CR3: 0000000057fb6000 CR4: 00000000003526f0 [ 369.120338][ T8450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 369.137406][ T8450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 369.147528][ T8450] Kernel panic - not syncing: Fatal exception [ 369.155221][ T8450] Kernel Offset: disabled [ 369.160433][ T8450] Rebooting in 86400 seconds..