last executing test programs: 9.971272796s ago: executing program 1 (id=666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6a0ac0ff0000000071109b000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = dup2(r1, r1) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x14000000}) preadv(r2, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xfffffffd}]}}}]}, 0x44}, 0x1, 0x2}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) fcntl$lock(r5, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x7ffffffffffc}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, &(0x7f00000003c0), &(0x7f0000000400)=@udp6=r6}, 0x20) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1c1981) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000000)) 8.772909577s ago: executing program 1 (id=669): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$qrtr(0x2a, 0x2, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ef2184a5", @ANYRES16=r3, @ANYBLOB="0500000000000000000044000000080003", @ANYRES32, @ANYBLOB="1c002380050005000000000008001a000300000008001c0000000000"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0xfffc, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$packet(r4, &(0x7f0000000380)={0x11, 0xf6, r5, 0x1, 0x2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x8, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@beacon={{{}, {0x7}, @broadcast}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1, 0x78}, @void, @val={0x6, 0x2}, @val={0x5, 0x4, {0x0, 0x0, 0x0, "03"}}, @val={0x25, 0x3, {0x1, 0x5, 0x3}}, @void, @void, @void, @void, @void, @void}, 0x36) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='rxrpc_abort\x00', r7}, 0x10) 7.577775569s ago: executing program 3 (id=671): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x60c40) r4 = dup3(r3, r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x3, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="00f69f039d719316c50002000000"], 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@gettaction={0x28, 0x32, 0x0, 0x3, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x44001) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000880)="122000001200e78100000000000000457ec4acc960cf47e607209dd6d43e6c025045eff3da00723416dfb5e2931307d09c8a831531ac40b011d69f406b6997223a841b3d41af52b5dc9143afd89bcaacf3dfb81a313a7f3af0b13691d84e0ec6a42c8c84add1eb868ac055210ec4043dfd6a878316eabad40ff5d0377da949c3dc727b4d8d008a106270c7ceff2c3bf19d085eb668016741ee7c63f69b6d344cb05bb2a2e7dc3816e9fc10dade956ac6676cf3e67e5cfc3df18e658867ce7279b4f60936cc36792aba3210b1cce34f53c82b15424003f91e5b5b03577b1ca20013ea7658fecfe7e1e56bdcafcf890a6848", 0xf1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000500)="a4", 0xfef4, 0x80fe, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x50}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000340)={0x5, 0x4356, 0x8, 0x80, 0x17, "955cca7f403068524a80342568f21a3f47f393"}) 7.251577188s ago: executing program 1 (id=673): r0 = socket(0x11, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000df9e2a889716286f07da25c236f09b5aa37f63500e03613c91651ef6698dddb21edbcacb6de769e2c9c6782c8b358b290383b110bc0f2b050e05b15c5b41adcc8a4fd2060bc59c73da82b7261e8250172c8d5e5532c934bc74913a", @ANYRES16=r2, @ANYBLOB="010001000000000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="2c002f80140003800800040004000000050002000000000008000100ff0000000c0002000203aaaaaaaaaaaa"], 0x48}}, 0x2004c085) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="03031400012918000e3580e8ac0001370000002f0600ac141414e0000003808a8972bd0b72e410820cd2e932"], 0xdd12}], 0x1}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="7d03020000000000140012800c0001006d616376746170000400028108000500", @ANYRES8=r6], 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 7.186656934s ago: executing program 4 (id=674): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r3}) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000040)=0x1000, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x3}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}}, 0x0) recvfrom(r6, &(0x7f00000000c0)=""/183, 0xb7, 0x40000022, 0x0, 0x0) bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "00000500"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}]}]}, 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x88, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x60}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) 6.969656625s ago: executing program 4 (id=676): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @const={0x0, 0x0, 0x0, 0xb}, @restrict]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x28, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff70097ca369bc4310000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x8829, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 6.962067105s ago: executing program 1 (id=677): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040000000000a207dcba714e76b1"], 0x14}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x10, 0xffffffffffffffff, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) clock_gettime(0x2, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x1c, r5, 0x926fdb2c68a18847, 0x0, 0x0, {0x11}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 5.057831542s ago: executing program 0 (id=679): mkdir(0x0, 0x32) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0xa, &(0x7f00000003c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x26, 0x10, &(0x7f0000000200)={0x800, 0xe, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000540)='\x00', 0x0, 0xffffffffffffffff) r3 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x940) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) 4.981856589s ago: executing program 1 (id=680): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041b"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_usb_control_io(r0, &(0x7f0000000ec0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\''], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r4 = inotify_init1(0x0) r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) inotify_rm_watch(r6, r5) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x4) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.829581823s ago: executing program 0 (id=681): setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000a80)="f90d29e80397f2eaaa19c2cf3096056a36543a0dd47dcac45aa85bd64b94fbddfb4e9a9e053bce78963a44aef76cc74c45cc7f4ff1687b8c5791293ca2014bd6cf1fbe4eebfda4f8010b5a62f06077db84ce8792ca9b1da453673a24c537cd63934ab75a0bc8e7e96c30fec022252aec910be85ba7b747eb0c2841e11836a7960ef9179df245918817b58f2511d1470dd7c0fa3611586a122a325e958aac7f3797547f5fa27dafbc07d3400c8a7b5f8ba17567f093e6bcf9786ab2eea3d9bce0467c1ce43b67e5d6bcc12b2481408221b4ea6cb8db2545843bc345eda1227e66b4328cd174f8ce387908d3196f2a5410a53e581d162d01882fb4a22c8de5a37aae8e7d57f56eb000b5a174a4af7fe2542ed59386603160c5419bad2bd2a2bbdf3a3e5c14dcd3d6322e491316df591af8ac432825e8cccf6fc7659f44f5a04f3d80994e49a0fc9e25a14db42dcde9aebdab1f176aaaac73ff8ae8c37164408e0b69e1d143f9dae118edd86aba21dcc72ac4f0efc621e3a2735c9644d2e3e9bbf8891556f6ae292eb6ba7ede8280ca0f57ac9d333a247d6567c8416ca97eb36f0169f04ac5914f05b5094902d1d2bfd9bbed474711c2b58a9df84043c5984f57350fdbc1d1f656dd751afa3aac84fd69a1a74017716da8260b7fcdbed01f2c82802dffc5816416249a1ba8d8d29101e9ff086075b1a6850fcd4f37c2ee6c5b427f66f7cf87c26115e100e64aa526c770c9162063e01f475243181ec35981cf150953362cab9b5a31ed01c419e0ef090e5379387f74e11c9fb1fff6d27e96e4f05833558e70365019f3e67143accce59e725c4adf51fb8d1e75c51f6e721e7477a8cad4071b019d961e184cb7f4086aabc45fa4efa6c1c49f3cc148afb64f1cbac2785e8ef502ef5b38ada1443b3fab3501c40964485f29b58548e4bb8183cba1de776bec1f37c975667223a45d09f68ef4cff1821461aff4581c446dc808a0226c05a4a253d9a99ff6cdf60065ebc33be941f73668893e41e99d5cdc53e22b93779abfde0ab6fe313ec10ff3d0a1673a59402836d6dace284fcd793e637f1038805388c0182f564217a090434d6acce6e4f4cee8636d7f5b8e4cb3d4ee7ee2a7b74633059e47041e0e044343449a03f0c9f4c0ef08d1e0de6cb147b1ba026d6fc385060af36daf5419b9d21042a8eaf595978c73a49d37d849a8899dd09270604c00daa1d4c0ac8dd4173ac31ef100c9a57d5e5a674c6163d7b9c6778a96c349e603bbb8cc7998f6cd85d45f8e0f6a156606a18476c1d15f239d4de63adb8ee8b59b13520544fe4f57d3fc12886b32884cfd8ed596cbaac9ff4f3694089e9701f7d5a1357cef42c7e13087ff8ea4d0cae75df46bc3367b1cfc8c12c8e44ea7bbc5fe98eee492b7f5fc687cde5c1df2833f15cef903871c66fa7f2eb872831168a4498aedc725df843298cf4b102358cb26c79b9982cdb9f33a57e355dc9cc202f5bfb5a0dfb94bf47688865f59ebe8834ff85da472476d109edcc31462711c831ec9b941541ef57afa14891942bceb6d7824fab7b1797d7da4507cc17d9dea695b8d66143606b319d82ff32ec4970339766d63bac01c12f0a6f3da9444ed060a1ddcaa0af5c17d4f649cd3a66793a516c21e823099e81949f5c45852f572ffc349bc9511bbc6dbc54695e0fab3207a0045007a654d9263741477426f31fde2db532105a9d63361c9e14b062a9c724a5b609bc547f6418e7e8829e03e4eaa5e934246ebe96db392b4ca9ed04d078f84a880ce63e04d0d483d3ee023fd6227bed1faab01ed30ccfc82d91d248cc26812053895cc9f4e761938a176059754b046c5d1ca6aee722c6dafc130584940a0d8ab44edf61e291dfb3592d264d942857f601e0fd6685b7078acd2adcf94b5c9ab76c446ff901c234744477353ec9853f56bc100e412e607bb941d3494ca2b4983ce5d2a76ca81b56141658c04e1ada63fba7faa720202c53a21f5ea361e2f48ded0feddcbb2dbd6a0e900ac4d8da8d502689cc929769d493d3203c8d59afae068955ad52f39aff29f246dcf33b18d2380c6011fa14e25fa1f378b4f3a606032c78759b17c6cf538963982a7c391c160bc305f1c5491c18f375c045d886e4db9bfc59ae3ca62ab3e13b65217850b2996783a43932068244c5c9f103bf3ac6895af0bcf888098b8db95fbd10fb12c2a5a6a09dbd9cb488f913efa692975933c257b2d22c5352d25ee49693cd3f93c98e85c9da9dcdbdbb0e012f79d0fb1c1f73508bf76ec09d9ef77d6732b01664118c73250c04e34c7b5fca879dd17bf630ff11e1b335c9a66e0a0fbf5eb018a7167ed4b798e13ca5583ccaad8caeceb5dcc962a8fb2dd4ee44970d6d8feb8fe99904bcbfd9ab81f20d1d1509afe8ac5904a94427b8c9780daef1ac6e182808a5238e44ac323c1e9653f620c785460fef749905cf73465da626a38eac52a65e37f4e673ce46403bb722e7387fbd5554e2a2466767f4fe14cee79dad82d215db07ee14d7c08822ff585298604594b3311382ba396bd3abdf96efa88c0711652aa24aa4b70022dd43257cb1aa47747d83a4e9f74b6cba5a021c18a1e10c7244967c43e9bb8bd730dafa2e1b7a313070d2101cb1c90dc6b0cbc29e9f91d50d8c10c14e8b506026a77da3aa5ebfab090508d29aa2acc6ae58cee823ecf3449f0e2af131455b6efe69d4b0d934d50bc26444bcb113f998f668431f3727f013dab2ec62ee24bf6489f8945aa55c21ca886cd4db4633cc28f4499483c431816980e51765ee34000037b71aa67e1abafe415174ab59cbbb3a8ee998b6b1ba1a472045842ab9d894bdc", 0x7df) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYBLOB=',group_id', @ANYRESDEC=0x0, @ANYRES8], 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001080)={0x8, {"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", 0x1000}}, 0x1006) read(r0, 0x0, 0x64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x36, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x32, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x3, 0xbd, 0x1, {0x22, 0xbbc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x6, 0x4}}}}}]}}]}}, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYRESDEC], 0x2, 0x58a, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, 0x0, 0x1c5002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.828885163s ago: executing program 3 (id=682): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='erofs_readpage\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x29, 0xffffffffffffffff, &(0x7f0000000100)=0xfe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000080)=0x54) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0xf5) ioctl$CAPI_REGISTER(r5, 0x400c4301, 0x0) 4.53985544s ago: executing program 4 (id=684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) shmget(0x0, 0xa000, 0x2, &(0x7f0000ff3000/0xa000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000340)}, 0x20) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.665669971s ago: executing program 3 (id=685): openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x402100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(r3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xc082, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) clock_settime(0x0, &(0x7f0000009ac0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000300), 0x181002, 0x0) 3.143875599s ago: executing program 2 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file1\x00') mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='ocfs2\x00', 0x0, 0x0) 2.928065479s ago: executing program 4 (id=688): prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x140, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000c00)={0x0, 0x0, 0xffffffffffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4001, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x2e0, 0x0, 0x500b, 0x148, 0x0, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x21, 0x0, 0x41}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x608, 0x3, 0x328, 0x0, 0x0, 0x0, 0x0, 0x1c0, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x4000000, 0x9c03, 0x21, 0x0, 'syz1\x00'}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r5 = socket(0x10, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x2e}}, 0x14) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) 2.833678028s ago: executing program 3 (id=689): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f000058f000/0x3000)=nil, 0x3000, 0xd) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) execve(0x0, 0x0, 0x0) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) membarrier(0x40, 0x0) membarrier(0x20, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000000)) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2d) 2.182531198s ago: executing program 2 (id=690): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000180)={0x0, 0x482, 0x0, 0x0}) accept$inet6(r0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/243, 0xf3) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200394}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) 2.135697202s ago: executing program 0 (id=691): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000580)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{0xa, 0x0, 0x0, @private0, 0x7}}]}, 0x190) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x1c8, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'rmd160\x00'}, 0x208, 0x0, "e863654b40a7ad42118bc1dd69d07e3b05cf0dbc9a9aac6130f0d060cb0c958c133115ff9cbb79de1007f5583249a62fe4273013ec2c2cca44c3a2d388d9483ca3"}}]}, 0x1c8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 2.115460304s ago: executing program 3 (id=692): set_mempolicy(0x1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0xda2, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) set_mempolicy(0x0, &(0x7f0000004bc0)=0xfffffffffffffffb, 0x3) set_mempolicy(0x3, &(0x7f0000006940)=0x8a1, 0x20) recvmmsg(r2, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000003c0)=""/166, 0xa6}], 0x3}, 0x7fff}, {{&(0x7f0000000480)=@can, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/247, 0xf7}, {&(0x7f0000001600)=""/80, 0x50}, {&(0x7f0000001680)=""/79, 0x4f}, {&(0x7f0000001700)=""/216, 0xd8}, {&(0x7f0000001800)=""/192, 0xc0}], 0x6, &(0x7f0000001940)=""/229, 0xe5}, 0xffffffff}, {{&(0x7f0000001a40)=@nfc, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001ac0)=""/202, 0xca}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/9, 0x9}, {&(0x7f0000002c00)=""/229, 0xe5}, {&(0x7f0000002d00)=""/236, 0xec}, {&(0x7f0000002e00)=""/108, 0x6c}, {&(0x7f0000002e80)=""/101, 0x65}], 0x7}, 0x18}, {{&(0x7f0000002f80)=@generic, 0x80, &(0x7f0000003140)=[{&(0x7f0000003000)=""/192, 0xc0}, {&(0x7f00000030c0)=""/7, 0x7}, {&(0x7f0000003100)=""/26, 0x1a}], 0x3, &(0x7f0000003180)=""/174, 0xae}, 0x10001}, {{&(0x7f0000003240)=@nfc, 0x80, &(0x7f0000003740)=[{&(0x7f00000032c0)=""/194, 0xc2}, {&(0x7f00000033c0)=""/137, 0x89}, {&(0x7f0000003480)=""/9, 0x9}, {&(0x7f00000034c0)=""/32, 0x20}, {&(0x7f0000003500)=""/39, 0x27}, {&(0x7f0000003540)=""/30, 0x1e}, {&(0x7f0000003580)=""/28, 0x1c}, {&(0x7f00000035c0)=""/126, 0x7e}, {&(0x7f0000003640)=""/62, 0x3e}, {&(0x7f0000003680)=""/150, 0x96}], 0xa}, 0x5}, {{&(0x7f0000003800)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003880)=""/129, 0x81}, {&(0x7f0000003940)=""/134, 0x86}, {&(0x7f0000003a00)=""/12, 0xc}, {&(0x7f0000003a40)=""/179, 0xb3}, {&(0x7f0000003b00)=""/171, 0xab}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)}, {&(0x7f0000004c00)=""/114, 0x72}], 0x8, &(0x7f0000004d00)=""/61, 0x3d}, 0x4}, {{&(0x7f0000004d40), 0x80, &(0x7f00000063c0)=[{&(0x7f0000004dc0)=""/198, 0xc6}, {&(0x7f0000004ec0)=""/114, 0x72}, {&(0x7f0000004f40)=""/32, 0x20}, {&(0x7f0000004f80)=""/235, 0xeb}, {&(0x7f0000005080)=""/75, 0x4b}, {&(0x7f0000005100)=""/162, 0xa2}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/196, 0xc4}, {&(0x7f00000062c0)=""/67, 0x43}, {&(0x7f0000006340)=""/119, 0x77}], 0xa, &(0x7f0000006480)=""/146, 0x92}, 0x81}], 0x7, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$isdn(0x22, 0x3, 0x10) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000006880)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x5, 0x7, 0x4, 0x9, 0x870]}, &(0x7f0000006900)=0x78) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d3, 0x0) sendto(r4, &(0x7f0000006700)="1eb3a37439e9a5090281a392ca96a35e6c805ef9fbac39774831b6d7a8adbac55b828273bacfe0222739972f2e1025c92457a585d080e2854e7a632a11f18da301d2997d1cdafa589a46ed1d88667920f5fa7d4a7d43c54443fc2dcd793280e2170da560514d22b816570a20f05d55a9bdaa07ca0177d8b34ebc8a167ffacb867819cd786b7cf46b1d97e41b0a4f02c24634ca3b1a2799003c60db96de4673fb00e0b151c8043a4ee12af0df0fb32688347efb6ca040b47fa6badef13bd471673d2bfcd2d58790971c7532ea5f0479098496b0fd3f7a892d987521ef5403f5", 0xdf, 0x10, &(0x7f0000006800)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x2, {0xa, 0x4e24, 0x401, @mcast1, 0x8001}}}, 0x80) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafc0d8c560a84476080040000000f0800000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'macvlan1\x00', {0x6}, 