last executing test programs: 1m19.260224148s ago: executing program 1 (id=152): ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 1m18.986521692s ago: executing program 1 (id=154): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_io_uring_setup(0x3678, &(0x7f000000a9c0)={0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r1, 0x6, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m18.050778486s ago: executing program 1 (id=157): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0xff}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000080)={@loopback, @multicast1, 0x1, "d64724f6257e43b341dc333940c1ca0000000000002000", 0xffffffff, 0x0, 0x5, 0xc3b}, 0x3c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x382}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xa50}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x9, 0xd729, 0x2, 0x8, 0x7]}]}, 0x5c}}, 0x40) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000001700)={@host, 0x2}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@my=0x1, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000280)={{@local, 0x3}, 0x4, 0xd, 0x7, 0xe}) 1m17.864436669s ago: executing program 1 (id=158): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0xffff, 0x0, 0x0, 0x4001, 0x2}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000580)={[{@user_xattr}, {@resuid={'resuid', 0x3d, 0xee01}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4c3b8}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@data_journal}, {@i_version}]}, 0x1, 0x43e, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) 1m16.315588371s ago: executing program 1 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f0000000200)={'macsec0\x00', @ifru_mtu=0x3}}) 1m15.844779218s ago: executing program 1 (id=164): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ftruncate(r0, 0x8800000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r0, 0x0, 0x100000000) 1m15.560213892s ago: executing program 32 (id=164): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ftruncate(r0, 0x8800000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r0, 0x0, 0x100000000) 1m14.805779933s ago: executing program 4 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) rename(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x20004014) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x4000884) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[]) 1m14.531633727s ago: executing program 4 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x30c00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000f80)="4f7d669ddbee291bffe1f05ba4ddbda9", 0x10}, {&(0x7f0000000080)="b097daea750d345cb5c6b2c996201d5e", 0x10}], 0x2}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) 1m14.379583949s ago: executing program 4 (id=171): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x3, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) shutdown(r1, 0x1) 1m13.543265032s ago: executing program 4 (id=178): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1m13.229435926s ago: executing program 4 (id=179): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 1m11.623630829s ago: executing program 4 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x80000}, 0x18) fcntl$lock(r3, 0x5, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffc01, 0x5}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000680)={0x7, 0x3, 0x200, 0x4, 0x7, 0x6, 0xe, 0x63c5, 0x0}, &(0x7f00000006c0)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x10, &(0x7f0000000740)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r7, 0x6, 0x7, 0x1, 0x9, 0x4, 0x0, 0x7fff, {0x0, @in6={{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0xed1, 0x100, 0x0, 0x5, 0x1de}}, &(0x7f0000000180)=0xb0) 1m11.323126724s ago: executing program 33 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x80000}, 0x18) fcntl$lock(r3, 0x5, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffc01, 0x5}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000680)={0x7, 0x3, 0x200, 0x4, 0x7, 0x6, 0xe, 0x63c5, 0x0}, &(0x7f00000006c0)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x10, &(0x7f0000000740)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r7, 0x6, 0x7, 0x1, 0x9, 0x4, 0x0, 0x7fff, {0x0, @in6={{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0xed1, 0x100, 0x0, 0x5, 0x1de}}, &(0x7f0000000180)=0xb0) 13.240917598s ago: executing program 5 (id=342): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 11.455280154s ago: executing program 5 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$I2C(0x0, 0x80, 0x274100) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 10.416851319s ago: executing program 5 (id=349): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x423}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000380)={0x40, 0xa, 0xfc, {0xfc, 0x1, "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"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="2016c90000005172326264f60f8396c8780ba362e13483b765192f4e3e99323940b1c000a385a36a726189697af20ac23708bd895033a21ed36a2f498c7373c005ea016da4c74b3467aa56d0600489d1ddc3d96255e1ee9d56e6230dff1c877fccfc84008b4a61ae035169e4ad62f251b1b1e81f0396aa556238ff4e00423642c5af0062430ce13d193d2dd17f55677a4729805609ea388c63bc102497177b3cbe922b1f3b499b4a359a3336f6bc5249e0c25ee4471171a8d3de6d5bffc1f0b7ee1f8a5af7e9e4a5f3c04790ccb16d"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000004c0)={0x20, 0x0, 0x49, {0x47, "9bf468262f69494bc7e9cc43047dd15ddd59ed5b4af1d4d271c191eb94f301b882d3012c3d7e1a4b0a4ce70c96d4522ecb52f3012a6f908144dfad1d2476b00ff1cf8a7c239907"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x84}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x2c}}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x81, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, 0x0, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, 0x0, 0x0, 0x0}, 0x0) 10.35795029s ago: executing program 3 (id=350): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f00000001c0)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x1d, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5402000011000101000000000100000000000000", @ANYRES32=r4], 0x254}}, 0x0) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r6, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x18}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6a7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x317}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x40001) 9.013161119s ago: executing program 3 (id=354): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x8000000004) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) r4 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x8}) syz_open_procfs(0x0, &(0x7f0000001380)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.554033071s ago: executing program 3 (id=358): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52d, &(0x7f0000000640)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}]}]}, 0x24}}, 0x40050) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x88}, 0x4040) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) 7.348460114s ago: executing program 2 (id=361): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) unshare(0x2040400) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r5, r3, 0x11, 0x0, r5, @void, @value}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r3, 0x11, 0x0, r2, @void, @value}, 0x11) 7.171755966s ago: executing program 6 (id=363): r0 = gettid() tkill(r0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="060000000010"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x84, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x800, 0x1, 0x0, 0x0, {0x0, 0x128a, 0x0, 0x80, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x8, 0x30}}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x4}]]}, 0x84}}, 0x0) 6.759819492s ago: executing program 0 (id=364): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) 6.759578982s ago: executing program 2 (id=365): read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/225, 0xe1) vmsplice(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.759414092s ago: executing program 6 (id=366): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r4, 0x11, 0x6}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 6.634516474s ago: executing program 2 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x3ff}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x80) 6.407970597s ago: executing program 0 (id=368): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000440)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {}, {@nobh}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@data_err_ignore}]}, 0x2, 0x3eb, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000001000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141b42, 0xb) 5.960478254s ago: executing program 5 (id=369): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x8000000004) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) r4 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x8}) syz_open_procfs(0x0, &(0x7f0000001380)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.960314044s ago: executing program 3 (id=370): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r5}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 5.912861094s ago: executing program 6 (id=371): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) 5.861564545s ago: executing program 6 (id=372): keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x8042) ioctl$UI_DEV_DESTROY(r0, 0x5502) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update default user:~o!d \x00'], 0x1a, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.934620418s ago: executing program 5 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4.927083939s ago: executing program 0 (id=374): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000300)='./file0\x00', 0x20, 0x0) name_to_handle_at(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@raw={0x0, 0x72}, 0xfffffffffffffffe, 0x0) 3.305359653s ago: executing program 5 (id=375): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 3.273756483s ago: executing program 2 (id=376): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d00200700af6b", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="3587"], 0x44}}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000080)={0x7, 0x5, 0x8, 0x7046, 0x9b4, 0x6}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x80) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0xd0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0x80000001081, 0x7, 0xfffffffffffffffd, 0x0, 0x4, 0x80000000, 0xfffffffffffffffc, 0x800006]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4842, 0x0) 1.476797129s ago: executing program 3 (id=377): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x1, @tid=r0}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0xff7ffff7) eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r3, 0x4, 0x2, r1}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x2, 0x2, r3}) 1.450576999s ago: executing program 0 (id=378): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x2, 0xf2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) shutdown(r2, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 1.340327721s ago: executing program 6 (id=379): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x140) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) getitimer(0x0, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaada1, 0x7c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 1.323822631s ago: executing program 2 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x110) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r6]) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x15, 0x3) 1.200792733s ago: executing program 3 (id=381): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x423}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000380)={0x40, 0xa, 0xfc, {0xfc, 0x1, "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"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="2016c90000005172326264f60f8396c8780ba362e13483b765192f4e3e99323940b1c000a385a36a726189697af20ac23708bd895033a21ed36a2f498c7373c005ea016da4c74b3467aa56d0600489d1ddc3d96255e1ee9d56e6230dff1c877fccfc84008b4a61ae035169e4ad62f251b1b1e81f0396aa556238ff4e00423642c5af0062430ce13d193d2dd17f55677a4729805609ea388c63bc102497177b3cbe922b1f3b499b4a359a3336f6bc5249e0c25ee4471171a8d3de6d5bffc1f0b7ee1f8a5af7e9e4a5f3c04790ccb16d"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000004c0)={0x20, 0x0, 0x49, {0x47, "9bf468262f69494bc7e9cc43047dd15ddd59ed5b4af1d4d271c191eb94f301b882d3012c3d7e1a4b0a4ce70c96d4522ecb52f3012a6f908144dfad1d2476b00ff1cf8a7c239907"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x84}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x2c}}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x81, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, 0x0, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, 0x0, 0x0, 0x0}, 0x0) 1.182331453s ago: executing program 0 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0xc00}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100, 0x1}) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) 1.090530884s ago: executing program 6 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001980)={[{@utf8no}, {@rodir}, {@fat=@nfs}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@shortname_winnt}, {@shortname_mixed}, {@utf8no}, {@uni_xlate}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0) 65.45963ms ago: executing program 2 (id=384): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) copy_file_range(r2, &(0x7f0000000000)=0x3, r1, 0x0, 0xd0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000000)='q', 0x1, 0x0, &(0x7f0000001080)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) 0s ago: executing program 0 (id=385): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. syzkaller login: [ 53.678283][ T4155] cgroup: Unknown subsys name 'net' [ 