0x400}) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000001cf0b00006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bcb6c866c96ed3822a0200000046", 0x48}], 0x1}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) 1.717938371s ago: executing program 2 (id=693): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r3, 0x0, r2, 0x0, 0x1003, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0), 0xfdef) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r3}}, './bus\x00'}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/24, 0x2000, 0x0, 0x6, 0x3}, 0x1c) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x10000, 0x10100}, &(0x7f0000000100)=0x0, 0x0) r10 = syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r10, 0xa3d, 0x0, 0x0, 0x0, 0xff39) syz_io_uring_submit(r9, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c00048038800c0001006269747769736500280002800800034000000004080480040001000800024000000016040005800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000000000000000"], 0x90}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.485750682s ago: executing program 2 (id=694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.390425381s ago: executing program 0 (id=695): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1}}], 0x8) bind$can_raw(r2, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}], 0x8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000180)=""/197, 0x3}, {0x0}], 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f0000000280)={"10a1a78fb27204f42f9f8fe4de8430c6e8e09d2a2d1347f04e70126485e7", 0x1, 0x2, 0x401, 0x7, 0x8, 0xc2ce, 0xff9, 0x2, [0x4, 0x80, 0x100, 0x1, 0x7, 0x0, 0x5, 0x0, 0x1, 0x7, 0xffffffe5, 0x4, 0x3, 0x7, 0x5, 0x9, 0x3, 0x8, 0x1f]}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa}]]}, 0x28}}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r11, 0x6, 0x14, &(0x7f00000004c0)=0xfffffffe, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x40, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x62}}}}, [@NL80211_ATTR_FRAME_MATCH={0x16, 0x5b, "27845675f98a08003c756000edf002000000"}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.368739193s ago: executing program 4 (id=696): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x210808, &(0x7f0000000640)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$eJzs3E1rK1UYwPEnL02TXG4mC1EUpAfdqIuhja7lBmlBDFjaRmwFYdpONGRMSiZUImLryq34Ddy4KF12V1C/QDfudONGV90ILixSPJJ5aSftJNak6cvt/wdlTs9znuk5TBqeEzJz/P7XnzRqrlmzOpLMKkmIiJyIFCUpoURwTHrtjETtyquP/vz5xeXVtXfKlcr8klIL5ZXXS0qpwsz3n36eC4YdTstR8cPjP0q/HT179PzxPysf111Vd1Wz1VGWWm/92rHWHVtt1t2GqdSiY1uurepN12778ZYfrzmtra2uspqbj/Nbbdt1ldXsqobdVZ2W6rS7yvrIqjeVaZrqcV7iZGJ7H6rq3tKSVR4xeeOaJ4NR/a21HhLWibKVEpHcpUh1b6LzAgAAd9LF+j/ZK+lHqv+l4NX/vcHn9f/+Sz92Hr13UAjq/8NMXP3/xi/+ufrq/6yITKD+73e5Irr3dv7P4LHqf9wNM5f3tIm+39rtspUP/n89X36wP+s1qP8BAAAAAAAAAAAAAAAAAAAAALgPTrQ2tNZGeAx+Xjsf4fcNSN+9qXliMgZcf2NaRLK9q6+HXn/cc8ura5L1btxLF0Scr7ar21X/6Md/Dx8tMCuGnHqvh0CvHd55pHqK8oOzE+TvbFdTXqRck7o4YsucGFK8mK/1wtuV+Tnl68+fknw0vySGPBOfX4rNz8grL0fyTTHkpw1piSObvdf1qT7L/2JOqbferVzIz3njAAAAAAB4GpjqTOz+3TQHxf38s/11/+cDIpH9+Wzs/jxtvJC+3bUDAAAAAPBQuN3PGpbj2O34RkI7djsnQ8eM2UiPlj41bEwqssKrnjDjfd9FZHIrHdIIv0jRyERCWfk26B7lzOH6JzPnpIySNSN62p/VOH89/Nho0BhZnPT1Sg8IPffNd39Fep5c/cyJ4Km90dCbB9n/WOnEGlNXevPQqTHffQAAAADcpLDoz7lhz5PbnRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/QkMeApa/rcWK3vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrvg3AAD//3xXBXQ=") r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000438000/0x4000)=nil, 0x4000) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3ce11000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x1a, @rand_addr=' \x01\x00', 0xa}, 0x1c) pread64(r4, &(0x7f0000000880)=""/4096, 0x1000, 0xa96) sysinfo(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.275704342s ago: executing program 2 (id=697): inotify_init1(0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1000002, &(0x7f0000000700)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000540)={[{0xffffffec, 0x5, 0x3, 0x0, 0x2, 0x0, 0xfd, 0xf5, 0x0, 0x0, 0xfd, 0x0, 0x6}, {0xc, 0xb, 0x77, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7, 0xff, 0x4e, 0xfc, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6ddc}], 0xffffffff}) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004ce], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000300)=0x92b1, 0x4) listen(0xffffffffffffffff, 0xb84) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.274547152s ago: executing program 3 (id=698): memfd_create(&(0x7f0000000240)='-B\xd5NI\xc4\xb5 \xe5\v.j\xf4\x8di\x11\xef\x8bl\xc9\x1e\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xff\x03\x00\x00nh#\xcf)\x1e\xc8\xc0\"\x9cc\x10d\xee\xa9\xab\x06\x97kf\xc7\x820\x80T\r\xde\xc58M\xcd\xfb\xcc\x82n=\x7f=\x8b\x1d\xea\xef\xe3\x00\x00\x03\r\x00\x00\x10\x00@\x00\x00\x00\x00\x00\x00\x00\xcbM\x8a_\xbf\xb59Q\x05\x82E\x12p\xcf\x15@o\xac\x17P;\x11\x93\x97\xb6\xdc\xad\x00C\x87\xc1\xbb\xb2>\xa3 #\xd5T\xdd\x8cn<\xd0$$\x9bo\x03\xdb#(\x03\x00\x00\x00\xe3r%/\xca\xb4\xd1x\xd8\xb0uN\xcf\b%\x00\x00\x00\x00\x00\x00\x00\bUO\x9f(\xe4\xda\x1eLj:\x8av\xd4\xe1\xc2ze\x16\asP\xae&yF.\xe8\xf5\xa2\xdf\x86\xa0t\x05~~\x92U\x1e\x87\xdb\xdfg\x9enz\b\xfaw\xfb*[r\x0e\xcb`\xdf\xa1\x16{<)\x9d\x99h\x00\x10\x02\x00'/302, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000", @ANYBLOB="02", @ANYBLOB], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a320000000005000500"], 0x5c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x300, r1, &(0x7f0000000380)) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100002104000480080002000100000008000100000000001c00088004000c8014000b80080009000000000008000a0000000000"], 0x44}}, 0x0) 1.217520457s ago: executing program 0 (id=699): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) creat(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$clear(0x7, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x1) 172.389974ms ago: executing program 4 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRES32=r2, @ANYRES8=r1], 0x7c}}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010e8030000000000000000000000000a2c000000060a01040000ffff00000000020000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) setreuid(0x0, 0xee00) r5 = geteuid() setreuid(r5, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[], 0x9, 0xc21, &(0x7f0000001e80)="$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") r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x2c, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}}, 0x0) 12.395739ms ago: executing program 1 (id=701): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr, 0x2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2604c090, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r4, 0x0, r2, 0x0, 0x406f413, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) 11.359159ms ago: executing program 2 (id=702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX=0x0], 0x1, 0x14ed, &(0x7f0000004000)="$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") syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file1\x00', 0x2008054, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="ac7b4efdd021fbb1d8ee6b170048105967759c5affb8c9a311dd24fa1fec64c3a032d17a1e12f67c0871188469a7b76eb91f0780a9be55ba0927c1e8a8cb84156181c4a8f7d14bcc78240dd07a852a874996a38fb6980492dc69488c8b853e837a5dfa02670ac7445b12c5577d7553127077bacf4d511e7163a93892b8a6ef9777456cc642cb6abccee8121783945547a8b4a6d257cf9fc5043c781271c9f6179c145b15fa52", @ANYRES32=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x1, 0xf43, &(0x7f0000002d80)="$eJzs3U9sHNX9APA367+JTbwGfj8ClDiF0kDaOsHJgd6CFLUSQohL76CQQFRD04YeQEQJPQWpBypED1Q9UMGtUnqoVFClClWq1D8cem0PFWovrapUioRUNVXiyvZ76/WLJ7ser2fX3s9H+vrtmzc73+94HWffevZtAIZWY+Xr8eP7ixDe+ejtk1+/ePMXy9vmWnscXPlaxF4zhDDW1i+y430aN9y49vqp5fZm1oawsHyv0TQenr7auu9UCOFSOBg+Ds0wd7j52eWRp8588O4nhy6ce/LFbTl5AAAYMld+v/jnR//+uy/PXr9y4ESYaG1Pz8+bsT8Vn/cfLcL1pVUr2xtxvH0+UGwwLxjP9huJ0cj2G8n2G41tI+vn+cay44yV7DfeId9I27b27XmdAAAAsJOkeW0zFI35df1GY35+dd6/7NOZ8WL+5bOLZ873qVAAAACgss8urlx0K3ZETA5ADUIIIYQQQggxDDE30f8aehtLM/1+BQIAAAAYNmndgdb6YLlL+coCW9M6WrO7/FefaGx8f+iBTj9/2/3zVve/P/k3l//9N/zGAQCgut36bDKdV3oePfXmnpV+vo7gSHa/zT7/b2THGd1knWXrCu6U9QbL6sy/r4OqrP7NPo79UlZ/vh7moCqrP1+nc1CV1T9Rcx1VldU/uUN+B5XVuKfmOqoqq39vzXVUVVb/VM11VFVW/3TNdVRVVv8dNddRVVn9+2quo6qy+nfKZbVl9TdrrqOqsvpna66jqrL676y5jqrK6r+r5jqqKqv/7prr6JcHYpu+Dwey8db8eYM53U6Z4wEAAMCw+4/1/0QPY24AahBCbDlGBqAGIYQQQoi6ojEANdQSF/v9AgQAAADQd+l9Aeld70tRGh/pMD7aYXzstuMjrfcBl91/osP4rf7dcQ8AAADYbX55+cy9bxVr7/Pf6np4k7FN6y9tdh2jfD3Czebf6rpnW82/U9YtAwAAYLgUX/v45uGT770ye/3KgRNts9+bcb6b1gEdja8NfBj76bqA6axfpDn0ifV5GiX75a8P3FF2vGe2eKIAAAAwxNL8vRmKxnzbvLsZGo35+bX5+P4wVpw5u3j6aOynz2f57cxkCGHx9GM11w0AAAB0b22+X+wJG8z/0+f47g/jxfzLZxfPnF/tT7e2jzXaXxeYWdu+8nrBY63jrd++ULL9WOynz+98cWbPyvb5U99afL7H5w4AAADD4vyrr33zucXF099xw42SGxc3da+DIfw3LrE4CMW7UfFGv38zAQAAvfbB397+w3ePTf9q9f3/a+vfpff/H4z9Zlzb749xh3SdQHofwC3v1392fZ6Zsv3Ord+vme03EmMiq3uy7Tjti+6l+82W5WuuP854Sb6pLN90e74N1ikYzfZP+fZl2/P1CdN+M9n2fB3G0SxHkeV/MNv/hwEAAADWHHnlpXNHzr/62lfOvvTcC6dfOP3ysaMLX114fGHh+MKRlev6j7Rf3Q8AAADsRGsX/fa7EgAAAAAAAAAAAAAAAAAAABhedXycWL/PEQAAAIbdvy6GEC4JIYQQQggh6on4CdQ9PGbR93MSYhjiLz3/t1t3LC3lnzQPAAAAsL1uXHv9VHt7i0tFT/O1jtZcbW7GvKn9zcM/fng50m5Xn1j/esnenlbDsKv75//2+Uf7nH8DQ57//Td6m38y3ej6919j/QFOVMv7xR/845H2/PeNdpk/P/9nquU/lOU/FLrLv/Relv/ZavkfyfLv7TL/Led/rlr+R2P+/ameh7rNv/7xn4htOo89XeY/nJ3/86Hb/Nn5N7tMmPlSzA8Aw6jR7wK2SXqWkJ5HT8V+Ot80s8mvftjs8/9GdpwNZkyVpOOm50H3xH56vjSd5U02W/9Udrw7KtaZ2ylXlZTV36vHcbuV1T9Wcx1VldU/XnMdVZXVP1FzHVWV1T9Zcx1VldXf7Ty038rq3ymvK5fVP1VzHVWV1T9dcx1VldW/2f/H+6Ws/n0111FVWf0zt7nPIP3fVlZ/xZfValdW/2zNdVRVVv+dNddRVVn9d9VcR1Vl9d9dcx39cn9sy+bDaf45E8dSv5n1Jzb4Xrb1l6JtOw8AAACg3D+t/yfE4MTYANQgNh+NAahB7NrYMwA17IRYbvpdw7DGt//U/xpqjmL1Rt/rEGJ7Y2mp/zWInoc/yQ+37X03MwCDyu//4ebxH24e/+Hm8ed20jX8RdZPRjqMj3YYH+swPp6N5z+vEx3G78qOm78R4e4O4//XYXxfh/F7Oozv7zB+b4fx+zqM399hHAAAgOHw/7E1PwQAAIDd68JPP/z+zw89e232+pUDJ8L4LevOH439ifi39cuxn697n4zFv/l/L/Z/Ettfx/av2f6uPwEAAIDtlz4nxt//AQAAYPdKn1Nq/g8AAAC712xszf8BAABg97oztub/AAAAsIsVkxtvjm16XeDB2Ha7rh8AMPg+F9sHYnsgtnOx/Xxs0/OAh2L7hZrqAwB650ffePPxt4q19f6PZeM34vbU3uLS6isFRWP9Sv57Yrs3tg93WU/+eQDd5k/2dZlnu/LPbDE/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7NFa+Hj++vwjhnY/ePjlz4eQLy9vmWnscXPlaxF4zhDDWul8aXev/LO5449rrp5bbm7Fdim0RFkIRitZ4ePpqK9NUCOFSOBg+Ds0wd7j52eWRp8588O4nhy6ce/LFbfwWAAAAwK73vwAAAP//LTxGDA==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x40186e8d, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="060000001a04b9435da0352cc7411e9e"}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086e8b, &(0x7f0000000080)={@desc={0x100000, 0x0, @desc2}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r4, 0x4147, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x17, &(0x7f0000000100)=[@timestamp, @window, @mss, @window], 0x4) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x35, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x0, 0x7ffefffe}]}) 0s ago: executing program 0 (id=703): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) renameat2(r0, 0x0, r0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x2084, 0x0) kernel console output (not intermixed with test programs): moving last arp target with arp_interval on [ 183.278321][ T5568] loop1: detected capacity change from 0 to 32768 [ 183.315721][ T5557] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.324973][ T5580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.350094][ T5588] loop3: detected capacity change from 0 to 512 [ 183.441964][ T5568] XFS (loop1): Mounting V5 Filesystem [ 183.500126][ T5588] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.320: iget: special inode unallocated [ 183.524876][ T5588] EXT4-fs (loop3): get root inode failed [ 183.536900][ T5588] EXT4-fs (loop3): mount failed [ 183.853673][ T5568] XFS (loop1): Ending clean mount [ 184.093112][ T4988] attempt to access beyond end of device [ 184.093112][ T4988] loop4: rw=2049, want=45104, limit=40427 [ 184.560202][ C0] sched: RT throttling activated [ 184.569696][ T5202] XFS (loop1): Unmounting Filesystem [ 184.979235][ T5588] loop3: detected capacity change from 0 to 256 [ 185.040869][ T5606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 186.387102][ T5622] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 188.163290][ T5652] loop4: detected capacity change from 0 to 64 [ 188.996939][ T5660] hfs: request for non-existent node 1280 in B*Tree [ 189.003893][ T5660] hfs: request for non-existent node 1280 in B*Tree [ 189.425659][ T5648] chnl_net:caif_netlink_parms(): no params data found [ 189.601397][ T5668] loop3: detected capacity change from 0 to 256 [ 190.090382][ T5383] Bluetooth: hci5: command 0x0409 tx timeout [ 190.161166][ T5668] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 190.230964][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.609122][ T5678] loop1: detected capacity change from 0 to 256 [ 190.630333][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.775854][ T5648] device bridge_slave_0 entered promiscuous mode [ 190.859072][ T5678] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 190.881222][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.928499][ T5629] kexec: Could not allocate control_code_buffer [ 190.939492][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.965513][ T5648] device bridge_slave_1 entered promiscuous mode [ 191.113717][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.208891][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.816515][ T5684] overlayfs: failed to resolve './file0': -2 [ 191.872410][ T5648] team0: Port device team_slave_0 added [ 191.880144][ T5648] team0: Port device team_slave_1 added [ 191.958109][ T5691] loop3: detected capacity change from 0 to 512 [ 191.991970][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.998922][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.069191][ T5680] loop4: detected capacity change from 0 to 32768 [ 192.080278][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.101688][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.108633][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.134858][ T5691] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.150891][ T5680] XFS: noikeep mount option is deprecated. [ 192.176458][ T5691] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.345: invalid indirect mapped block 512 (level 0) [ 192.191768][ T3618] Bluetooth: hci5: command 0x041b tx timeout [ 192.202580][ T5691] EXT4-fs (loop3): Remounting filesystem read-only [ 192.209876][ T5691] EXT4-fs (loop3): 1 orphan inode deleted [ 192.216039][ T5691] EXT4-fs (loop3): 1 truncate cleaned up [ 192.222683][ T5691] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x0000000000000032,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 192.240323][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.276426][ T5680] XFS (loop4): Mounting V5 Filesystem [ 192.327591][ T5680] XFS (loop4): Ending clean mount [ 192.338639][ T5680] XFS (loop4): Quotacheck needed: Please wait. [ 192.407367][ T5680] XFS (loop4): Quotacheck: Done. [ 192.443454][ T5648] device hsr_slave_0 entered promiscuous mode [ 192.451483][ T5190] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 192.505109][ T5648] device hsr_slave_1 entered promiscuous mode [ 192.535477][ T5648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.548621][ T5190] EXT4-fs (loop3): Remounting filesystem read-only [ 192.576980][ T5648] Cannot create hsr debugfs directory [ 192.580277][ T5190] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 192.683246][ T4988] XFS (loop4): Unmounting Filesystem [ 192.872521][ T5648] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.236267][ T5648] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.456359][ T3657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.145085][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.155512][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.239370][ T5648] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.273101][ T3675] Bluetooth: hci5: command 0x040f tx timeout [ 194.393307][ T5725] loop1: detected capacity change from 0 to 256 [ 194.406647][ T3657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.428138][ T5727] loop0: detected capacity change from 0 to 2048 [ 194.540539][ T5725] FAT-fs (loop1): Unrecognized mount option "B1ºâqàÂéž³ÿÚ+d'‡#.