53.800145][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.286392][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.719968][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 56.745432][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 56.816286][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 56.845771][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 56.956537][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.964716][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.973507][ T4168] device bridge_slave_0 entered promiscuous mode [ 56.982160][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.989540][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.997630][ T4180] device bridge_slave_0 entered promiscuous mode [ 57.026853][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.034727][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.042642][ T4168] device bridge_slave_1 entered promiscuous mode [ 57.051102][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.058503][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.066990][ T4180] device bridge_slave_1 entered promiscuous mode [ 57.085603][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 57.095688][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.102755][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.111597][ T4173] device bridge_slave_0 entered promiscuous mode [ 57.140569][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.147836][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.156376][ T4173] device bridge_slave_1 entered promiscuous mode [ 57.173394][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.204020][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.215439][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.252667][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.269761][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.277298][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.285368][ T4172] device bridge_slave_0 entered promiscuous mode [ 57.300335][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.325733][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.332971][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.341347][ T4172] device bridge_slave_1 entered promiscuous mode [ 57.353012][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.371842][ T4180] team0: Port device team_slave_0 added [ 57.397700][ T4168] team0: Port device team_slave_0 added [ 57.405124][ T4180] team0: Port device team_slave_1 added [ 57.436751][ T4168] team0: Port device team_slave_1 added [ 57.445265][ T4173] team0: Port device team_slave_0 added [ 57.461614][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.488283][ T4173] team0: Port device team_slave_1 added [ 57.503011][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.512381][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.519920][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.528961][ T4178] device bridge_slave_0 entered promiscuous mode [ 57.551574][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.558694][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.584667][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.604559][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.611645][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.619817][ T4178] device bridge_slave_1 entered promiscuous mode [ 57.635828][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.642793][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.669316][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.689729][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.696790][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.723056][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.754286][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.761250][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.787962][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.800386][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.807656][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.833790][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.853020][ T4172] team0: Port device team_slave_0 added [ 57.860890][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.872678][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.888997][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.896178][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.923080][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.946137][ T4172] team0: Port device team_slave_1 added [ 57.990363][ T4180] device hsr_slave_0 entered promiscuous mode [ 57.997583][ T4180] device hsr_slave_1 entered promiscuous mode [ 58.023239][ T4168] device hsr_slave_0 entered promiscuous mode [ 58.033007][ T4168] device hsr_slave_1 entered promiscuous mode [ 58.039981][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.047913][ T4168] Cannot create hsr debugfs directory [ 58.064868][ T4178] team0: Port device team_slave_0 added [ 58.094919][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.101896][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.129522][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.143206][ T4178] team0: Port device team_slave_1 added [ 58.168992][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.176061][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.202517][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.238852][ T4173] device hsr_slave_0 entered promiscuous mode [ 58.245999][ T4173] device hsr_slave_1 entered promiscuous mode [ 58.253312][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.261111][ T4173] Cannot create hsr debugfs directory [ 58.299216][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.306392][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.332593][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.335014][ T4159] Bluetooth: hci0: command 0x0409 tx timeout [ 58.345936][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.356466][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.382568][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.403991][ T4159] Bluetooth: hci3: command 0x0409 tx timeout [ 58.415916][ T4159] Bluetooth: hci2: command 0x0409 tx timeout [ 58.422321][ T4159] Bluetooth: hci1: command 0x0409 tx timeout [ 58.470716][ T4172] device hsr_slave_0 entered promiscuous mode [ 58.478288][ T4172] device hsr_slave_1 entered promiscuous mode [ 58.483880][ T4159] Bluetooth: hci4: command 0x0409 tx timeout [ 58.490461][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.498210][ T4172] Cannot create hsr debugfs directory [ 58.605793][ T4178] device hsr_slave_0 entered promiscuous mode [ 58.612484][ T4178] device hsr_slave_1 entered promiscuous mode [ 58.619429][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.627294][ T4178] Cannot create hsr debugfs directory [ 58.788727][ T4180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.811006][ T4180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.820840][ T4180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.840236][ T4180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.887720][ T4168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.906347][ T4168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.939145][ T4168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.953156][ T4168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.970975][ T4173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.981875][ T4173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.001925][ T4173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.012898][ T4173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.062702][ T4172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.073193][ T4172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.082930][ T4172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.112597][ T4172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.182981][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.195677][ T4178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.221291][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.233491][ T4178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.244676][ T4178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.255753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.265644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.273418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.285100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.294361][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.301688][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.310929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.329082][ T4178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.360398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.369364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.378341][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.385456][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.406464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.436227][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.462900][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.480976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.490755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.501016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.511190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.520148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.528885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.553316][ T4180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.565489][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.586002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.595355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.606145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.615175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.624390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.632241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.640430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.660526][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.674479][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.681889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.692966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.719488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.728898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.738894][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.746035][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.755802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.764749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.773196][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.780390][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.799442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.809306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.818969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.828079][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.835220][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.866384][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.873908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.881935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.891749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.900760][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.907940][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.917057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.953525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.961239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.969648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.978620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.000190][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.015592][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.035424][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.045815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.055165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.062892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.070898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.081158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.089985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.099195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.108157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.116261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.125060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.135071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.143992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.151924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.173788][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.194677][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.203565][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.215094][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.224817][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.233250][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.240603][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.248547][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.257450][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.266130][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.274924][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.283533][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.290655][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.299203][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.308415][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.318233][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.325396][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.333257][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.341906][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.364961][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.375776][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.389925][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.394882][ T4213] Bluetooth: hci0: command 0x041b tx timeout [ 60.399914][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.413106][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.422913][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.431577][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.440469][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.450205][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.480363][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.492096][ T4213] Bluetooth: hci1: command 0x041b tx timeout [ 60.499727][ T4213] Bluetooth: hci2: command 0x041b tx timeout [ 60.511404][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 60.517575][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.529226][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.539336][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.552968][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.561323][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 60.566025][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.574616][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.583235][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.592266][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.601079][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.610106][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.618843][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.632971][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.642198][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.657369][ T4180] device veth0_vlan entered promiscuous mode [ 60.695486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.705689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.725271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.736602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.745678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.755460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.765140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.774857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.784185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.792671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.801592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.815861][ T4180] device veth1_vlan entered promiscuous mode [ 60.830876][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.844509][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.870232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.895986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.907181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.921687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.931462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.940717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.962823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.973444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.009297][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.021814][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.039327][ T4180] device veth0_macvtap entered promiscuous mode [ 61.053200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.062459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.071766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.080498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.088993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.098272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.106929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.116551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.134054][ T4180] device veth1_macvtap entered promiscuous mode [ 61.146539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.155652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.169454][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.184696][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.210689][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.223179][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.236664][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.263829][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.272718][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.297513][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.310091][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.328071][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.338533][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.347888][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.358465][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.371142][ T4180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.380827][ T4180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.390277][ T4180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.400389][ T4180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.421379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.430668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.464616][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.475745][ T4168] device veth0_vlan entered promiscuous mode [ 61.495362][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.511863][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.522476][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.530551][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.538506][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.547672][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.557311][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.566041][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.582997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.591592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.613026][ T4172] device veth0_vlan entered promiscuous mode [ 61.628208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.637994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.650531][ T4168] device veth1_vlan entered promiscuous mode [ 61.665729][ T4172] device veth1_vlan entered promiscuous mode [ 61.695080][ T4173] device veth0_vlan entered promiscuous mode [ 61.723826][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.732102][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.749593][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.758266][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.767875][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.776585][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.791193][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.799214][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.827621][ T4172] device veth0_macvtap entered promiscuous mode [ 61.844434][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.853229][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.870714][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.883057][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.899544][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.927950][ T4172] device veth1_macvtap entered promiscuous mode [ 61.938462][ T4173] device veth1_vlan entered promiscuous mode [ 61.948712][ T4168] device veth0_macvtap entered promiscuous mode [ 61.967577][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.971751][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.976765][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.994967][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.003225][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.014030][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.038701][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.049661][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.062306][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.071838][ T4168] device veth1_macvtap entered promiscuous mode [ 62.089354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.098851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.121906][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.138208][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.148309][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.160509][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.172253][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.183494][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.194933][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.207743][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.224831][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.237032][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.247650][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.259893][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.271425][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.280046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.289094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.298549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.308865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.318602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.327904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.336842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.346908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.359205][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.368875][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.377901][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.388751][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.412239][ T4172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.423041][ T4172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.431826][ T4172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.440807][ T4172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.470758][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.473906][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 62.481550][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.494084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.502632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.511818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.520566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.530167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.538495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.546699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.561615][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 62.567891][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 62.574298][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 62.579502][ T4173] device veth0_macvtap entered promiscuous mode [ 62.596056][ T4173] device veth1_macvtap entered promiscuous mode [ 62.604144][ T4178] device veth0_vlan entered promiscuous mode [ 62.665374][ T4213] Bluetooth: hci4: command 0x040f tx timeout [ 62.705704][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.720954][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.733819][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.749694][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.761050][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.775380][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.796655][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.809277][ T4178] device veth1_vlan entered promiscuous mode [ 62.885697][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.910210][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.949601][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.960280][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.001050][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.012484][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.022819][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.033606][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.090955][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.168705][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.251493][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.305265][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.343147][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.401386][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.459815][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.519725][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.572889][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.728209][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.743906][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.753361][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.832300][ T4178] device veth0_macvtap entered promiscuous mode [ 63.846262][ T4178] device veth1_macvtap entered promiscuous mode [ 63.878230][ T4173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.933387][ T4173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.945105][ T4173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.954188][ T4173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.981574][ T491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.991757][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.005904][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.015254][ T491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.023277][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.031518][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.041765][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.053318][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.063402][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.074237][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.085776][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.097100][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.107273][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.117857][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.129064][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.157728][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.166964][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.177384][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.201160][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.218340][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.229281][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.240534][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.250899][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.262420][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.272825][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.284756][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.297569][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.319361][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.333089][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.334722][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.352292][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.369969][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.383205][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.395297][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.413635][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.429453][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.497462][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.509882][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.523294][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.554180][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 64.634749][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 64.641301][ T4253] Bluetooth: hci2: command 0x0419 tx timeout [ 64.657805][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 64.685892][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.716317][ T4211] Bluetooth: hci4: command 0x0419 tx timeout [ 64.827952][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.853258][ T4266] loop0: detected capacity change from 0 to 64 [ 64.863207][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.925146][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.982673][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.032935][ T4266] ======================================================= [ 65.032935][ T4266] WARNING: The mand mount option has been deprecated and [ 65.032935][ T4266] and is ignored by this kernel. Remove the mand [ 65.032935][ T4266] option from the mount to silence this warning. [ 65.032935][ T4266] ======================================================= [ 65.150836][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.233172][ T491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.296320][ T491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.330250][ T4266] gfs2: path_lookup on c::: returned error -2 [ 65.341818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.559196][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 65.626814][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.636647][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.729758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.833679][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.842763][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.851878][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 65.861085][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 65.870245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 65.879424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 65.888555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.007079][ T4303] No such timeout policy "syz1" [ 68.027555][ T26] audit: type=1326 audit(1746765365.794:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.4.16" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cd3ccf969 code=0x0 [ 68.214516][ T4304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.892248][ T4317] loop0: detected capacity change from 0 to 512 [ 69.276980][ T4333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 69.677396][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 69.966386][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.974959][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.128388][ T4352] input: syz0 as /devices/virtual/input/input5 [ 70.405982][ T13] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 70.424393][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.442662][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.606688][ T4326] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.618117][ T4326] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.630250][ T4326] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.662575][ T4326] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.750640][ T4324] bridge: RTM_NEWNEIGH with invalid ether address [ 70.779314][ T4326] syz.1.23 (4326) used greatest stack depth: 21192 bytes left [ 70.806380][ T13] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 70.846441][ T13] usb 4-1: config 7 has no interface number 0 [ 70.893811][ T13] usb 4-1: config 7 interface 252 has no altsetting 0 [ 72.195025][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.202144][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.294311][ T13] usb 4-1: string descriptor 0 read error: -22 [ 72.300661][ T13] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 72.359293][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.519842][ T13] usb 4-1: USB disconnect, device number 2 [ 74.963661][ C0] sched: RT throttling activated [ 76.002924][ T4444] loop1: detected capacity change from 0 to 2048 [ 76.192634][ T4160] loop1: p1 < > p4 [ 76.254102][ T4160] loop1: p4 size 8388608 extends beyond EOD, truncated [ 77.337903][ T4444] loop1: p1 < > p4 [ 77.348573][ T4444] loop1: p4 size 8388608 extends beyond EOD, truncated [ 77.433365][ T4461] tipc: Started in network mode [ 77.459882][ T4461] tipc: Node identity be308891ef73, cluster identity 4711 [ 77.483065][ T4461] tipc: Enabled bearer , priority 0 [ 77.542978][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 77.556531][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 77.572656][ T4461] device syzkaller0 entered promiscuous mode [ 77.573975][ T4211] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.605566][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 77.641534][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 77.644510][ T4461] tipc: Resetting bearer [ 77.661392][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 77.699229][ T4467] loop1: detected capacity change from 0 to 1024 [ 77.742298][ T4460] tipc: Resetting bearer [ 77.791647][ T4460] tipc: Disabling bearer [ 77.818232][ T4467] hfsplus: failed to load extents file [ 77.963929][ T4211] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 78.123120][ T4211] usb 1-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 79.040597][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.082391][ T4211] usb 1-1: config 0 descriptor?? [ 80.199945][ T4487] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.448381][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 81.208656][ T4211] usbhid 1-1:0.0: can't add hid device: -71 [ 81.215067][ T4211] usbhid: probe of 1-1:0.0 failed with error -71 [ 81.237882][ T4211] usb 1-1: USB disconnect, device number 2 [ 81.259932][ T4212] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 81.508471][ T1108] cfg80211: failed to load regulatory.db [ 82.012711][ T4212] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 82.128789][ T4212] usb 4-1: config 0 has no interface number 0 [ 82.186098][ T4503] loop1: detected capacity change from 0 to 8192 [ 82.374936][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.389898][ T4212] usb 4-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 82.413585][ T4212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.814933][ T4212] usb 4-1: Product: syz [ 82.819872][ T4212] usb 4-1: Manufacturer: syz [ 82.825049][ T4212] usb 4-1: SerialNumber: syz [ 82.832400][ T4212] usb 4-1: config 0 descriptor?? [ 82.834532][ T4503] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 82.876835][ T4212] hub 4-1:0.30: bad descriptor, ignoring hub [ 82.884024][ T4212] hub: probe of 4-1:0.30 failed with error -5 [ 82.891942][ T4212] keyspan 4-1:0.30: Keyspan - (without firmware) converter detected [ 83.074622][ T4503] REISERFS (device loop1): using ordered data mode [ 83.114258][ T4503] reiserfs: using flush barriers [ 83.144006][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 83.183474][ T4498] loop3: detected capacity change from 0 to 1024 [ 83.190228][ T4503] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.305588][ T4503] REISERFS (device loop1): checking transaction log (loop1) [ 83.408659][ T4503] REISERFS (device loop1): Using r5 hash to sort names [ 83.546182][ T4503] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 83.709692][ T1108] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 83.721866][ T1108] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 83.732089][ T1108] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.742228][ T1108] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.755641][ T1108] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.834255][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.947319][ T4518] device wg1 entered promiscuous mode [ 84.039853][ T26] audit: type=1800 audit(1746765381.845:3): pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.71" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 84.236094][ T1108] usb 1-1: GET_CAPABILITIES returned 0 [ 84.241913][ T1108] usbtmc 1-1:16.0: can't read capabilities [ 84.447549][ T4361] usb 4-1: USB disconnect, device number 3 [ 84.494741][ T4361] keyspan 4-1:0.30: device disconnected [ 84.495363][ T4212] usb 1-1: USB disconnect, device number 3 [ 84.763183][ T4528] loop4: detected capacity change from 0 to 16 [ 85.118322][ T4528] erofs: (device loop4): mounted with root inode @ nid 36. [ 86.610750][ T4538] loop2: detected capacity change from 0 to 1024 [ 86.912348][ T4538] EXT4-fs (loop2): Ignoring removed bh option [ 88.076394][ T4538] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce028, mo2=0000] [ 88.313474][ T4538] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.82: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.469155][ T4538] EXT4-fs (loop2): Remounting filesystem read-only [ 88.507429][ T4538] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 88.516675][ T4538] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.82: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.588382][ T4538] EXT4-fs (loop2): Remounting filesystem read-only [ 88.605774][ T4538] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 88.685239][ T4538] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.82: Failed to acquire dquot type 0 [ 88.690305][ T4558] loop3: detected capacity change from 0 to 1024 [ 88.769342][ T4538] EXT4-fs (loop2): Remounting filesystem read-only [ 88.789410][ T4538] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 88.872034][ T4538] EXT4-fs (loop2): Remounting filesystem read-only [ 88.933076][ T4538] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.82: mark_inode_dirty error [ 89.176637][ T4538] EXT4-fs (loop2): Remounting filesystem read-only [ 89.482241][ T4558] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.493114][ T4538] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 89.577844][ T4538] EXT4-fs (loop2): 1 orphan inode deleted [ 89.608921][ T4280] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.633538][ T4538] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,noblock_validity,debug,errors=remount-ro,. Quota mode: writeback. [ 90.454843][ T4280] EXT4-fs (loop2): Remounting filesystem read-only [ 90.467448][ T4280] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 91.350980][ T4557] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 91.367440][ T4557] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 91.380488][ T4557] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.380488][ T4557] [ 91.390209][ T4557] EXT4-fs (loop3): Total free blocks count 0 [ 91.396212][ T4557] EXT4-fs (loop3): Free/Dirty block details [ 91.402208][ T4557] EXT4-fs (loop3): free_blocks=68451041280 [ 91.408152][ T4557] EXT4-fs (loop3): dirty_blocks=32 [ 91.413279][ T4557] EXT4-fs (loop3): Block reservation details [ 91.420676][ T4557] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 91.523865][ T4280] EXT4-fs error (device loop2): ext4_release_dquot:6240: comm kworker/u4:7: Failed to release dquot type 0 [ 91.540391][ T4280] EXT4-fs (loop2): Remounting filesystem read-only [ 91.573951][ T4538] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.82: Invalid inode table block 1 in block_group 0 [ 91.601006][ T4538] EXT4-fs (loop2): Remounting filesystem read-only [ 91.634569][ T4538] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 91.703032][ T4538] EXT4-fs (loop2): Remounting filesystem read-only [ 91.766248][ T4579] netlink: 224 bytes leftover after parsing attributes in process `syz.4.91'. [ 91.785473][ T4579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 91.795564][ T4538] EXT4-fs error (device loop2): ext4_quota_off:6510: inode #3: comm syz.2.82: mark_inode_dirty error [ 91.997043][ T4538] EXT4-fs (loop2): Remounting filesystem read-only [ 95.830069][ T4610] loop1: detected capacity change from 0 to 512 [ 95.886760][ T4610] EXT4-fs (loop1): Ignoring removed oldalloc option [ 96.078868][ T4610] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.99: Parent and EA inode have the same ino 15 [ 96.165158][ T4610] EXT4-fs (loop1): Remounting filesystem read-only [ 96.178602][ T4610] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.180489][ T4615] loop4: detected capacity change from 0 to 512 [ 96.203940][ T4610] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.99: Parent and EA inode have the same ino 15 [ 96.667589][ T4610] EXT4-fs (loop1): Remounting filesystem read-only [ 96.694140][ T4615] EXT4-fs (loop4): Unrecognized mount option "euid<00000000000000000000" or missing value [ 96.729395][ T4621] netlink: 