ԒͯÈ?oè\ò„Ž [ 194.540539][ T5725] ÿÿ18446744073709551615" or missing value [ 194.557762][ T5727] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.661978][ T5648] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.690064][ T5195] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 194.707326][ T5195] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 194.770401][ T5195] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 7305975698595341871 in block_group 0 [ 194.799312][ T5195] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 194.824313][ T5195] EXT4-fs error (device loop0): ext4_dirty_inode:6007: inode #2: comm syz-executor: mark_inode_dirty error [ 194.914923][ T5578] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm kworker/u4:17: Invalid inode table block 7305975698595341871 in block_group 0 [ 194.934663][ T3657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.129793][ T3657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.158349][ T5648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.174971][ T5648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.242194][ T5648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.258468][ T5728] chnl_net:caif_netlink_parms(): no params data found [ 196.269993][ T5747] loop4: detected capacity change from 0 to 2048 [ 196.276444][ T5648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.331136][ T4201] Bluetooth: hci5: command 0x0419 tx timeout [ 196.359399][ T5747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.554474][ T5747] overlayfs: upper fs needs to support d_type. [ 196.563395][ T5747] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 196.570473][ T3618] Bluetooth: hci2: command 0x0409 tx timeout [ 196.576502][ T5747] overlayfs: failed to set xattr on upper [ 196.582591][ T5747] overlayfs: ...falling back to index=off,metacopy=off. [ 197.172220][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.230449][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.248012][ T5728] device bridge_slave_0 entered promiscuous mode [ 197.279634][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.287574][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.305790][ T5728] device bridge_slave_1 entered promiscuous mode [ 197.465604][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.493613][ T4988] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 197.505266][ T4988] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 197.549017][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.645887][ T5728] team0: Port device team_slave_0 added [ 197.749074][ T5728] team0: Port device team_slave_1 added [ 197.983275][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.008888][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.018500][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.085889][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.316607][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.325337][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.352219][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.556221][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.572724][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.600864][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.660068][ T4008] Bluetooth: hci2: command 0x041b tx timeout [ 198.691068][ T5728] device hsr_slave_0 entered promiscuous mode [ 198.701690][ T5728] device hsr_slave_1 entered promiscuous mode [ 198.820836][ T5728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.881396][ T5728] Cannot create hsr debugfs directory [ 199.055921][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.116230][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.229986][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.237107][ T4603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.334796][ T3618] Bluetooth: hci4: command 0x0409 tx timeout [ 199.342894][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.437341][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.447870][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.454976][ T4603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.468831][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.499712][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 199.552230][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.646260][ T5648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.656920][ T5648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.669422][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.692941][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.703583][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.712618][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.721594][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.730576][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.739964][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.749028][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.757995][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.774300][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.784766][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.957864][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.966376][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.976490][ T5764] device bridge_slave_0 entered promiscuous mode [ 200.013149][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.030343][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.059694][ T5764] device bridge_slave_1 entered promiscuous mode [ 200.132567][ T5827] loop1: detected capacity change from 0 to 64 [ 200.163356][ T3657] device hsr_slave_0 left promiscuous mode [ 200.176912][ T3657] device hsr_slave_1 left promiscuous mode [ 200.199599][ T5827] hfs: bad catalog namelength [ 200.207550][ T5827] hfs: get root inode failed [ 200.207646][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.220018][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.236332][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.246657][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.258347][ T3657] device bridge_slave_1 left promiscuous mode [ 200.264832][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.277532][ T3657] device bridge_slave_0 left promiscuous mode [ 200.284992][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.298769][ T3657] device veth1_macvtap left promiscuous mode [ 200.305076][ T3657] device veth0_macvtap left promiscuous mode [ 200.311613][ T3657] device veth1_vlan left promiscuous mode [ 200.317389][ T3657] device veth0_vlan left promiscuous mode [ 200.557624][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 200.570913][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 200.583251][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.595722][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.659911][ T3657] bond0 (unregistering): Released all slaves [ 200.719887][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.728109][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.735624][ T4207] Bluetooth: hci2: command 0x040f tx timeout [ 200.752084][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.783189][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.795890][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.911067][ T5764] team0: Port device team_slave_0 added [ 200.922219][ T5764] team0: Port device team_slave_1 added [ 200.987114][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.007716][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.136205][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 201.185797][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.197586][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.287088][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.317850][ T5648] device veth0_vlan entered promiscuous mode [ 201.336821][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.350799][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.368668][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.380285][ T4201] Bluetooth: hci4: command 0x041b tx timeout [ 201.382935][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.458109][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.521726][ T5648] device veth1_vlan entered promiscuous mode [ 201.530613][ T5384] Bluetooth: hci1: command 0x0409 tx timeout [ 201.543253][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.552458][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.561940][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.768182][ T5648] device veth0_macvtap entered promiscuous mode [ 201.827091][ T5764] device hsr_slave_0 entered promiscuous mode [ 201.853175][ T5764] device hsr_slave_1 entered promiscuous mode [ 201.880818][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.889412][ T5764] Cannot create hsr debugfs directory [ 201.917593][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.929054][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.970989][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.205543][ T5648] device veth1_macvtap entered promiscuous mode [ 202.222815][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.231339][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.239092][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.247470][ T5798] device bridge_slave_0 entered promiscuous mode [ 202.291523][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.302947][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.318608][ T5798] device bridge_slave_1 entered promiscuous mode [ 202.346039][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.357324][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.370263][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.390218][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.404070][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.420254][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.441926][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.469155][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.484999][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.508923][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.532672][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.563138][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.583355][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.661777][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.677900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.691649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.776779][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.799815][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.810276][ T5384] Bluetooth: hci2: command 0x0419 tx timeout [ 202.836338][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.868116][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.895621][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.927276][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.970410][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.010229][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.031729][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.062776][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.091970][ T5648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.106613][ T5648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.119861][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.132087][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.151556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.181078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.219254][ T5648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.248095][ T5648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.267375][ T5648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.286667][ T5648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.388706][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.436472][ T5798] team0: Port device team_slave_0 added [ 203.453711][ T5798] team0: Port device team_slave_1 added [ 203.457819][ T5383] Bluetooth: hci4: command 0x040f tx timeout [ 203.484380][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.510984][ T5764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.584482][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.600227][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.610642][ T5384] Bluetooth: hci1: command 0x041b tx timeout [ 203.650231][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.673033][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.697857][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.732558][ T5764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.772157][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.779103][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.839401][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.882433][ T5764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.940780][ T5573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.949126][ T5573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.988346][ T5764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.072833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.161154][ T5798] device hsr_slave_0 entered promiscuous mode [ 204.178448][ T5798] device hsr_slave_1 entered promiscuous mode [ 204.193758][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.201987][ T5798] Cannot create hsr debugfs directory [ 204.454218][ T5573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.609240][ T5573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.890280][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.964570][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.079548][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.090956][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.109872][ T5904] loop1: detected capacity change from 0 to 128 [ 205.120923][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.168495][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.188043][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.204014][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.211155][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.219902][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.229358][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.255395][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.274486][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.312972][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.320027][ T4893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.417100][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.432209][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.451400][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.500897][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.512882][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.523674][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.532361][ T5383] Bluetooth: hci4: command 0x0419 tx timeout [ 205.539544][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.550018][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.559398][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.584009][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.625834][ T5728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.654129][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.682369][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.690795][ T4157] Bluetooth: hci1: command 0x040f tx timeout [ 205.691921][ T5904] loop1: detected capacity change from 0 to 4096 [ 205.726156][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.741120][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.783514][ T5904] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 205.793515][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.912818][ T5798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.988593][ T5904] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 206.036356][ T5923] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 206.321481][ T5798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.377978][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.420788][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.428230][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.443698][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.458265][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.513932][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.529974][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.540687][ T5728] device veth0_vlan entered promiscuous mode [ 206.610453][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.618952][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.620592][ T9] ntfs3: loop1: ino=1b, Internal error [ 206.643117][ T9] ntfs3: loop1: ntfs3_write_inode r=1b failed, -22. [ 206.691037][ T5798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.710398][ T5202] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 206.716901][ T5202] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 206.764787][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.840981][ T5728] device veth1_vlan entered promiscuous mode [ 206.907201][ T5798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.008931][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.019981][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.060164][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.078095][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.182138][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.214525][ T5728] device veth0_macvtap entered promiscuous mode [ 207.268130][ T5728] device veth1_macvtap entered promiscuous mode [ 207.332575][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.357312][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.398213][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.405319][ T4893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.645467][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.736628][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.815572][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.822681][ T4893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.987417][ T4157] Bluetooth: hci1: command 0x0419 tx timeout [ 208.035637][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.081065][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.089862][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.156737][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.167951][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.179759][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.206283][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.230253][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.247856][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.258211][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.269997][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.280757][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.300252][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.330824][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.361298][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.380222][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.400217][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.458241][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.850567][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.894629][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.070302][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.100292][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.160332][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.184616][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.216183][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.265510][ T5969] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 209.283821][ T5979] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 209.352139][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.528232][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.582444][ T5969] kvm: pic: level sensitive irq not supported [ 209.587741][ T5969] kvm: pic: non byte read [ 209.659364][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.696797][ T5969] kvm: pic: level sensitive irq not supported [ 209.711394][ T5969] kvm: pic: non byte read [ 209.788155][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.838190][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.848077][ T5728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.858536][ T5728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.870084][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.880573][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.889097][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.902162][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.921742][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.938172][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.951829][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.969266][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.979963][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.989145][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.019181][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.028910][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.071060][ T5728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.092074][ T5728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.122596][ T5728] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.137350][ T5990] loop1: detected capacity change from 0 to 64 [ 210.143681][ T5728] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.181441][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.202591][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.399787][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.479585][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.516518][ T6004] hfs: request for non-existent node 1280 in B*Tree [ 210.523199][ T6004] hfs: request for non-existent node 1280 in B*Tree [ 210.609606][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.687909][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.110118][ T5764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.222708][ T5798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.261398][ T5798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.282894][ T5798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.334152][ T5798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.402475][ T3620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.430368][ T3620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.493126][ T4893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.503142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.513996][ T4893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.555177][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.628915][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.700411][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.707871][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.865545][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.890990][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.987616][ T5764] device veth0_vlan entered promiscuous mode [ 212.049434][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.073233][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.112214][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.119974][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.185870][ T5764] device veth1_vlan entered promiscuous mode [ 212.223555][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.241883][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.269812][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.320970][ T3657] device hsr_slave_0 left promiscuous mode [ 212.327292][ T3657] device hsr_slave_1 left promiscuous mode [ 212.336159][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.343654][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.355730][ T6009] loop1: detected capacity change from 0 to 32768 [ 212.372632][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.380029][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.388286][ T3657] device bridge_slave_1 left promiscuous mode [ 212.395035][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.403874][ T3657] device bridge_slave_0 left promiscuous mode [ 212.410069][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.483978][ T6009] XFS (loop1): Mounting V5 Filesystem [ 212.489574][ T3657] device veth1_macvtap left promiscuous mode [ 212.508204][ T3657] device veth0_macvtap left promiscuous mode [ 212.518097][ T3657] device veth1_vlan left promiscuous mode [ 212.545944][ T3657] device veth0_vlan left promiscuous mode [ 212.579511][ T6009] XFS (loop1): Ending clean mount [ 212.695437][ T3657] bond1 (unregistering): Released all slaves [ 212.774500][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 212.789020][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 212.799863][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.814466][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.879687][ T3657] bond0 (unregistering): Released all slaves [ 212.910422][ T5386] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 212.935770][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.944461][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.958004][ T5764] device veth0_macvtap entered promiscuous mode [ 212.968450][ T5764] device veth1_macvtap entered promiscuous mode [ 213.008584][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.022103][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.030031][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.039088][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.048625][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.080013][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.103456][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.117474][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.129708][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.140808][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.152203][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.162195][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.178603][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.188547][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.199148][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.210166][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.221064][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.230913][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.241361][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.253769][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.261598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.270613][ T5386] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.279129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.279209][ T5386] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.287961][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.299961][ T5386] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.304543][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.317257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.326842][ T5386] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.331629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.362305][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.369366][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.377565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.386390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.395134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.404431][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.419264][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.434891][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.447468][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.459267][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.464547][ T5386] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.469141][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.489020][ T5386] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.489230][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.497386][ T5386] usb 2-1: Product: syz [ 213.507350][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.520908][ T5386] usb 2-1: Manufacturer: syz [ 213.521886][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.539553][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.550285][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.562697][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.573196][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.574127][ T5386] cdc_wdm 2-1:1.0: skipping garbage [ 213.585364][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.597370][ T5386] cdc_wdm 2-1:1.0: skipping garbage [ 213.599130][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.608080][ T5386] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 213.621494][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.621498][ T5386] cdc_wdm 2-1:1.0: Unknown control protocol [ 213.656032][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.686309][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.697508][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.708827][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.718112][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.727251][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.736205][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.748580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.760026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.780719][ T5798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.807641][ T5798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.821591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.829930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.838883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.854248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.865028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.875096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.883785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.905112][ T5383] usb 2-1: USB disconnect, device number 7 [ 213.907218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.911324][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 213.925040][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 213.931121][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 214.067732][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.091797][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.114107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.123200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.136239][ T4893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.138730][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.156124][ T4893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.171421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.192429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.290568][ T6055] loop3: detected capacity change from 0 to 1024 [ 214.345114][ T6055] EXT4-fs (loop3): Test dummy encryption mode enabled [ 214.360371][ T6055] EXT4-fs (loop3): Ignoring removed orlov option [ 214.395204][ T6055] EXT4-fs (loop3): can't mount with commit=65541, fs mounted w/o journal [ 214.499582][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.548777][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.732018][ T5798] device veth0_vlan entered promiscuous mode [ 214.754198][ T5798] device veth1_vlan entered promiscuous mode [ 215.283672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.311856][ T5202] XFS (loop1): Unmounting Filesystem [ 215.331140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.361514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.422721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.469493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.490052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.514869][ T5798] device veth0_macvtap entered promiscuous mode [ 215.532399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.542128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.567400][ T5798] device veth1_macvtap entered promiscuous mode [ 215.596019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.618419][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.640328][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.659608][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.681677][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.700402][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.721884][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.740456][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.760252][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.764093][ T6059] loop0: detected capacity change from 0 to 32768 [ 215.778643][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.789424][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.812564][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.834387][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.854552][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.876185][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.889633][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.910962][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.932392][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.942934][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.953473][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.963352][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.981868][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.992104][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.003348][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.016463][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.028442][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.038520][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.061143][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.081595][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.103359][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.103443][ T6059] XFS (loop0): Mounting V5 Filesystem [ 216.123804][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.141348][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.159750][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.182814][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.216641][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.244349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.261186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.272001][ T6059] XFS (loop0): Ending clean mount [ 216.291197][ T6059] XFS (loop0): Quotacheck needed: Please wait. [ 216.309268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.318155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.336057][ T5798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.386665][ T5798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.405771][ T5798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.420587][ T6059] XFS (loop0): Quotacheck: Done. [ 216.470603][ T5798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.614639][ T4603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.623292][ T4603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.655292][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.692131][ T3654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.719302][ T3654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.748838][ T5764] XFS (loop0): Unmounting Filesystem [ 216.752035][ T6079] loop3: detected capacity change from 0 to 512 [ 216.763608][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.938183][ T6079] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.978304][ T6079] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 217.781339][ T6079] EXT4-fs (loop3): Remounting filesystem read-only [ 217.789001][ T6079] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.397: invalid indirect mapped block 1 (level 1) [ 217.808590][ T6079] EXT4-fs (loop3): 1 truncate cleaned up [ 217.814312][ T6079] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 217.918234][ T6079] kvm: pic: single mode not supported [ 217.919491][ T6079] kvm: pic: level sensitive irq not supported [ 217.926122][ T6079] kvm: pic: level sensitive irq not supported [ 218.087511][ T4203] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 218.380384][ T4203] usb 5-1: Using ep0 maxpacket: 8 [ 218.571557][ T4203] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 218.820004][ T4203] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 218.880569][ T4203] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.923716][ T4203] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.974998][ T4203] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.014545][ T4203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.550522][ T4203] usb 5-1: GET_CAPABILITIES returned 0 [ 219.556611][ T4203] usbtmc 5-1:16.0: can't read capabilities [ 219.593949][ T6103] kvm [6102]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 219.635396][ T6103] kvm [6102]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 219.651742][ T6116] loop0: detected capacity change from 0 to 512 [ 219.673494][ T6103] kvm [6102]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 219.689902][ T6103] kvm [6102]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 219.708203][ T6103] kvm [6102]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 219.731562][ T6103] kvm [6102]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 219.766774][ T6103] kvm [6102]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 220.620390][ T5384] usb 5-1: USB disconnect, device number 4 [ 220.887892][ T6101] loop3: detected capacity change from 0 to 40427 [ 220.914259][ T6128] loop1: detected capacity change from 0 to 2048 [ 221.314798][ T6101] F2FS-fs (loop3): Found nat_bits in checkpoint [ 221.394054][ T6128] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 221.600337][ T6128] UDF-fs: Scanning with blocksize 512 failed [ 221.670887][ T6128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.418531][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 223.478568][ T6145] netlink: 60 bytes leftover after parsing attributes in process `syz.4.411'. [ 223.661207][ T3657] device hsr_slave_0 left promiscuous mode [ 223.690972][ T3657] device hsr_slave_1 left promiscuous mode [ 223.727378][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.737679][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.459810][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.580291][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.628691][ T3657] device bridge_slave_1 left promiscuous mode [ 224.668560][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.722623][ T3657] device bridge_slave_0 left promiscuous mode [ 224.737330][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.773336][ T6165] binder_alloc: 6161: binder_alloc_buf, no vma [ 224.944689][ T3657] device veth1_macvtap left promiscuous mode [ 224.951355][ T3657] device veth0_macvtap left promiscuous mode [ 224.957452][ T3657] device veth1_vlan left promiscuous mode [ 224.970313][ T3657] device veth0_vlan left promiscuous mode [ 226.906835][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 226.936186][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 226.959900][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.998116][ T6170] loop4: detected capacity change from 0 to 40427 [ 227.008495][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.844995][ T6170] F2FS-fs (loop4): invalid crc value [ 227.855916][ T6170] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 227.867786][ T3657] bond0 (unregistering): Released all slaves [ 228.271672][ T6209] loop4: detected capacity change from 0 to 128 [ 228.690813][ T6209] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.298183][ T6223] Cannot find set identified by id 0 to match [ 229.363001][ T5386] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 230.009570][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 230.060527][ T5386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 230.075612][ T5386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.088987][ T6228] MPTCP: addr_signal error, rm_addr=1 [ 230.392395][ T5386] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 231.779894][ T6240] netlink: 'syz.1.437': attribute type 25 has an invalid length. [ 231.835379][ T6240] netlink: 'syz.1.437': attribute type 7 has an invalid length. [ 231.892767][ T5386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.918483][ T5386] usb 1-1: Product: syz [ 231.922878][ T5386] usb 1-1: Manufacturer: syz [ 231.927477][ T5386] usb 1-1: SerialNumber: syz [ 231.948120][ T5386] usb 1-1: config 0 descriptor?? [ 232.050477][ T5386] usb 1-1: can't set config #0, error -71 [ 233.226595][ T4203] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 233.449418][ T6266] loop3: detected capacity change from 0 to 1024 [ 233.481938][ T5386] usb 1-1: USB disconnect, device number 5 [ 233.643680][ T6266] hfsplus: unable to parse mount options [ 234.080858][ T4203] usb 2-1: device descriptor read/64, error -71 [ 234.204321][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 234.350335][ T3618] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 234.380368][ T4203] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 234.482849][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.520324][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.560327][ T6278] device bridge_slave_0 entered promiscuous mode [ 234.581612][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.621636][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.650617][ T6278] device bridge_slave_1 entered promiscuous mode [ 234.755748][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.766037][ T3618] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 234.790331][ T4203] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.798100][ T3618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.808728][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.820849][ T3618] usb 1-1: config 0 descriptor?? [ 234.870427][ T4203] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 234.878010][ T4203] usb 2-1: can't read configurations, error -71 [ 234.888691][ T4203] usb usb2-port1: attempt power cycle [ 234.916668][ T6278] team0: Port device team_slave_0 added [ 234.941920][ T6278] team0: Port device team_slave_1 added [ 234.998469][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.036592][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.090390][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.114238][ T3618] kaweth 1-1:0.0: Firmware present in device. [ 235.129426][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.145582][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.293575][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.974833][ T3618] kaweth 1-1:0.0: Statistics collection: 0 [ 235.990157][ T3618] kaweth 1-1:0.0: Multicast filter limit: 0 [ 236.360207][ T3618] kaweth 1-1:0.0: MTU: 0 [ 236.379947][ T3618] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 236.429497][ T4421] Bluetooth: hci1: command 0x0409 tx timeout [ 236.590472][ T6278] device hsr_slave_0 entered promiscuous mode [ 236.632845][ T6278] device hsr_slave_1 entered promiscuous mode [ 237.387289][ T3618] kaweth 1-1:0.0: Error setting receive filter [ 237.413011][ T3618] kaweth: probe of 1-1:0.0 failed with error -5 [ 237.435956][ T3618] usb 1-1: USB disconnect, device number 6 [ 237.478332][ T6317] device vlan2 entered promiscuous mode [ 237.500341][ T6317] device team0 entered promiscuous mode [ 237.510627][ T6317] device team_slave_0 entered promiscuous mode [ 237.522023][ T6317] device team_slave_1 entered promiscuous mode [ 237.542049][ T6317] team0: Device vlan2 is already an upper device of the team interface [ 237.645743][ T6317] device team0 left promiscuous mode [ 237.670385][ T6317] device team_slave_0 left promiscuous mode [ 237.676424][ T6317] device team_slave_1 left promiscuous mode [ 238.644064][ T3618] Bluetooth: hci1: command 0x041b tx timeout [ 238.668245][ T6326] loop1: detected capacity change from 0 to 64 [ 238.714801][ T6278] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.809573][ T6278] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.909571][ T25] audit: type=1326 audit(1727954210.965:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe397eb0ff9 code=0x0 [ 238.995122][ T6278] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.741357][ T6278] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.771629][ T4603] attempt to access beyond end of device [ 239.771629][ T4603] loop1: rw=1, want=66, limit=64 [ 239.795304][ T4603] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 239.815367][ T4603] attempt to access beyond end of device [ 239.815367][ T4603] loop1: rw=1, want=67, limit=64 [ 239.877266][ T4603] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 239.926915][ T4603] attempt to access beyond end of device [ 239.926915][ T4603] loop1: rw=1, want=68, limit=64 [ 239.937440][ T4603] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 239.946072][ T4603] attempt to access beyond end of device [ 239.946072][ T4603] loop1: rw=1, want=69, limit=64 [ 239.957046][ T4603] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 239.965602][ T4603] attempt to access beyond end of device [ 239.965602][ T4603] loop1: rw=1, want=73, limit=64 [ 239.976084][ T4603] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 239.986731][ T4603] attempt to access beyond end of device [ 239.986731][ T4603] loop1: rw=1, want=74, limit=64 [ 240.650688][ T4603] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 240.691546][ T4603] attempt to access beyond end of device [ 240.691546][ T4603] loop1: rw=1, want=77, limit=64 [ 240.707358][ T4603] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 240.715909][ T4603] attempt to access beyond end of device [ 240.715909][ T4603] loop1: rw=1, want=78, limit=64 [ 240.731602][ T6278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.738611][ T4603] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 240.748119][ T4198] Bluetooth: hci1: command 0x040f tx timeout [ 240.756429][ T4603] attempt to access beyond end of device [ 240.756429][ T4603] loop1: rw=1, want=135, limit=64 [ 240.832265][ T6278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.898409][ T6278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.133267][ T6278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.928489][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.018669][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.043503][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.124187][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.133990][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.134513][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.134851][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.134884][ T4603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.137137][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.161397][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.161945][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.162285][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.162317][ T4603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.162693][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.197970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.198747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.200027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.203256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.258821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.260086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.101115][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.101725][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.135946][ T3618] Bluetooth: hci1: command 0x0419 tx timeout [ 244.210367][ T4274] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 244.464674][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.678367][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.520539][ T4274] usb 4-1: device descriptor read/all, error -71 [ 247.285113][ T6430] loop0: detected capacity change from 0 to 512 [ 247.310621][ T6431] netlink: 'syz.3.479': attribute type 25 has an invalid length. [ 247.368601][ T6418] loop1: detected capacity change from 0 to 1764 [ 247.380806][ T6431] netlink: 'syz.3.479': attribute type 7 has an invalid length. [ 247.440678][ T6430] EXT4-fs (loop0): Ignoring removed orlov option [ 247.642366][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.649818][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.696040][ T6278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.817225][ T6430] EXT4-fs (loop0): 1 orphan inode deleted [ 247.823190][ T6430] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,orlov,usrjquota=,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue,. Quota mode: writeback. [ 247.857427][ T6430] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 247.897110][ T6448] ebtables: ebtables: counters copy to user failed while replacing table [ 248.402568][ T4274] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 250.307648][ T4274] usb 4-1: Using ep0 maxpacket: 16 [ 250.520338][ T4274] usb 4-1: device descriptor read/all, error -71 [ 250.539198][ T4274] usb usb4-port1: attempt power cycle [ 250.690058][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.738636][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.780477][ T6472] loop0: detected capacity change from 0 to 2048 [ 250.817063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.826401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.854394][ T6472] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 250.874485][ T6472] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 251.540297][ T4157] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 251.546553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.557923][ T6472] EXT4-fs (loop0): failed to initialize system zone (-117) [ 251.570590][ T6472] EXT4-fs (loop0): mount failed [ 251.595417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.609914][ T6278] device veth0_vlan entered promiscuous mode [ 251.697589][ T3657] device hsr_slave_0 left promiscuous mode [ 251.706172][ T3657] device hsr_slave_1 left promiscuous mode [ 251.763062][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.772962][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.845853][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.889475][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.940015][ T3657] device bridge_slave_1 left promiscuous mode [ 252.370956][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.400388][ T4157] usb 2-1: Using ep0 maxpacket: 16 [ 252.418126][ T6496] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.430744][ T3657] device bridge_slave_0 left promiscuous mode [ 252.436935][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.479889][ T6496] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 252.496880][ T3657] device veth1_macvtap left promiscuous mode [ 252.520703][ T3657] device veth0_macvtap left promiscuous mode [ 252.528715][ T3657] device veth1_vlan left promiscuous mode [ 252.540539][ T4157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 252.555571][ T4157] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 252.565140][ T3657] device veth0_vlan left promiscuous mode [ 252.580706][ T4157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.622276][ T4157] usb 2-1: config 0 descriptor?? [ 252.662447][ T4157] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 252.718660][ T6500] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 253.407686][ T6509] kvm: pic: level sensitive irq not supported [ 253.407755][ T6509] kvm: pic: non byte read [ 253.445730][ T6509] kvm: pic: level sensitive irq not supported [ 253.445795][ T6509] kvm: pic: non byte read [ 253.482397][ T6509] kvm: pic: level sensitive irq not supported [ 253.482474][ T6509] kvm: pic: non byte read [ 253.806773][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 254.186339][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 254.371564][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.396019][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.481414][ T3657] bond0 (unregistering): Released all slaves [ 254.602153][ T6278] device veth1_vlan entered promiscuous mode [ 254.658937][ T6278] device veth0_macvtap entered promiscuous mode [ 254.668902][ T6278] device veth1_macvtap entered promiscuous mode [ 254.731811][ T4421] usb 2-1: USB disconnect, device number 11 [ 255.506542][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.545467][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.551797][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.564060][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.644420][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.668885][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.715313][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.743106][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.754469][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.765407][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.790586][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.805038][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.841971][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.888351][ T6533] ax25_connect(): syz.2.504 uses autobind, please contact jreuter@yaina.de [ 255.984005][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.046494][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.122252][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.195730][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.257539][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.380691][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.414830][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.446795][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.464394][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.504742][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.556339][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.727238][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.737882][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.749441][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.759936][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.780263][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.790105][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.482534][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.683880][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.726423][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.768505][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.804679][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.845195][ T4157] Bluetooth: hci3: command 0x0406 tx timeout [ 257.864138][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.136606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.151090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.315931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.876280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.899562][ T6278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.916299][ T6278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.940782][ T6278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.956051][ T6278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.307030][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.338981][ T4603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.128246][ T4603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.143365][ T6560] device team_slave_0 entered promiscuous mode [ 260.149922][ T6560] device team_slave_1 entered promiscuous mode [ 260.197360][ T6560] device team_slave_0 left promiscuous mode [ 260.203369][ T6560] device team_slave_1 left promiscuous mode [ 260.397423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.446226][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.475774][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.491776][ T6572] loop0: detected capacity change from 0 to 512 [ 261.531906][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.615872][ T6572] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.629458][ T6572] ext4 filesystem being mounted at /22/bus supports timestamps until 2038 (0x7fffffff) [ 261.706666][ T6573] loop1: detected capacity change from 0 to 128 [ 262.702351][ T6593] loop4: detected capacity change from 0 to 1024 [ 262.732634][ T6573] FAT-fs (loop1): Unrecognized mount option "/dev/ppp" or missing value [ 263.272096][ T6593] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 263.505094][ T6593] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 263.528399][ T6593] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 263.718313][ T25] audit: type=1326 audit(1727954235.775:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772397ff9 code=0x7ffc0000 [ 263.874237][ T25] audit: type=1326 audit(1727954235.775:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772397ff9 code=0x7ffc0000 [ 264.710300][ T25] audit: type=1326 audit(1727954235.775:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6772397ff9 code=0x7ffc0000 [ 264.910684][ T25] audit: type=1326 audit(1727954235.775:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772397ff9 code=0x7ffc0000 [ 264.975092][ T6615] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 265.013413][ T25] audit: type=1326 audit(1727954235.775:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772397ff9 code=0x7ffc0000 [ 265.436786][ T25] audit: type=1326 audit(1727954235.805:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6772396990 code=0x7ffc0000 [ 265.696631][ T25] audit: type=1326 audit(1727954235.805:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772397ff9 code=0x7ffc0000 [ 265.718950][ T25] audit: type=1326 audit(1727954235.805:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6772397ff9 code=0x7ffc0000 [ 265.778332][ T25] audit: type=1326 audit(1727954235.805:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772397ff9 code=0x7ffc0000 [ 265.875591][ T25] audit: type=1326 audit(1727954235.805:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6772397ff9 code=0x7ffc0000 [ 268.372901][ T6667] loop4: detected capacity change from 0 to 512 [ 268.746331][ T6667] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 268.929574][ T6667] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 269.058867][ T6667] System zones: 0-2, 18-18, 34-35 [ 269.095294][ T6667] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,journal_dev=0x0000000000000005,,errors=continue. Quota mode: none. [ 269.122551][ T6677] netlink: 45 bytes leftover after parsing attributes in process `syz.1.538'. [ 269.780303][ T4274] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 269.850415][ T6679] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 270.020237][ T4274] usb 5-1: Using ep0 maxpacket: 8 [ 270.200638][ T4274] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 270.208777][ T4274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.300240][ T4274] usb 5-1: config 0 has no interface number 0 [ 270.352423][ T4274] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 270.461929][ T4274] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.556010][ T4274] usb 5-1: config 0 interface 52 has no altsetting 0 [ 270.756727][ T4274] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 270.776143][ T4274] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 270.793120][ T4274] usb 5-1: Product: syz [ 270.811569][ T4274] usb 5-1: Manufacturer: syz [ 270.816186][ T4274] usb 5-1: SerialNumber: syz [ 270.850979][ T4274] usb 5-1: config 0 descriptor?? [ 271.850425][ T4274] usb 5-1: Can not set alternate setting to 1, error: -71 [ 271.867101][ T6703] loop3: detected capacity change from 0 to 128 [ 271.873558][ T4274] synaptics_usb: probe of 5-1:0.52 failed with error -71 [ 271.933121][ T4274] usb 5-1: USB disconnect, device number 5 [ 272.005878][ T4203] libceph: connect (1)[c::]:6789 error -101 [ 272.023048][ T4203] libceph: mon0 (1)[c::]:6789 connect error [ 272.051156][ T6702] ceph: No mds server is up or the cluster is laggy [ 272.101293][ T4203] libceph: connect (1)[c::]:6789 error -101 [ 272.108937][ T6703] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.137589][ T4203] libceph: mon0 (1)[c::]:6789 connect error [ 272.146372][ T6703] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 272.195923][ T6711] loop4: detected capacity change from 0 to 8192 [ 272.391321][ T6711] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.484361][ T4203] libceph: connect (1)[c::]:6789 error -101 [ 272.490806][ T4203] libceph: mon0 (1)[c::]:6789 connect error [ 273.249592][ T5383] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 273.364357][ T6721] loop1: detected capacity change from 0 to 512 [ 273.493509][ T6721] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.540255][ T5383] usb 1-1: Using ep0 maxpacket: 16 [ 273.568971][ T6721] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038 (0x7fffffff) [ 273.662631][ T5383] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 273.717323][ T5383] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 273.738188][ T6721] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.550: Directory hole found for htree leaf block 0 [ 273.751644][ T5383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.774131][ T5383] usb 1-1: config 0 descriptor?? [ 273.774751][ T6721] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.550: path /79/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 273.993387][ T5383] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 274.421486][ T6721] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.550: path /79/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 274.442363][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.477290][ T6721] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.550: path /79/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 274.930651][ T9] wlan1: Trigger new scan to find an IBSS to join [ 274.970368][ T6736] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.550: Directory hole found for htree leaf block 0 [ 277.454280][ T6764] tipc: Started in network mode [ 277.483263][ T6764] tipc: Node identity , cluster identity 4711 [ 277.489388][ T6764] tipc: Failed to set node id, please configure manually [ 277.500452][ T6764] tipc: Enabling of bearer rejected, failed to enable media [ 277.959550][ T6777] loop3: detected capacity change from 0 to 128 [ 279.725264][ T3010] bcm5974 1-1:0.0: could not read from device [ 279.912429][ T1132] wlan1: Trigger new scan to find an IBSS to join [ 279.946560][ T6785] loop4: detected capacity change from 0 to 512 [ 280.000516][ T5383] bcm5974 1-1:0.0: could not read from device [ 280.009336][ T6777] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 280.080298][ T3010] bcm5974 1-1:0.0: could not read from device [ 280.089850][ T5383] input: failed to attach handler mousedev to device input14, error: -5 [ 280.170514][ T3010] bcm5974 1-1:0.0: could not read from device [ 280.200515][ T5383] usb 1-1: USB disconnect, device number 7 [ 280.216062][ T6785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02d, mo2=0002] [ 280.231025][ T6785] System zones: 1-12 [ 280.243238][ T5728] sysv_free_block: flc_count > flc_size [ 280.246803][ T6785] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 393240: comm syz.4.566: invalid block [ 280.254477][ T5728] sysv_free_block: flc_count > flc_size [ 280.541470][ T6796] loop1: detected capacity change from 0 to 1024 [ 281.422925][ T5728] sysv_free_block: flc_count > flc_size [ 281.428782][ T5728] sysv_free_block: flc_count > flc_size [ 281.456366][ T5728] sysv_free_block: flc_count > flc_size [ 281.505457][ T5728] sysv_free_block: flc_count > flc_size [ 281.571624][ T6785] EXT4-fs (loop4): Remounting filesystem read-only [ 281.593849][ T6785] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.566: couldn't read orphan inode 11 (err -117) [ 281.673735][ T5728] sysv_free_block: flc_count > flc_size [ 281.700480][ T3010] bcm5974 1-1:0.0: could not read from device [ 281.709959][ T5728] sysv_free_block: flc_count > flc_size [ 281.730876][ T6785] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,nombcache,commit=0x0000000000000000,errors=remount-ro,resgid=0x0000000000000000. Quota mode: none. [ 281.760423][ T5728] sysv_free_block: flc_count > flc_size [ 281.765981][ T5728] sysv_free_block: flc_count > flc_size [ 282.053988][ T6800] loop0: detected capacity change from 0 to 512 [ 282.068696][ T5728] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 282.111260][ T1132] wlan1: Creating new IBSS network, BSSID 9e:86:38:30:57:d8 [ 282.134954][ T6802] loop1: detected capacity change from 0 to 16 [ 282.328237][ T6800] EXT4-fs (loop0): Ignoring removed orlov option [ 282.362654][ T6800] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.571: inode #1: comm syz.0.571: iget: illegal inode # [ 283.144092][ T6800] EXT4-fs (loop0): Remounting filesystem read-only [ 283.150655][ T6800] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.571: error while reading EA inode 1 err=-117 [ 283.188138][ T6802] erofs: (device loop1): mounted with root inode @ nid 36. [ 283.205937][ T6800] EXT4-fs (loop0): 1 orphan inode deleted [ 283.211864][ T6800] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,nouid32,resuid=0x0000000000000000,abort,data_err=abort,abort,errors=continue,orlov,nombcache,errors=remount-ro,. Quota mode: none. [ 285.799193][ T6853] openvswitch: netlink: IPv4 tunnel dst address is zero [ 285.955517][ T6858] loop3: detected capacity change from 0 to 256 [ 288.080983][ T6878] loop1: detected capacity change from 0 to 512 [ 288.107354][ T6878] EXT4-fs (loop1): quotafile must be on filesystem root [ 289.907836][ T6897] loop4: detected capacity change from 0 to 64 [ 290.622488][ T6897] MINIX-fs: mounting file system with errors, running fsck is recommended [ 290.849513][ T6904] loop3: detected capacity change from 0 to 64 [ 290.857374][ T6903] loop0: detected capacity change from 0 to 128 [ 291.059499][ T6904] loop3: detected capacity change from 0 to 16 [ 291.459418][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 291.459454][ T25] audit: type=1800 audit(1727954263.475:60): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.595" name="bus" dev="loop0" ino=1048655 res=0 errno=0 [ 291.486002][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.466714][ T6921] hub 6-0:1.0: USB hub found [ 293.476351][ T6921] hub 6-0:1.0: 1 port detected [ 293.950222][ T6906] loop4: detected capacity change from 0 to 32768 [ 294.139324][ T4421] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 294.492489][ T4421] usb 2-1: Using ep0 maxpacket: 8 [ 294.766629][ T6933] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 294.778720][ T6933] Cannot find add_set index 0 as target [ 294.810122][ T4421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 294.839671][ T4421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.857569][ T4421] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.287000][ T4421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 295.299986][ T4421] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 295.315986][ T4421] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 295.326840][ T4421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.488526][ T4421] usb 2-1: config 0 descriptor?? [ 295.552266][ T6920] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 295.753670][ T6941] loop4: detected capacity change from 0 to 4096 [ 297.002602][ T6941] NILFS (loop4): invalid segment: Checksum error in segment payload [ 297.025401][ T4421] usb 2-1: USB disconnect, device number 12 [ 297.272811][ T6941] NILFS (loop4): trying rollback from an earlier position [ 297.294956][ T6954] loop3: detected capacity change from 0 to 128 [ 297.416263][ T6941] NILFS (loop4): recovery complete [ 297.545168][ T6960] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.556934][ T6959] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 297.576825][ T4203] Bluetooth: hci4: command 0x0409 tx timeout [ 298.504963][ T6936] chnl_net:caif_netlink_parms(): no params data found [ 298.560973][ T4274] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 299.136262][ T6974] nullb0: AHDI p1 [ 299.925898][ T3618] Bluetooth: hci4: command 0x041b tx timeout [ 299.945659][ T25] audit: type=1800 audit(1727954272.005:61): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.607" name="bus" dev="loop4" ino=13 res=0 errno=0 [ 300.040346][ T4274] usb 3-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 300.114831][ T4274] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 300.135294][ T4274] usb 3-1: config 1 has no interface number 0 [ 300.150354][ T4274] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.763202][ T4274] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 301.217230][ T4274] usb 3-1: string descriptor 0 read error: -71 [ 301.629718][ T4274] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.962042][ T4274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.097154][ T3579] Bluetooth: hci4: command 0x040f tx timeout [ 302.171558][ T4274] usb 3-1: can't set config #1, error -71 [ 302.184028][ T4274] usb 3-1: USB disconnect, device number 4 [ 302.375255][ T7014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.623'. [ 303.264723][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 303.566961][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.701416][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.709600][ T6936] device bridge_slave_0 entered promiscuous mode [ 303.718687][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.726996][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.741746][ T7024] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 303.784493][ T6936] device bridge_slave_1 entered promiscuous mode [ 304.641777][ T4203] Bluetooth: hci4: command 0x0419 tx timeout [ 304.758266][ T6936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.802497][ T7037] loop4: detected capacity change from 0 to 16 [ 304.812852][ T6936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.838591][ T7037] erofs: (device loop4): mounted with root inode @ nid 36. [ 304.873641][ T6214] device hsr_slave_0 left promiscuous mode [ 304.883735][ T7025] dccp_close: ABORT with 80 bytes unread [ 304.884652][ T7035] loop3: detected capacity change from 0 to 1024 [ 304.933567][ T6214] device hsr_slave_1 left promiscuous mode [ 304.945032][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.042859][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.052390][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.061055][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.075326][ T6214] device bridge_slave_1 left promiscuous mode [ 305.090948][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.100676][ T6214] device bridge_slave_0 left promiscuous mode [ 305.112477][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.114946][ T7035] EXT4-fs (loop3): Mount option "journal_async_commit" incompatible with ext3 [ 305.462355][ T6214] device veth1_macvtap left promiscuous mode [ 305.524191][ T6214] device veth0_macvtap left promiscuous mode [ 305.587913][ T6214] device veth1_vlan left promiscuous mode [ 305.653838][ T6214] device veth0_vlan left promiscuous mode [ 306.258083][ T7057] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 307.353252][ T6214] team0 (unregistering): Port device team_slave_1 removed [ 307.366877][ T6214] team0 (unregistering): Port device team_slave_0 removed [ 307.384935][ T5383] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 307.399349][ T7070] loop3: detected capacity change from 0 to 512 [ 307.412306][ T6214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.423147][ T5383] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 307.438819][ T6214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.505450][ T6214] bond0 (unregistering): Released all slaves [ 307.590837][ T4201] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 307.665420][ T6936] team0: Port device team_slave_0 added [ 307.675967][ T6936] team0: Port device team_slave_1 added [ 307.695423][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 307.738472][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.746116][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.771997][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.780751][ T6936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.792609][ T7072] tipc: Started in network mode [ 307.797463][ T7072] tipc: Node identity , cluster identity 4711 [ 307.804111][ T7072] tipc: Failed to set node id, please configure manually [ 307.811553][ T7072] tipc: Enabling of bearer rejected, failed to enable media [ 307.824149][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.831190][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.857074][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.865708][ T6936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.949248][ T6936] device hsr_slave_0 entered promiscuous mode [ 307.965446][ T6936] device hsr_slave_1 entered promiscuous mode [ 307.991170][ T4201] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.010246][ T4201] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 308.020814][ T4201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.042832][ T4201] usb 3-1: config 0 descriptor?? [ 308.055267][ T6936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.068598][ T6936] Cannot create hsr debugfs directory [ 308.164058][ T4201] pwc: Askey VC010 type 2 USB webcam detected. [ 309.161284][ T7084] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 309.207772][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.642'. [ 309.220855][ T4201] pwc: recv_control_msg error -71 req 02 val 2700 [ 309.262279][ T4201] pwc: recv_control_msg error -71 req 02 val 2c00 [ 309.302911][ T4201] pwc: recv_control_msg error -71 req 04 val 1000 [ 309.340683][ T4201] pwc: recv_control_msg error -71 req 04 val 1300 [ 309.366441][ T4201] pwc: recv_control_msg error -71 req 04 val 1400 [ 309.381292][ T25] audit: type=1326 audit(1727954281.445:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407afbff9 code=0x7ffc0000 [ 309.403437][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.441784][ T6936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.452706][ T4201] pwc: recv_control_msg error -71 req 02 val 2000 [ 309.470794][ T4201] pwc: recv_control_msg error -71 req 02 val 2100 [ 309.490490][ T25] audit: type=1326 audit(1727954281.465:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa407afbff9 code=0x7ffc0000 [ 309.513458][ T4201] pwc: recv_control_msg error -71 req 04 val 1500 [ 309.541425][ T4201] pwc: recv_control_msg error -71 req 02 val 2500 [ 309.575495][ T25] audit: type=1326 audit(1727954281.465:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407afbff9 code=0x7ffc0000 [ 309.598233][ T4201] pwc: recv_control_msg error -71 req 02 val 2400 [ 309.619779][ T6936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.630980][ T4201] pwc: recv_control_msg error -71 req 02 val 2600 [ 309.651408][ T4201] pwc: recv_control_msg error -71 req 02 val 2900 [ 309.661345][ T25] audit: type=1326 audit(1727954281.465:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407afbff9 code=0x7ffc0000 [ 309.683437][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.693548][ T4201] pwc: recv_control_msg error -71 req 02 val 2800 [ 309.704285][ T7100] capability: warning: `syz.3.647' uses 32-bit capabilities (legacy support in use) [ 309.718580][ T6936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.729610][ T4201] pwc: recv_control_msg error -71 req 04 val 1100 [ 309.771460][ T4201] pwc: recv_control_msg error -71 req 04 val 1200 [ 309.789221][ T25] audit: type=1326 audit(1727954281.465:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa407afbff9 code=0x7ffc0000 [ 309.847623][ T4201] pwc: Registered as video71. [ 309.864898][ T4201] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 309.895277][ T25] audit: type=1326 audit(1727954281.465:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407afbff9 code=0x7ffc0000 [ 309.910322][ T4008] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 309.938600][ T4201] usb 3-1: USB disconnect, device number 5 [ 309.990525][ T25] audit: type=1326 audit(1727954281.465:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407afbff9 code=0x7ffc0000 [ 310.015419][ T6936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.070539][ T25] audit: type=1326 audit(1727954281.475:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa407afbff9 code=0x7ffc0000 [ 310.145443][ T25] audit: type=1326 audit(1727954281.475:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407afbff9 code=0x7ffc0000 [ 310.200222][ T4008] usb 2-1: Using ep0 maxpacket: 8 [ 310.219098][ T25] audit: type=1326 audit(1727954281.475:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa407afbff9 code=0x7ffc0000 [ 310.237612][ T6936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.254771][ T7107] netlink: 76 bytes leftover after parsing attributes in process `syz.2.650'. [ 310.265715][ T4198] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 310.281434][ T6936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.320282][ T4008] usb 2-1: config 0 has no interfaces? [ 310.325773][ T4008] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 310.345876][ T6936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.402227][ T4008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.425283][ T6936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.448007][ T4008] usb 2-1: config 0 descriptor?? [ 310.609110][ T6936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.648462][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.680905][ T4198] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 310.688110][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.690046][ T4198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.711502][ T6936] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.761609][ T4198] usb 4-1: config 0 descriptor?? [ 310.770564][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.785955][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.805503][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.812606][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.890850][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.924600][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.965818][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.972957][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.091493][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.099568][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 311.102860][ T7104] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 311.127450][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 311.151652][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 311.201397][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.221276][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 311.251598][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.287790][ T6936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 311.320252][ T6936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.368607][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 311.389456][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 311.400542][ T4198] ath6kl: Failed to submit usb control message: -71 [ 311.407194][ T4198] ath6kl: unable to send the bmi data to the device: -71 [ 311.426322][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.430172][ T4198] ath6kl: Unable to send get target info: -71 [ 311.471077][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 311.510543][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.536680][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 311.562592][ T5383] usb 2-1: USB disconnect, device number 13 [ 311.828764][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.852100][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.861752][ T6936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.892208][ T7118] loop1: detected capacity change from 0 to 4096 [ 312.099259][ T6936] device veth0_vlan entered promiscuous mode [ 312.123250][ T6936] device veth1_vlan entered promiscuous mode [ 312.741218][ T6099] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 312.911312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.924736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.993148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.002043][ T7118] ntfs: volume version 3.1. [ 313.072567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.097704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.111585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.119502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.261072][ T7135] netlink: 144 bytes leftover after parsing attributes in process `syz.1.652'. [ 313.943052][ T3579] Bluetooth: hci0: command 0x0406 tx timeout [ 313.953983][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 313.977726][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.011477][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.020473][ T3579] Bluetooth: hci5: command 0x0406 tx timeout [ 314.128877][ T6936] device veth0_macvtap entered promiscuous mode [ 314.174388][ T6936] device veth1_macvtap entered promiscuous mode [ 314.950607][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.976589][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.989634][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.022191][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.040358][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.066391][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.081811][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.094829][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.105341][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.116494][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.127631][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.149546][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.191825][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.343849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 315.537355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.562146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.859300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.175623][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.189850][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.361024][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.389083][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.399699][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.410916][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.421403][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.432547][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.765749][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.776643][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.798469][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.854652][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.894702][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.906145][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.938606][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.294272][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.310219][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.997833][ T6936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.146799][ T6936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.836357][ T4198] ath6kl: Failed to init ath6kl core: -71 [ 318.917721][ T7183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.930308][ T6936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.030192][ T6936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.071195][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.094076][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.250727][ T7188] kvm [7187]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x1 [ 319.309797][ T7188] kvm [7187]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x1 [ 319.380783][ T4201] Bluetooth: hci2: command 0x0406 tx timeout [ 319.401504][ T7188] kvm [7187]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x1 [ 319.410730][ T4198] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 319.443106][ T4198] usb 4-1: USB disconnect, device number 6 [ 319.471276][ T7188] kvm [7187]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x1 [ 319.495943][ T7188] kvm [7187]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x1 [ 319.517673][ T5578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.551058][ T5578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.682937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.698281][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 319.761728][ T4605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.778435][ T4605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.833981][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 320.731799][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 321.881733][ T7216] batman_adv: batadv1: Adding interface: netdevsim0 [ 321.888376][ T7216] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.966395][ T7235] loop3: detected capacity change from 0 to 16 [ 321.976126][ T7234] input: syz0 as /devices/virtual/input/input16 [ 321.980750][ T7216] batman_adv: batadv1: Interface activated: netdevsim0 [ 322.077228][ T7235] erofs: (device loop3): mounted with root inode @ nid 36. [ 322.115587][ T7234] loop0: detected capacity change from 0 to 512 [ 322.180304][ T4008] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 322.272494][ T7234] UDF-fs: bad mount option "ÿÿ18446744073709551615" or missing value [ 322.379862][ T7243] attempt to access beyond end of device [ 322.379862][ T7243] loop3: rw=0, want=24, limit=16 [ 322.920721][ T4592] device hsr_slave_0 left promiscuous mode [ 322.931030][ T4592] device hsr_slave_1 left promiscuous mode [ 322.960673][ T4592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.980354][ T25] kauditd_printk_skb: 69 callbacks suppressed [ 322.980366][ T25] audit: type=1326 audit(1727954295.015:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa783422ff9 code=0x7fc00000 [ 323.012618][ T4592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.030257][ T4592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.048403][ T4592] device bridge_slave_1 left promiscuous mode [ 323.059269][ T25] audit: type=1326 audit(1727954295.015:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fa783422ff9 code=0x7fc00000 [ 323.083796][ T4592] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.099896][ T25] audit: type=1326 audit(1727954295.015:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa783422ff9 code=0x7fc00000 [ 323.122241][ T25] audit: type=1326 audit(1727954295.015:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa783422ff9 code=0x7fc00000 [ 323.145184][ T25] audit: type=1326 audit(1727954295.015:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa783422ff9 code=0x7fc00000 [ 323.168821][ T4592] device bridge_slave_0 left promiscuous mode [ 323.171337][ T25] audit: type=1326 audit(1727954295.015:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa783422ff9 code=0x7fc00000 [ 323.197005][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.203953][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.222686][ T25] audit: type=1326 audit(1727954295.015:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa783422ff9 code=0x7fc00000 [ 323.244868][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.254923][ T25] audit: type=1326 audit(1727954295.015:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa783422ff9 code=0x7fc00000 [ 323.683289][ T25] audit: type=1326 audit(1727954295.015:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa783422ff9 code=0x7fc00000 [ 323.750846][ T25] audit: type=1326 audit(1727954295.015:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa783422ff9 code=0x7fc00000 [ 323.792302][ T4008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.830257][ T4008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.842611][ T4008] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 323.852836][ T4008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.904956][ T7261] fuse: Unknown parameter '000000000000000000000000x0000000000000003' [ 324.026372][ T150] block nbd2: Attempted send on invalid socket [ 324.034327][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.050117][ T7263] (syz.2.687,7263,1):ocfs2_get_sector:1774 ERROR: status = -5 [ 324.058190][ T7263] (syz.2.687,7263,1):ocfs2_sb_probe:750 ERROR: status = -5 [ 324.065470][ T7263] (syz.2.687,7263,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 324.074040][ T7263] (syz.2.687,7263,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 324.132761][ T4592] device veth1_macvtap left promiscuous mode [ 324.139570][ T4592] device veth0_macvtap left promiscuous mode [ 324.282291][ T7264] xt_recent: hitcount (39939) is larger than allowed maximum (255) [ 324.367841][ T4592] device veth1_vlan left promiscuous mode [ 324.454373][ T4008] usb 2-1: config 0 descriptor?? [ 324.524528][ T4592] device veth0_vlan left promiscuous mode [ 324.796505][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 324.931785][ T7230] udc-core: couldn't find an available UDC or it's busy [ 324.946237][ T7230] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 324.993974][ T4008] samsung 0003:0419:0600.0007: unknown main item tag 0x0 [ 325.012638][ T4008] samsung 0003:0419:0600.0007: unknown main item tag 0x4 [ 325.020774][ T4008] samsung 0003:0419:0600.0007: item fetching failed at offset 4/5 [ 325.029094][ T4008] samsung 0003:0419:0600.0007: parse failed [ 325.035476][ T4008] samsung: probe of 0003:0419:0600.0007 failed with error -22 [ 325.118484][ T4592] team0 (unregistering): Port device team_slave_1 removed [ 325.131196][ T4592] team0 (unregistering): Port device team_slave_0 removed [ 325.143934][ T4592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.161793][ T4592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.228841][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'. [ 325.272339][ T4592] bond0 (unregistering): Released all slaves [ 325.317887][ T4008] usb 2-1: USB disconnect, device number 14 [ 325.473415][ T7301] loop4: detected capacity change from 0 to 128 [ 325.765329][ T7307] loop3: detected capacity change from 0 to 32768 [ 325.779724][ T7301] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 326.569483][ T7307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.698 (7307) [ 326.779499][ T27] INFO: task syz.2.306:5514 blocked for more than 145 seconds. [ 326.799868][ T27] Not tainted 5.15.167-syzkaller #0 [ 326.800605][ T7307] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 326.814351][ T7307] BTRFS info (device loop3): using free space tree [ 326.820884][ T7307] BTRFS info (device loop3): has skinny extents [ 326.831318][ T7322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.858103][ T7326] loop0: detected capacity change from 0 to 128 [ 326.874607][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.902356][ T27] task:syz.2.306 state:D stack:24032 pid: 5514 ppid: 4979 flags:0x00004004 [ 326.937079][ T27] Call Trace: [ 326.951434][ T27] [ 326.963746][ T27] __schedule+0x12c4/0x45b0 [ 326.982323][ T27] ? blk_flush_plug_list+0x452/0x490 [ 327.005435][ T27] ? release_firmware_map_entry+0x190/0x190 [ 327.065521][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 327.089199][ T7307] BTRFS info (device loop3): enabling ssd optimizations [ 327.105960][ T27] ? blk_check_plugged+0x250/0x250 [ 327.130791][ T27] ? print_irqtrace_events+0x210/0x210 [ 327.148819][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 327.165456][ T27] schedule+0x11b/0x1f0 [ 327.169862][ T27] io_schedule+0x88/0x100 [ 327.196515][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 327.224645][ T27] ? wait_on_page_bit+0x50/0x50 [ 327.245354][ T27] ? rcu_lock_release+0x20/0x20 [ 327.261630][ T27] ? bio_add_page+0x2b3/0x450 [ 327.283860][ T27] z_erofs_runqueue+0x788/0x1a80 [ 327.290197][ T27] ? tick_nohz_tick_stopped+0x77/0xb0 [ 327.296431][ T27] ? z_erofs_do_read_page+0x2600/0x2600 [ 327.302972][ T27] ? __bpf_trace_erofs_destroy_inode+0x20/0x20 [ 327.309479][ T27] z_erofs_readahead+0xc9a/0x1280 [ 327.315496][ T27] ? z_erofs_readpage+0x840/0x840 [ 327.321522][ T27] read_pages+0x159/0x8e0 [ 327.326947][ T27] ? page_cache_ra_unbounded+0x930/0x930 [ 327.335214][ T27] ? add_to_page_cache_locked+0x40/0x40 [ 327.341576][ T27] ? down_read+0x1b3/0x2e0 [ 327.346273][ T27] page_cache_ra_unbounded+0x7b0/0x930 [ 327.352702][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 327.359483][ T27] force_page_cache_ra+0x378/0x3e0 [ 327.365504][ T27] generic_fadvise+0x5ba/0x8b0 [ 327.371060][ T27] ? dump_task+0x5f0/0x5f0 [ 327.375824][ T27] ? __fdget+0x191/0x220 [ 327.380529][ T27] __x64_sys_fadvise64+0x138/0x180 [ 327.386073][ T27] do_syscall_64+0x3b/0xb0 [ 327.391185][ T27] ? clear_bhb_loop+0x15/0x70 [ 327.396216][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 327.402854][ T27] RIP: 0033:0x7f18f61faff9 [ 327.407570][ T27] RSP: 002b:00007f18f4673038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 327.416791][ T27] RAX: ffffffffffffffda RBX: 00007f18f63b2f80 RCX: 00007f18f61faff9 [ 327.425580][ T27] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 327.434822][ T27] RBP: 00007f18f626d296 R08: 0000000000000000 R09: 0000000000000000 [ 327.445350][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 327.454017][ T27] R13: 0000000000000000 R14: 00007f18f63b2f80 R15: 00007ffea1431518 [ 327.462473][ T27] [ 327.466096][ T27] INFO: task syz.2.306:5516 blocked for more than 146 seconds. [ 327.474793][ T27] Not tainted 5.15.167-syzkaller #0 [ 327.481357][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.490453][ T27] task:syz.2.306 state:D stack:25584 pid: 5516 ppid: 4979 flags:0x00004004 [ 327.500096][ T27] Call Trace: [ 327.504406][ T27] [ 327.507666][ T27] __schedule+0x12c4/0x45b0 [ 327.513202][ T27] ? release_firmware_map_entry+0x190/0x190 [ 327.519310][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 327.526232][ T27] ? preempt_schedule+0xd9/0xe0 [ 327.535235][ T27] ? release_firmware_map_entry+0x190/0x190 [ 327.542183][ T27] ? preempt_schedule+0xd9/0xe0 [ 327.547269][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 327.555718][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 327.561853][ T27] schedule+0x11b/0x1f0 [ 327.566353][ T27] io_schedule+0x88/0x100 [ 327.571577][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 327.577601][ T27] ? wait_on_page_bit+0x50/0x50 [ 327.583427][ T27] ? rcu_lock_release+0x20/0x20 [ 327.588633][ T27] ? preempt_schedule_common+0xa6/0xd0 [ 327.595116][ T27] ? preempt_schedule+0xd9/0xe0 [ 327.601792][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 327.607603][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 327.613916][ T27] do_read_cache_page+0x9c1/0x1040 [ 327.619251][ T27] erofs_namei+0x15e/0x1700 [ 327.624881][ T27] ? d_alloc_parallel+0x12ae/0x1390 [ 327.630624][ T27] erofs_lookup+0x1c0/0x460 [ 327.636185][ T27] ? erofs_namei+0x1700/0x1700 [ 327.641598][ T27] ? d_hash_and_lookup+0x1b0/0x1b0 [ 327.647042][ T27] ? __init_waitqueue_head+0xaa/0x140 [ 327.652907][ T27] __lookup_slow+0x275/0x3d0 [ 327.657841][ T27] ? lookup_one_len+0x2d0/0x2d0 [ 327.664645][ T27] ? down_read+0x1b3/0x2e0 [ 327.669412][ T27] lookup_slow+0x53/0x70 [ 327.673814][ T27] walk_component+0x48c/0x610 [ 327.678615][ T27] ? nd_alloc_stack+0xf0/0xf0 [ 327.683955][ T27] ? generic_permission+0x21c/0x4f0 [ 327.689265][ T27] ? inode_permission+0xf7/0x450 [ 327.694915][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 327.700649][ T27] ? bpf_lsm_inode_permission+0x5/0x10 [ 327.706416][ T27] ? security_inode_permission+0xad/0xf0 [ 327.712695][ T27] link_path_walk+0x642/0xd90 [ 327.717706][ T27] ? handle_lookup_down+0x130/0x130 [ 327.723587][ T27] path_lookupat+0xa9/0x450 [ 327.728475][ T27] filename_lookup+0x230/0x5c0 [ 327.733822][ T27] ? hashlen_string+0x110/0x110 [ 327.741213][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 327.747007][ T27] ? getname_flags+0x1ec/0x4e0 [ 327.752804][ T27] user_path_at_empty+0x40/0x180 [ 327.757852][ T27] path_setxattr+0xae/0x2a0 [ 327.763930][ T27] ? simple_xattr_list_add+0xf0/0xf0 [ 327.769333][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 327.777827][ T27] __x64_sys_setxattr+0xb7/0xd0 [ 327.783507][ T27] do_syscall_64+0x3b/0xb0 [ 327.788229][ T27] ? clear_bhb_loop+0x15/0x70 [ 327.793658][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 327.799855][ T27] RIP: 0033:0x7f18f61faff9 [ 327.805031][ T27] RSP: 002b:00007f18f4652038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 327.814370][ T27] RAX: ffffffffffffffda RBX: 00007f18f63b3058 RCX: 00007f18f61faff9 [ 327.823782][ T27] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000020000180 [ 327.832817][ T27] RBP: 00007f18f626d296 R08: 0000000000000000 R09: 0000000000000000 [ 327.841858][ T27] R10: 0000000000000386 R11: 0000000000000246 R12: 0000000000000000 [ 327.853995][ T27] R13: 0000000000000000 R14: 00007f18f63b3058 R15: 00007ffea1431518 [ 327.862751][ T27] [ 328.006685][ T27] [ 328.006685][ T27] Showing all locks held in the system: [ 328.075265][ T7355] netlink: 44 bytes leftover after parsing attributes in process `syz.3.698'. [ 328.235375][ T7326] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.261208][ T7326] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 328.272270][ T27] 1 lock held by khungtaskd/27: [ 328.300562][ T27] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 328.351968][ T27] 2 locks held by getty/3326: [ 328.531959][ T27] #0: ffff88814a59c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 328.618666][ T7357] syz.0.703 (pid 7357) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 328.959053][ T27] #1: ffffc9000208e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 329.002115][ T27] 2 locks held by udevd/3706: [ 329.018535][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 329.084812][ T27] #1: ffff8880b9127848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x53d/0x810 [ 329.105139][ T27] 2 locks held by kworker/1:16/4421: [ 329.111302][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 329.122709][ T27] #1: ffffc900022e7d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 329.135587][ T27] 4 locks held by kworker/u4:9/4592: [ 329.141683][ T27] #0: ffff8880171d5938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 329.153071][ T27] #1: ffffc90002f67d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 329.165707][ T27] #2: ffffffff8da261d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 329.176901][ T27] #3: ffff88805be153e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x10c/0x2f0 [ 329.188001][ T27] 1 lock held by syz.2.306/5514: [ 329.193758][ T27] #0: ffff888061b24860 (mapping.invalidate_lock#8){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 329.206242][ T27] 1 lock held by syz.2.306/5516: [ 329.212052][ T27] #0: ffff888061b246c0 (&type->i_mutex_dir_key#21){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 329.223226][ T27] 1 lock held by syz-executor/6936: [ 329.228542][ T27] #0: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 329.264473][ T27] 2 locks held by syz.2.702/7322: [ 329.272996][ T27] 3 locks held by syz.4.700/7346: [ 329.278072][ T27] #0: ffff8880745c5610 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 329.310645][ T27] #1: ffff888078868120 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x27/0x300 [ 329.338694][ T27] #2: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 329.392385][ T27] 1 lock held by udevadm/7359: [ 329.443628][ T27] [ 329.454997][ T27] ============================================= [ 329.454997][ T27] [ 329.474618][ T27] NMI backtrace for cpu 0 [ 329.478988][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 329.486990][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 329.497032][ T27] Call Trace: [ 329.500302][ T27] [ 329.503216][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 329.507892][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 329.513503][ T27] ? panic+0x860/0x860 [ 329.517555][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 329.522648][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 329.527565][ T27] ? __wake_up_klogd+0xd5/0x100 [ 329.532399][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 329.538537][ T27] ? _printk+0xd1/0x120 [ 329.542675][ T27] ? panic+0x860/0x860 [ 329.546723][ T27] ? __wake_up_klogd+0xcc/0x100 [ 329.551551][ T27] ? panic+0x860/0x860 [ 329.555598][ T27] ? __rcu_read_unlock+0x92/0x100 [ 329.560600][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 329.566645][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 329.572605][ T27] watchdog+0xe72/0xeb0 [ 329.576746][ T27] kthread+0x3f6/0x4f0 [ 329.580795][ T27] ? hungtask_pm_notify+0x50/0x50 [ 329.585802][ T27] ? kthread_blkcg+0xd0/0xd0 [ 329.590372][ T27] ret_from_fork+0x1f/0x30 [ 329.594777][ T27] [ 329.598193][ T27] Sending NMI from CPU 0 to CPUs 1: [ 329.603548][ C1] NMI backtrace for cpu 1 [ 329.603558][ C1] CPU: 1 PID: 4605 Comm: kworker/u4:12 Not tainted 5.15.167-syzkaller #0 [ 329.603574][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 329.603582][ C1] Workqueue: phy24 ieee80211_iface_work [ 329.603604][ C1] RIP: 0010:unwind_next_frame+0x63c/0x1fa0 [ 329.603622][ C1] Code: 00 74 12 48 89 df e8 23 96 91 00 48 ba 00 00 00 00 00 fc ff df 48 8b 1b 48 85 db 0f 84 e4 0e 00 00 48 83 c3 70 e9 fa 01 00 00 <49> 8d 5f 40 48 89 d8 48 c1 e8 03 80 3c 10 00 74 12 48 89 df e8 eb [ 329.603633][ C1] RSP: 0018:ffffc90002e36ee8 EFLAGS: 00000293 [ 329.603644][ C1] RAX: 0000000000000002 RBX: 0000000000000004 RCX: ffffffff8e51f6ac [ 329.603654][ C1] RDX: dffffc0000000000 RSI: ffffffff8ee78ff2 RDI: ffffffff8e51f6a8 [ 329.603664][ C1] RBP: ffffffff8ee78ff6 R08: 0000000000000001 R09: ffffc90002e37090 [ 329.603674][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1dcf1fe [ 329.603683][ C1] R13: ffffffff89bf97b5 R14: ffffffff8ee78ff2 R15: ffffc90002e36fa0 [ 329.603692][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 329.603704][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.603714][ C1] CR2: 00007f7dab8a94a8 CR3: 000000005bed7000 CR4: 00000000003506e0 [ 329.603726][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.603734][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 329.603743][ C1] Call Trace: [ 329.603747][ C1] [ 329.603753][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 329.603768][ C1] ? read_lock_is_recursive+0x10/0x10 [ 329.603783][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 329.603798][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 329.603818][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 329.603832][ C1] ? nmi_handle+0xf7/0x370 [ 329.603846][ C1] ? unwind_next_frame+0x63c/0x1fa0 [ 329.603860][ C1] ? default_do_nmi+0x62/0x150 [ 329.603876][ C1] ? exc_nmi+0xa8/0x100 [ 329.603888][ C1] ? end_repeat_nmi+0x16/0x31 [ 329.603901][ C1] ? ieee80211_bss_info_update+0x7a5/0xc80 [ 329.603919][ C1] ? unwind_next_frame+0x63c/0x1fa0 [ 329.603934][ C1] ? unwind_next_frame+0x63c/0x1fa0 [ 329.603949][ C1] ? unwind_next_frame+0x63c/0x1fa0 [ 329.603963][ C1] [ 329.603967][ C1] [ 329.603974][ C1] ? ieee80211_bss_info_update+0x7a6/0xc80 [ 329.603990][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 329.604004][ C1] arch_stack_walk+0x10d/0x140 [ 329.604021][ C1] ? ieee80211_bss_info_update+0x7a6/0xc80 [ 329.604037][ C1] stack_trace_save+0x113/0x1c0 [ 329.604049][ C1] ? deref_stack_reg+0xbe/0x110 [ 329.604063][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 329.604078][ C1] ? deref_stack_reg+0xbe/0x110 [ 329.604094][ C1] kasan_save_stack+0x36/0x60 [ 329.604110][ C1] ? kasan_save_stack+0x36/0x60 [ 329.604123][ C1] ? kasan_record_aux_stack+0xba/0x100 [ 329.604136][ C1] ? kvfree_call_rcu+0x118/0x8a0 [ 329.604149][ C1] ? cfg80211_update_known_bss+0x16b/0x9e0 [ 329.604164][ C1] ? cfg80211_bss_update+0x187/0x2280 [ 329.604177][ C1] ? cfg80211_inform_bss_frame_data+0xa13/0x20f0 [ 329.604192][ C1] ? ieee80211_bss_info_update+0x7a6/0xc80 [ 329.604225][ C1] kasan_record_aux_stack+0xba/0x100 [ 329.604238][ C1] kvfree_call_rcu+0x118/0x8a0 [ 329.604252][ C1] ? read_lock_is_recursive+0x10/0x10 [ 329.604266][ C1] ? call_rcu+0xa70/0xa70 [ 329.604283][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 329.604298][ C1] ? cmp_bss+0x2cb/0xde0 [ 329.604314][ C1] cfg80211_update_known_bss+0x16b/0x9e0 [ 329.604332][ C1] cfg80211_bss_update+0x187/0x2280 [ 329.604352][ C1] ? __kmalloc+0x168/0x300 [ 329.604365][ C1] ? cfg80211_inform_bss_frame_data+0x4f8/0x20f0 [ 329.604380][ C1] ? cfg80211_inform_bss_frame_data+0x6e6/0x20f0 [ 329.604397][ C1] cfg80211_inform_bss_frame_data+0xa13/0x20f0 [ 329.604422][ C1] ? cfg80211_parse_mbssid_data+0x3410/0x3410 [ 329.604446][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 329.604465][ C1] ieee80211_bss_info_update+0x7a6/0xc80 [ 329.604486][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 329.604507][ C1] ieee80211_ibss_rx_queued_mgmt+0x175e/0x2af0 [ 329.604522][ C1] ? mark_lock+0x98/0x340 [ 329.604542][ C1] ? ieee80211_ibss_rx_no_sta+0x720/0x720 [ 329.604556][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 329.604571][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 329.604586][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 329.604600][ C1] ? _raw_spin_unlock+0x40/0x40 [ 329.604615][ C1] ? kcov_remote_start+0x6f/0x480 [ 329.604631][ C1] ? kcov_remote_start+0xf2/0x480 [ 329.604647][ C1] ieee80211_iface_work+0x78f/0xcc0 [ 329.604666][ C1] process_one_work+0x8a1/0x10c0 [ 329.604688][ C1] ? worker_detach_from_pool+0x260/0x260 [ 329.604704][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 329.604717][ C1] ? kthread_data+0x4e/0xc0 [ 329.604731][ C1] ? wq_worker_running+0x97/0x170 [ 329.604745][ C1] worker_thread+0xaca/0x1280 [ 329.604769][ C1] kthread+0x3f6/0x4f0 [ 329.604782][ C1] ? rcu_lock_release+0x20/0x20 [ 329.604794][ C1] ? kthread_blkcg+0xd0/0xd0 [ 329.604808][ C1] ret_from_fork+0x1f/0x30 [ 329.604828][ C1] [ 330.006284][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 330.376972][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 330.384937][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.394974][ T27] Call Trace: [ 330.398241][ T27] [ 330.401156][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 330.405820][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 330.411433][ T27] ? panic+0x860/0x860 [ 330.415493][ T27] panic+0x318/0x860 [ 330.419370][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 330.424995][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 330.431132][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 330.436318][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 330.442369][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 330.448505][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 330.454651][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 330.460787][ T27] watchdog+0xeb0/0xeb0 [ 330.464948][ T27] kthread+0x3f6/0x4f0 [ 330.469002][ T27] ? hungtask_pm_notify+0x50/0x50 [ 330.474008][ T27] ? kthread_blkcg+0xd0/0xd0 [ 330.478581][ T27] ret_from_fork+0x1f/0x30 [ 330.482989][ T27] [ 330.486072][ T27] Kernel Offset: disabled [ 330.490396][ T27] Rebooting in 86400 seconds..