'syz.3.102': attribute type 11 has an invalid length. [ 96.811997][ T4610] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.99: inode #261888: comm syz.1.99: iget: illegal inode # [ 97.355673][ T4610] EXT4-fs (loop1): Remounting filesystem read-only [ 97.357616][ T4627] loop3: detected capacity change from 0 to 1024 [ 97.373251][ T4610] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.99: error while reading EA inode 261888 err=-117 [ 97.402073][ T4610] EXT4-fs (loop1): Remounting filesystem read-only [ 97.416820][ T4610] EXT4-fs (loop1): 1 orphan inode deleted [ 97.426850][ T4633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.105'. [ 97.437056][ T4610] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,max_dir_size_kb=0x0000000000000003,oldalloc,init_itable,. Quota mode: none. [ 98.775053][ T4211] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 99.319012][ T4211] usb 3-1: not running at top speed; connect to a high speed hub [ 99.459318][ T4211] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 99.547220][ T4211] usb 3-1: config 1 has no interface number 1 [ 99.840141][ T4211] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.241835][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.250607][ T4211] usb 3-1: Product: syz [ 100.254813][ T4211] usb 3-1: Manufacturer: syz [ 100.259852][ T4211] usb 3-1: SerialNumber: syz [ 100.308935][ T4661] xt_policy: neither incoming nor outgoing policy selected [ 100.501272][ T4665] tipc: Enabled bearer , priority 0 [ 100.598747][ T4662] tipc: Resetting bearer [ 100.701892][ T4662] tipc: Disabling bearer [ 100.879608][ T4211] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.183729][ T4211] usb 3-1: USB disconnect, device number 2 [ 103.470283][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'. [ 104.290283][ T4693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.122'. [ 104.682760][ T4366] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.969650][ T4366] usb 2-1: Using ep0 maxpacket: 8 [ 105.369621][ T4366] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 105.385387][ T4366] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.397189][ T4366] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.415969][ T4521] udevd[4521]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.443031][ T4366] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.460196][ T4366] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.467197][ T4702] loop4: detected capacity change from 0 to 512 [ 105.478360][ T4366] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.499261][ T4366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.570702][ T4702] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 105.643889][ T4702] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 105.684973][ T4702] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.746310][ T4702] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.125: corrupted inode contents [ 105.777976][ T4702] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.125: mark_inode_dirty error [ 105.795579][ T4366] usb 2-1: GET_CAPABILITIES returned 0 [ 105.801618][ T4366] usbtmc 2-1:16.0: can't read capabilities [ 105.852816][ T4702] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.125: corrupted inode contents [ 105.958150][ T4705] loop2: detected capacity change from 0 to 40427 [ 105.966740][ T4715] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.125: corrupted inode contents [ 105.998399][ T4705] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 106.023031][ T4715] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.125: mark_inode_dirty error [ 106.036767][ T4705] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 106.047863][ T4715] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.125: corrupted inode contents [ 106.047873][ T4366] usb 2-1: USB disconnect, device number 2 [ 106.078842][ T4715] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.125: mark_inode_dirty error [ 106.094861][ T4705] F2FS-fs (loop2): invalid crc value [ 106.108484][ T4715] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.125: corrupted inode contents [ 106.127313][ T4715] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.125: mark_inode_dirty error [ 106.170973][ T4705] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 106.193546][ T4702] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.125: corrupted inode contents [ 106.344375][ T4726] loop3: detected capacity change from 0 to 64 [ 106.399256][ T4705] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 106.411813][ T4705] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.890601][ T4705] attempt to access beyond end of device [ 107.890601][ T4705] loop2: rw=2049, want=53256, limit=40427 [ 107.922829][ T4736] loop1: detected capacity change from 0 to 2048 [ 107.943604][ T4738] syz.4.134 uses obsolete (PF_INET,SOCK_PACKET) [ 108.035300][ T4172] attempt to access beyond end of device [ 108.035300][ T4172] loop2: rw=2049, want=45112, limit=40427 [ 108.141964][ T4741] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.682373][ T4752] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 109.381970][ T4740] netlink: 'syz.3.135': attribute type 4 has an invalid length. [ 109.495481][ T4740] netlink: 'syz.3.135': attribute type 4 has an invalid length. [ 110.576097][ T26] audit: type=1800 audit(1746765408.461:4): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.133" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 110.681984][ T4764] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 110.718793][ T4736] NILFS error (device loop1): nilfs_sufile_mark_dirty: active segment 3 is erroneous [ 110.742004][ T4770] device vlan2 entered promiscuous mode [ 110.751893][ T4736] Remounting filesystem read-only [ 110.871200][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 110.931679][ T4180] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 111.800523][ T4790] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 113.655936][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 113.781369][ T4806] Zero length message leads to an empty skb [ 114.027867][ T4812] netlink: 76 bytes leftover after parsing attributes in process `syz.2.155'. [ 114.228108][ T4800] loop0: detected capacity change from 0 to 32768 [ 114.336147][ T4816] syz.2.156[4816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.336254][ T4816] syz.2.156[4816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.439944][ T4800] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 114.818684][ T26] audit: type=1800 audit(1746765412.701:5): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.151" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 115.035826][ T4800] (syz.0.151,4800,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 115.038377][ T4825] loop1: detected capacity change from 0 to 512 [ 115.143010][ T4825] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.230797][ T4825] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.299309][ T4825] EXT4-fs (loop1): 1 truncate cleaned up [ 115.321234][ T4825] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,resuid=0x000000000000ee01,min_batch_time=0x000000000004c3b8,inode_readahead_blks=0x0000000002000000,data=journal,i_version,,errors=continue. Quota mode: none. [ 115.563099][ T4168] ocfs2: Unmounting device (7,0) on (node local) [ 116.956928][ T4180] syz-executor (4180) used greatest stack depth: 20480 bytes left [ 118.416384][ T4866] capability: warning: `syz.3.169' uses deprecated v2 capabilities in a way that may be insecure [ 118.817789][ T4852] chnl_net:caif_netlink_parms(): no params data found [ 118.834421][ T26] audit: type=1326 audit(1746765416.720:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 118.893539][ T26] audit: type=1326 audit(1746765416.750:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 119.070267][ T26] audit: type=1326 audit(1746765416.750:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38f28112d0 code=0x7ffc0000 [ 119.096991][ T26] audit: type=1326 audit(1746765416.750:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38f281256b code=0x7ffc0000 [ 119.120227][ T26] audit: type=1326 audit(1746765416.750:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38f281256b code=0x7ffc0000 [ 119.142863][ T26] audit: type=1326 audit(1746765416.750:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38f281256b code=0x7ffc0000 [ 119.167489][ T1111] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.203586][ T26] audit: type=1326 audit(1746765416.750:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38f281256b code=0x7ffc0000 [ 119.228849][ T26] audit: type=1326 audit(1746765417.110:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38f281256b code=0x7ffc0000 [ 119.253513][ T26] audit: type=1326 audit(1746765417.140:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38f281256b code=0x7ffc0000 [ 119.385456][ T4902] loop4: detected capacity change from 0 to 128 [ 119.412089][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 119.452344][ T1111] usb 1-1: Using ep0 maxpacket: 32 [ 119.471689][ T26] audit: type=1326 audit(1746765417.360:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38f281256b code=0x7ffc0000 [ 119.583022][ T1111] usb 1-1: config 0 has an invalid interface number: 111 but max is 1 [ 119.599538][ T1111] usb 1-1: config 0 has no interface number 1 [ 119.609972][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.675269][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.690417][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.711387][ T4852] device bridge_slave_0 entered promiscuous mode [ 119.826032][ T1111] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 119.868098][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.876581][ T1111] usb 1-1: Product: syz [ 119.881069][ T1111] usb 1-1: Manufacturer: syz [ 119.886097][ T1111] usb 1-1: SerialNumber: syz [ 119.896219][ T1111] usb 1-1: config 0 descriptor?? [ 119.954740][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.965696][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.041454][ T4360] Bluetooth: hci4: command 0x0409 tx timeout [ 120.067238][ T4852] device bridge_slave_1 entered promiscuous mode [ 120.134217][ T4280] device hsr_slave_0 left promiscuous mode [ 120.221611][ T1111] snd-usb-6fire 1-1:0.111: unable to receive device firmware state. [ 120.238856][ T4280] device hsr_slave_1 left promiscuous mode [ 120.251408][ T1111] snd-usb-6fire: probe of 1-1:0.111 failed with error -71 [ 120.279824][ T1111] usb 1-1: USB disconnect, device number 4 [ 120.330942][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.353028][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.383551][ T4280] device bridge_slave_1 left promiscuous mode [ 120.402545][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.439171][ T4280] device bridge_slave_0 left promiscuous mode [ 120.455525][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.827428][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 120.867825][ T4924] usb usb1: usbfs: process 4924 (syz.0.182) did not claim interface 6 before use [ 120.870911][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 120.888988][ T4924] loop0: detected capacity change from 0 to 256 [ 120.915001][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.931786][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.975200][ T4925] process 'syz.0.182' launched '/dev/fd/3' with NULL argv: empty string added [ 121.019737][ T4280] bond0 (unregistering): Released all slaves [ 121.154105][ T4852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.201562][ T4852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.298694][ T4852] team0: Port device team_slave_0 added [ 121.312371][ T4852] team0: Port device team_slave_1 added [ 121.384319][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.384337][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.384367][ T4852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.386310][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.386327][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.386353][ T4852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.445494][ T4929] loop0: detected capacity change from 0 to 512 [ 121.514038][ T4929] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.533592][ T4852] device hsr_slave_0 entered promiscuous mode [ 121.534457][ T4852] device hsr_slave_1 entered promiscuous mode [ 121.593028][ T4929] EXT4-fs (loop0): 1 truncate cleaned up [ 121.731575][ T4929] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.085563][ T4929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.185'. [ 122.096403][ T4929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.185'. [ 122.105689][ T4852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.132794][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 122.144372][ T4852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.190173][ T4852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.298199][ T4852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.776735][ T4852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.817218][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.850481][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.883363][ T4852] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.908060][ T4942] chnl_net:caif_netlink_parms(): no params data found [ 122.942375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.959852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.997806][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.005048][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.043785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.092020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.108193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.165113][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.172346][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.309147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.378181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.415518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.472142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.512935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.574461][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.598372][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.700935][ T4942] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.717257][ T4942] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.432266][ T4942] device bridge_slave_0 entered promiscuous mode [ 125.443928][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 125.830913][ T4852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.046672][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 126.096821][ T4852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.306137][ T5002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.194'. [ 126.322266][ T5002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.194'. [ 127.185343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.239681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.312680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.368002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.441748][ T4942] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.449516][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.457803][ T4942] device bridge_slave_1 entered promiscuous mode [ 127.493343][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 127.598025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.686169][ T4942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.703456][ T5014] device batadv_slave_1 entered promiscuous mode [ 127.714156][ T5014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.776845][ T5014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.809393][ T5014] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 127.899097][ T4942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.929042][ T4942] team0: Port device team_slave_0 added [ 127.937917][ T4942] team0: Port device team_slave_1 added [ 128.384381][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 128.573890][ T4942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.598255][ T4942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.692787][ T4942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.761154][ T4942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.786318][ T4942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.819335][ T4942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.870257][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.887560][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.968424][ T4852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.984114][ T1111] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.016830][ T4942] device hsr_slave_0 entered promiscuous mode [ 129.043695][ T4942] device hsr_slave_1 entered promiscuous mode [ 129.075345][ T4942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.098358][ T4942] Cannot create hsr debugfs directory [ 129.313873][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 130.076926][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 130.130716][ T4280] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.182934][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.230346][ T1111] usb 1-1: config 0 has no interfaces? [ 130.259843][ T5056] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 130.267035][ T5056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.316683][ T5056] vhci_hcd vhci_hcd.0: Device attached [ 130.336821][ T5063] loop3: detected capacity change from 0 to 256 [ 130.369934][ T4280] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.441465][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.454139][ T1111] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 130.457766][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.495857][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.514275][ T4280] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.514484][ T1111] usb 1-1: Product: syz [ 130.542136][ T5063] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 130.543475][ T1111] usb 1-1: Manufacturer: syz [ 130.580491][ T4852] device veth0_vlan entered promiscuous mode [ 130.586643][ T4361] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 130.608491][ T4852] device veth1_vlan entered promiscuous mode [ 130.654478][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.692122][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.721509][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.724540][ T1111] usb 1-1: SerialNumber: syz [ 130.743735][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.754322][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.764033][ T1111] usb 1-1: config 0 descriptor?? [ 130.769847][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.779865][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.790668][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.815664][ T4852] device veth0_macvtap entered promiscuous mode [ 130.907379][ T4852] device veth1_macvtap entered promiscuous mode [ 131.293588][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.351683][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.561368][ T4280] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.590245][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.609276][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.619952][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.637602][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.649514][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.671481][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.689354][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.700710][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.719910][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.739470][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.751429][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.773675][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.784335][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.794314][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.805010][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.816472][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.828845][ T4852] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.832821][ T5057] vhci_hcd: connection reset by peer [ 131.837653][ T4852] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.861594][ T4852] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.872205][ T4286] vhci_hcd: stop threads [ 131.875233][ T4852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.896739][ T4286] vhci_hcd: release socket [ 132.204311][ T4367] Bluetooth: hci3: command 0x0419 tx timeout [ 132.221091][ T4286] vhci_hcd: disconnect device [ 132.726904][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.735972][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.746083][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753157][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.772613][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.782476][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.957891][ T4366] usb 1-1: USB disconnect, device number 5 [ 133.029974][ T491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.049644][ T491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.183672][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.521380][ T4280] tipc: Left network mode [ 134.552640][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.591568][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.707748][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.726784][ T4942] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 134.793187][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 134.884529][ T5110] HTB: quantum of class 80020010 is big. Consider r2q change. [ 134.906794][ T4942] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 135.041705][ T4942] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 135.079662][ T4942] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 135.372802][ T4942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.736618][ T4361] vhci_hcd: vhci_device speed not set [ 135.783282][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 136.173532][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.184843][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.235641][ T4942] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.281285][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.307092][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.339133][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.342133][ T5130] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 136.346299][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.364625][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.402852][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.457297][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.488570][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.495767][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.551221][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.578167][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.592627][ T5148] loop3: detected capacity change from 0 to 128 [ 136.628702][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.628723][ T1108] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 136.645308][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.657936][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.687838][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.700013][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.710986][ T1108] usb 6-1: Product: syz [ 136.752699][ T1108] usb 6-1: Manufacturer: syz [ 136.753404][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.774383][ T1108] usb 6-1: SerialNumber: syz [ 136.794380][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.821538][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.842743][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.852312][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.909325][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.096615][ T1108] usb 6-1: config 0 descriptor?? [ 137.405847][ T13] usb 6-1: USB disconnect, device number 2 [ 137.891437][ T491] attempt to access beyond end of device [ 137.891437][ T491] loop3: rw=1048577, want=1041, limit=128 [ 138.477643][ T4280] device hsr_slave_0 left promiscuous mode [ 138.524340][ T4280] device hsr_slave_1 left promiscuous mode [ 138.534804][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.552686][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.573901][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.581622][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.636833][ T4280] device bridge_slave_1 left promiscuous mode [ 138.656290][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.671470][ T5171] loop0: detected capacity change from 0 to 8192 [ 138.681856][ T4280] device bridge_slave_0 left promiscuous mode [ 138.689113][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.706022][ T4280] device veth1_macvtap left promiscuous mode [ 138.712818][ T4280] device veth0_macvtap left promiscuous mode [ 138.723163][ T4280] device veth1_vlan left promiscuous mode [ 138.729559][ T4280] device veth0_vlan left promiscuous mode [ 138.792397][ T5171] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 138.831690][ T5171] REISERFS (device loop0): using ordered data mode [ 138.857839][ T5171] reiserfs: using flush barriers [ 138.872416][ T5171] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.900609][ T5171] REISERFS (device loop0): checking transaction log (loop0) [ 138.909825][ T5171] REISERFS (device loop0): Using r5 hash to sort names [ 138.924901][ T5171] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 138.954162][ T5171] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 139.374686][ T5191] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 139.407747][ T5191] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 139.463582][ T5191] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 139.493918][ T5191] overlayfs: upper fs needs to support d_type. [ 139.500734][ T5191] overlayfs: upper fs does not support tmpfile. [ 139.509319][ T5191] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 139.533000][ T5191] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.549292][ T5191] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 139.567698][ T5191] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 139.585422][ T5191] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 139.613208][ T5191] overlayfs: failed to set xattr on upper [ 139.619083][ T5191] overlayfs: ...falling back to index=off,metacopy=off. [ 139.957723][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 139.990465][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 140.006679][ T4168] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 140.024402][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.052778][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.143292][ T4168] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 140.182480][ T4168] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 140.205373][ T4280] bond0 (unregistering): Released all slaves [ 140.271670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.279537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.293506][ T4942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.324462][ T5179] tipc: Started in network mode [ 140.329380][ T5179] tipc: Node identity 7f000001, cluster identity 4711 [ 140.355091][ T5179] tipc: Enabled bearer , priority 10 [ 140.390911][ T5185] tipc: Enabled bearer , priority 0 [ 140.672546][ T5215] loop2: detected capacity change from 0 to 1024 [ 141.109599][ T5220] ipt_REJECT: TCP_RESET invalid for non-tcp [ 143.468589][ T4361] tipc: Node number set to 2130706433 [ 143.558790][ T5215] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 143.558790][ T5215] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 143.558790][ T5215] [ 143.586345][ T5215] EXT4-fs: failed to create workqueue [ 143.912721][ T5215] EXT4-fs (loop2): mount failed [ 144.236706][ T5226] loop0: detected capacity change from 0 to 512 [ 144.394910][ T5226] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 145.134457][ T5226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 145.175190][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.218587][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.290542][ T5226] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.236: corrupted in-inode xattr [ 145.330460][ T5226] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.236: couldn't read orphan inode 15 (err -117) [ 145.352256][ T5252] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 145.360110][ T5226] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 145.417717][ T5252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.332620][ T5255] bond1: (slave veth3): Enslaving as an active interface with a down link [ 146.489324][ T4942] device veth0_vlan entered promiscuous mode [ 146.507130][ T4942] device veth1_vlan entered promiscuous mode [ 146.992835][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.585731][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.402455][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.726161][ T5252] device veth1 entered promiscuous mode [ 148.751813][ T5252] device veth1 left promiscuous mode [ 148.806031][ T5252] bond1: (slave vlan2): making interface the new active one [ 148.852487][ T5252] device veth1 entered promiscuous mode [ 148.869519][ T5252] device vlan2 entered promiscuous mode [ 148.889097][ T5252] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 149.004257][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.067616][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.103568][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 149.159864][ T5287] loop2: detected capacity change from 0 to 512 [ 149.344598][ T5287] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.806925][ T5287] EXT4-fs (loop2): 1 truncate cleaned up [ 149.822171][ T4942] device veth0_macvtap entered promiscuous mode [ 149.977605][ T5287] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 150.222213][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.250053][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.352056][ T4942] device veth1_macvtap entered promiscuous mode [ 150.376342][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.456202][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.500840][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.558437][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.581241][ T5322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.252'. [ 150.584800][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.637003][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.685615][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.720593][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.762118][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.809142][ T4942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.848860][ T5323] device syzkaller0 entered promiscuous mode [ 150.887727][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.910156][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.952477][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.983901][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.025003][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.054975][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.064836][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.134994][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.168920][ T4942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.192588][ T4942] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.255074][ T4942] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.264007][ T4942] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.441515][ T4942] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.513341][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.536144][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.252851][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.283569][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.389132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.537720][ T4563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.559957][ T4563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.713759][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.736717][ T5389] loop2: detected capacity change from 0 to 128 [ 158.708453][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 158.708465][ T26] audit: type=1326 audit(1746765456.585:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 158.896148][ T26] audit: type=1326 audit(1746765456.645:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 159.124605][ T26] audit: type=1326 audit(1746765456.655:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 159.279322][ T26] audit: type=1326 audit(1746765456.655:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 159.413729][ T26] audit: type=1326 audit(1746765456.655:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 159.491712][ T5426] loop2: detected capacity change from 0 to 256 [ 159.545996][ T26] audit: type=1326 audit(1746765456.655:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 159.650929][ T26] audit: type=1326 audit(1746765456.655:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 159.776017][ T26] audit: type=1326 audit(1746765456.655:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 159.831634][ T5431] netlink: 64 bytes leftover after parsing attributes in process `syz.6.280'. [ 159.859938][ T5426] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 159.876460][ T26] audit: type=1326 audit(1746765456.655:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 159.921082][ T5432] netlink: 'syz.6.280': attribute type 11 has an invalid length. [ 160.022633][ T5432] netlink: 428 bytes leftover after parsing attributes in process `syz.6.280'. [ 160.043730][ T26] audit: type=1326 audit(1746765456.655:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 163.098245][ T5458] netlink: 564 bytes leftover after parsing attributes in process `syz.6.284'. [ 165.305316][ T5479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.289'. [ 165.539785][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 165.763404][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.292'. [ 166.918374][ T4280] device vlan2 left promiscuous mode [ 167.140380][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 167.140396][ T26] audit: type=1326 audit(1746765465.014:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6633d969 code=0x7ffc0000 [ 167.262239][ T26] audit: type=1326 audit(1746765465.014:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6633d969 code=0x7ffc0000 [ 167.353831][ T26] audit: type=1326 audit(1746765465.014:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6633d969 code=0x7ffc0000 [ 168.944619][ T26] audit: type=1326 audit(1746765465.014:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6633d969 code=0x7ffc0000 [ 169.185011][ T26] audit: type=1326 audit(1746765465.014:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6633d969 code=0x7ffc0000 [ 169.775784][ T26] audit: type=1326 audit(1746765465.024:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca6633d969 code=0x7ffc0000 [ 169.806305][ T26] audit: type=1326 audit(1746765465.024:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6633d969 code=0x7ffc0000 [ 169.834848][ T26] audit: type=1326 audit(1746765465.024:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6633d969 code=0x7ffc0000 [ 169.920447][ T5550] IPv4: Oversized IP packet from 127.202.26.0 [ 169.977772][ T26] audit: type=1326 audit(1746765465.024:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fca6633d969 code=0x7ffc0000 [ 170.159551][ T26] audit: type=1326 audit(1746765465.024:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6633d969 code=0x7ffc0000 [ 172.498794][ T5577] Cannot find add_set index 0 as target [ 173.381871][ T5580] netlink: 16 bytes leftover after parsing attributes in process `syz.6.314'. [ 173.473739][ T5585] device sit1 entered promiscuous mode [ 173.923746][ T5587] device netdevsim0 entered promiscuous mode [ 173.940703][ T1108] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 174.059849][ T5587] device netdevsim0 left promiscuous mode [ 174.156593][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.164702][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.532704][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.574423][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.601548][ T1108] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.911325][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.458966][ T1108] usb 7-1: config 0 descriptor?? [ 175.696151][ T5638] loop3: detected capacity change from 0 to 64 [ 176.344386][ T1108] usb 7-1: string descriptor 0 read error: -22 [ 176.723501][ T1108] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 176.780350][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 176.780364][ T26] audit: type=1800 audit(1746765474.653:110): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.324" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 177.087442][ T13] usb 7-1: USB disconnect, device number 2 [ 177.766331][ T5653] netlink: 'syz.5.329': attribute type 1 has an invalid length. [ 177.888680][ T5653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.967229][ T5656] bond1: (slave veth3): Enslaving as an active interface with a down link [ 178.046740][ T5653] device veth1 entered promiscuous mode [ 178.066513][ T5653] device veth1 left promiscuous mode [ 178.079470][ T5653] bond1: (slave vlan2): making interface the new active one [ 178.089024][ T5653] device veth1 entered promiscuous mode [ 178.106482][ T5653] device vlan2 entered promiscuous mode [ 178.118790][ T5653] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 178.181973][ T5655] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 178.372886][ T5676] IPv4: Oversized IP packet from 127.202.26.0 [ 179.476266][ T26] audit: type=1326 audit(1746765477.343:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 179.507612][ T26] audit: type=1326 audit(1746765477.373:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 179.529956][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.558170][ T26] audit: type=1326 audit(1746765477.373:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 179.580487][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.767836][ T5695] hugetlbfs: syz.3.341 (5695): Using mlock ulimits for SHM_HUGETLB is deprecated [ 179.971362][ T26] audit: type=1326 audit(1746765477.373:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 180.311514][ T5697] netlink: 'syz.5.342': attribute type 1 has an invalid length. [ 180.523715][ T26] audit: type=1326 audit(1746765477.373:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 180.803938][ T26] audit: type=1326 audit(1746765477.373:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 180.826626][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.965699][ T5697] device bond2 entered promiscuous mode [ 181.093596][ T5699] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 181.109476][ T26] audit: type=1326 audit(1746765477.373:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 181.138007][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 181.158598][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 181.164647][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 181.183962][ T5699] bond2: (slave batadv1): making interface the new active one [ 181.215371][ T26] audit: type=1326 audit(1746765477.373:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 181.249971][ T5699] device batadv1 entered promiscuous mode [ 181.258341][ T5699] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 181.305387][ T26] audit: type=1326 audit(1746765477.373:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f2812969 code=0x7ffc0000 [ 181.327615][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.611104][ T5736] netlink: 564 bytes leftover after parsing attributes in process `syz.3.350'. [ 182.723597][ T5741] loop6: detected capacity change from 0 to 512 [ 182.784596][ T4211] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 183.636527][ T5741] EXT4-fs (loop6): Ignoring removed nobh option [ 183.705719][ T4211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.790611][ T4211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.836900][ T5741] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none. [ 183.889432][ T4211] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.965982][ T4211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.149853][ T4211] usb 6-1: config 0 descriptor?? [ 185.065583][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 185.065600][ T26] audit: type=1800 audit(1746765482.932:166): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.353" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 185.319992][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.357'. [ 185.328860][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.357'. [ 185.353997][ T5773] loop3: detected capacity change from 0 to 512 [ 185.567149][ T26] audit: type=1326 audit(1746765483.432:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0870f969 code=0x7ffc0000 [ 185.608522][ T4211] usb 6-1: string descriptor 0 read error: -22 [ 185.715971][ T26] audit: type=1326 audit(1746765483.432:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0870f969 code=0x7ffc0000 [ 185.759610][ T5773] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.358: bg 0: block 248: padding at end of block bitmap is not set [ 185.839476][ T5773] Quota error (device loop3): write_blk: dquota write failed [ 185.854329][ T26] audit: type=1326 audit(1746765483.432:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fea0870f969 code=0x7ffc0000 [ 185.876604][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.900078][ T5773] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 185.941799][ T4211] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 185.956465][ T26] audit: type=1326 audit(1746765483.432:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0870f969 code=0x7ffc0000 [ 185.964763][ T5773] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.358: Failed to acquire dquot type 1 [ 185.978806][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.027831][ T26] audit: type=1326 audit(1746765483.432:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0870f969 code=0x7ffc0000 [ 186.129689][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.366'. [ 186.133178][ T5773] EXT4-fs (loop3): 1 truncate cleaned up [ 186.176844][ T4367] usb 6-1: USB disconnect, device number 3 [ 186.201459][ T5773] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.217020][ T26] audit: type=1326 audit(1746765483.432:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fea0870f969 code=0x7ffc0000 [ 186.249693][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.286207][ T5773] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.286808][ T26] audit: type=1326 audit(1746765483.432:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0870f969 code=0x7ffc0000 [ 186.343932][ T5798] device bridge_slave_1 left promiscuous mode [ 186.352273][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.472540][ T5802] loop2: detected capacity change from 0 to 128 [ 186.485495][ T5807] loop0: detected capacity change from 0 to 512 [ 186.504910][ T5773] tipc: Enabled bearer , priority 10 [ 186.530639][ T5802] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.569517][ T5807] EXT4-fs (loop0): Ignoring removed nobh option [ 186.607807][ T5802] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.686358][ T5807] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none. [ 186.845797][ T491] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.879693][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6240: comm kworker/u4:0: Failed to release dquot type 1 [ 187.882944][ T5824] trusted_key: encrypted_key: insufficient parameters specified [ 188.091322][ T5823] input: syz1 as /devices/virtual/input/input7 [ 189.451948][ T5836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.584969][ T5824] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 192.800044][ T4367] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 193.240366][ T4367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.056764][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.063149][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.503706][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.510077][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.782117][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 296.789136][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5843/1:b..l [ 296.797509][ C1] (detected by 1, t=10502 jiffies, g=15245, q=901) [ 296.804085][ C1] task:syz.5.375 state:R running task stack:25792 pid: 5843 ppid: 4852 flags:0x00004002 [ 296.815976][ C1] Call Trace: [ 296.819256][ C1] [ 296.822274][ C1] __schedule+0x11b8/0x43b0 [ 296.826801][ C1] ? release_firmware_map_entry+0x190/0x190 [ 296.832692][ C1] ? lock_chain_count+0x20/0x20 [ 296.837689][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 296.842988][ C1] preempt_schedule_irq+0xb1/0x150 [ 296.848190][ C1] ? __cond_resched+0xb0/0xb0 [ 296.852862][ C1] ? rcu_is_watching+0x11/0xa0 [ 296.857635][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 296.863451][ C1] irqentry_exit+0x63/0x70 [ 296.867858][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.873845][ C1] RIP: 0010:find_lock_entries+0x586/0xd50 [ 296.879558][ C1] Code: 24 10 42 80 3c 38 00 4c 8b 3c 24 74 08 4c 89 ff e8 5f 1a 1f 00 4d 8b 3f 4c 89 fe 48 83 e6 01 31 ff e8 de aa d9 ff 49 83 e7 01 <4c> 8d a4 24 80 00 00 00 0f 85 66 07 00 00 48 b8 00 00 00 00 00 fc [ 296.899169][ C1] RSP: 0018:ffffc90002e4f280 EFLAGS: 00000246 [ 296.905235][ C1] RAX: ffffffff819e1712 RBX: 00000000000011e5 RCX: ffff888022a0bb80 [ 296.913194][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.921155][ C1] RBP: ffffc90002e4f3b0 R08: dffffc0000000000 R09: fffff940003d4639 [ 296.929116][ C1] R10: fffff940003d4639 R11: 1ffffd40003d4638 R12: 00000000000011df [ 296.937079][ C1] R13: 1ffffd40003d4638 R14: ffffea0001ea31c0 R15: 0000000000000000 [ 296.945072][ C1] ? find_lock_entries+0x582/0xd50 [ 296.950194][ C1] ? find_get_entry+0x270/0x270 [ 296.955034][ C1] ? page_mapping+0x30e/0x440 [ 296.959703][ C1] ? __cancel_dirty_page+0x1e3/0x5e0 [ 296.965118][ C1] truncate_inode_pages_range+0x17c/0xef0 [ 296.971023][ C1] ? invalidate_inode_page+0x360/0x360 [ 296.976485][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 296.982479][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 296.987672][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 296.992899][ C1] evict+0x498/0x870 [ 296.996804][ C1] ? proc_nr_inodes+0x320/0x320 [ 297.001659][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 297.006872][ C1] ? _raw_spin_unlock+0x24/0x40 [ 297.011734][ C1] __dentry_kill+0x431/0x650 [ 297.016326][ C1] shrink_dentry_list+0x388/0x680 [ 297.021357][ C1] shrink_dcache_parent+0xa8/0x3a0 [ 297.026507][ C1] ? write_sequnlock+0x30/0x30 [ 297.031290][ C1] ? preempt_count_add+0x8d/0x190 [ 297.036325][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 297.041356][ C1] ? __init_rwsem+0x160/0x160 [ 297.046062][ C1] do_one_tree+0x23/0xe0 [ 297.050466][ C1] shrink_dcache_for_umount+0x65/0x110 [ 297.055936][ C1] generic_shutdown_super+0x63/0x300 [ 297.061226][ C1] kill_litter_super+0x72/0xa0 [ 297.065989][ C1] deactivate_locked_super+0x93/0xf0 [ 297.071276][ C1] cleanup_mnt+0x418/0x4d0 [ 297.075688][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 297.080926][ C1] task_work_run+0x125/0x1a0 [ 297.085513][ C1] do_exit+0x616/0x20a0 [ 297.089669][ C1] ? put_task_struct+0x80/0x80 [ 297.094449][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 297.100423][ C1] ? lock_chain_count+0x20/0x20 [ 297.105294][ C1] ? cgroup_freezing+0x264/0x310 [ 297.110225][ C1] do_group_exit+0x12e/0x300 [ 297.114806][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 297.120021][ C1] get_signal+0x6ca/0x12c0 [ 297.124452][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 297.130167][ C1] ? fput_many+0x15c/0x1a0 [ 297.134600][ C1] ? do_sendfile+0x31a/0xec0 [ 297.139196][ C1] ? get_sigframe_size+0x10/0x10 [ 297.144527][ C1] ? do_pwritev+0x340/0x340 [ 297.149257][ C1] ? __se_sys_sendfile64+0x13b/0x190 [ 297.154560][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 297.160031][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 297.165417][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 297.170964][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 297.176443][ C1] do_syscall_64+0x58/0xa0 [ 297.180847][ C1] ? clear_bhb_loop+0x15/0x70 [ 297.185539][ C1] ? clear_bhb_loop+0x15/0x70 [ 297.190224][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.196113][ C1] RIP: 0033:0x7f56d7516969 [ 297.200513][ C1] RSP: 002b:00007f56d535d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 297.208918][ C1] RAX: 0000000001af0000 RBX: 00007f56d773e080 RCX: 00007f56d7516969 [ 297.216881][ C1] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 297.224870][ C1] RBP: 00007f56d7598ab1 R08: 0000000000000000 R09: 0000000000000000 [ 297.232921][ C1] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 297.240881][ C1] R13: 0000000000000000 R14: 00007f56d773e080 R15: 00007ffe9483a808 [ 297.248856][ C1] [ 297.251866][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10520 jiffies! g15245 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 297.264189][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=9414 [ 297.272177][ C1] rcu: rcu_preempt kthread starved for 10521 jiffies! g15245 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 297.283570][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 297.293550][ C1] rcu: RCU grace-period kthread stack dump: [ 297.299439][ C1] task:rcu_preempt state:I stack:28032 pid: 15 ppid: 2 flags:0x00004000 [ 297.308761][ C1] Call Trace: [ 297.312041][ C1] [ 297.314983][ C1] __schedule+0x11b8/0x43b0 [ 297.319486][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 297.324884][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 297.330782][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 297.336681][ C1] ? _raw_spin_unlock+0x40/0x40 [ 297.342189][ C1] ? rcu_is_watching+0x11/0xa0 [ 297.346981][ C1] ? release_firmware_map_entry+0x190/0x190 [ 297.352971][ C1] schedule+0x11b/0x1e0 [ 297.357133][ C1] schedule_timeout+0x15c/0x280 [ 297.361980][ C1] ? console_conditional_schedule+0x40/0x40 [ 297.367957][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 297.373878][ C1] ? update_process_times+0x200/0x200 [ 297.379262][ C1] ? prepare_to_swait_event+0x331/0x350 [ 297.384804][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 297.389648][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 297.394851][ C1] ? dump_blkd_tasks+0x7e0/0x7e0 [ 297.399831][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 297.404594][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 297.409970][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 297.415267][ C1] rcu_gp_kthread+0x98/0x350 [ 297.419874][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 297.425101][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 297.431015][ C1] ? __kthread_parkme+0x157/0x1b0 [ 297.436056][ C1] kthread+0x436/0x520 [ 297.440143][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 297.445259][ C1] ? kthread_blkcg+0xd0/0xd0 [ 297.449857][ C1] ret_from_fork+0x1f/0x30 [ 297.454293][ C1] [ 297.457305][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 297.463632][ C1] NMI backtrace for cpu 1 [ 297.467950][ C1] CPU: 1 PID: 5870 Comm: syz.6.383 Not tainted 5.15.181-syzkaller #0 [ 297.476102][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 297.486233][ C1] Call Trace: [ 297.489522][ C1] [ 297.492380][ C1] dump_stack_lvl+0x168/0x230 [ 297.497076][ C1] ? show_regs_print_info+0x20/0x20 [ 297.502367][ C1] ? load_image+0x3b0/0x3b0 [ 297.506878][ C1] ? irq_work_queue+0xbf/0x140 [ 297.511877][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 297.516919][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 297.523080][ C1] ? _printk+0xcc/0x110 [ 297.527628][ C1] ? cpu_online+0x1d/0x30 [ 297.531984][ C1] ? load_image+0x3b0/0x3b0 [ 297.536613][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 297.542702][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 297.548683][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 297.554852][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 297.560400][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 297.565431][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 297.570717][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 297.575907][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 297.580751][ C1] ? account_process_tick+0x227/0x3a0 [ 297.586119][ C1] update_process_times+0x193/0x200 [ 297.591571][ C1] tick_sched_timer+0x37d/0x560 [ 297.596415][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 297.601717][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 297.607295][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 297.612415][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 297.618485][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 297.623429][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 297.629404][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 297.635030][ C1] [ 297.637964][ C1] [ 297.640894][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 297.646887][ C1] RIP: 0010:fpu__restore_sig+0x4c0/0xf50 [ 297.652516][ C1] Code: c6 16 8f 0a 44 23 6c 24 50 80 7c 24 24 00 0f 85 ad 00 00 00 e8 61 f1 4b 00 0f 01 cb 4c 89 e7 48 8b 44 24 40 31 d2 48 0f ae 2f <31> c0 41 89 c4 0f 01 ca 31 ff 44 89 e6 e8 9e f4 4b 00 31 ff 4c 89 [ 297.672143][ C1] RSP: 0018:ffffc90002f7fb40 EFLAGS: 00040246 [ 297.678222][ C1] RAX: 0000000000000007 RBX: 1ffff11003c8be19 RCX: ffff88801e45d940 [ 297.686193][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 00007ffc65eab940 [ 297.694156][ C1] RBP: ffffc90002f7fcf0 R08: 0000000000000000 R09: fffff520005eff90 [ 297.702116][ C1] R10: fffff520005eff90 R11: 1ffff920005eff8a R12: 00007ffc65eab940 [ 297.710098][ C1] R13: 0000000000000000 R14: ffff88801e45d940 R15: dffffc0000000000 [ 297.718080][ C1] ? copy_fpstate_to_sigframe+0xb90/0xb90 [ 297.723833][ C1] ? __might_fault+0xb3/0x110 [ 297.728511][ C1] ? _copy_from_user+0x111/0x170 [ 297.733535][ C1] __ia32_sys_rt_sigreturn+0x649/0x790 [ 297.739056][ C1] ? load_gs_index+0x120/0x120 [ 297.743827][ C1] ? lock_chain_count+0x20/0x20 [ 297.748674][ C1] ? vtime_user_exit+0x2dc/0x400 [ 297.753606][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 297.758818][ C1] do_syscall_64+0x4c/0xa0 [ 297.763226][ C1] ? clear_bhb_loop+0x15/0x70 [ 297.767890][ C1] ? clear_bhb_loop+0x15/0x70 [ 297.772571][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.778460][ C1] RIP: 0033:0x7f552ec6f969 [ 297.782868][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.802489][ C1] RSP: 002b:00007ffc65eabd38 EFLAGS: 00000246 [ 297.808554][ C1] RAX: fffffffffffffffc RBX: 000000000002f1e8 RCX: 00007f552ec6f969 [ 297.816524][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f552ee96fac [ 297.824586][ C1] RBP: 0000000000000032 R08: 0001c49f816e825e R09: 0000000965eac02f [ 297.832547][ C1] R10: 00007ffc65eabe30 R11: 0000000000000246 R12: 00007f552ee96fac [ 297.841031][ C1] R13: 00007ffc65eabe30 R14: 000000000002f21a R15: 00007ffc65eabe50 [ 297.849009][ C1] [ 301.583172][ T13] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P5843 } 10881 jiffies s: 5253 root: 0x0/T