last executing test programs: 23.122048431s ago: executing program 4 (id=140): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r3, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 21.721840618s ago: executing program 4 (id=145): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 20.804524476s ago: executing program 4 (id=147): timerfd_create(0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001240)="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", 0x323}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x0, 0x10041, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) 18.32922508s ago: executing program 4 (id=151): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0xfc2, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x5}) close_range(r3, 0xffffffffffffffff, 0x0) 17.211524298s ago: executing program 4 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) 9.00248107s ago: executing program 1 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000240)) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000080)={0x1, @sdr={0x38415261, 0x400}}) 7.915533997s ago: executing program 1 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6.700679065s ago: executing program 0 (id=190): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3}}}}}}}, 0x0) 6.453213414s ago: executing program 1 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(r2, &(0x7f0000003080)={'a', ' *:* ', 'r\x00'}, 0x17) 5.715155963s ago: executing program 2 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a300000000008000440000000000900010073797a30000000000800034000000004"], 0x64}}, 0x0) 5.612310903s ago: executing program 3 (id=193): r0 = io_uring_setup(0x60f5, &(0x7f0000000000)={0x0, 0xbee7, 0x40, 0xfffffffc, 0x3bd}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.510366922s ago: executing program 0 (id=194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.491667032s ago: executing program 1 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) keyctl$revoke(0x3, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8002, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x1, {0x0, 0x1000, 0xffffffff}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read$FUSE(r5, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r4, r6, r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c0000000406010300000000000000000000000005000100070000001707374d2776ede34b4d2489754d1acd7b674472b4f48d7c4da34dc2410814f2092a164a85cca8cd7088ae1d62199ab342035a36424789002ec588ee1a36e07daf58003d9cc8d8319b65d379b0a2a67e791425aa0dbfe63d7f091df4cd491e9cd4da01f70e2fb51b57fba69f07fc849784a2fd996ddcada1f1e44b752c39cd901dd96d3fdf582e64e61a3500"/179], 0x1c}}, 0x0) 5.280260502s ago: executing program 2 (id=196): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0xaa, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c82013010f0001000e01030006001f0209040009"], 0x18) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r5, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) 5.279620912s ago: executing program 3 (id=197): r0 = syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000300)='./file1\x00', 0x92012, &(0x7f0000000040)=ANY=[], 0x4, 0x661, &(0x7f0000000dc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xad0c24, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="0d6c966213d4666bffa2794a"], 0x1, 0x0, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, 0x0, 0x1ff) sendfile(r5, r5, 0x0, 0x9) 4.133856559s ago: executing program 1 (id=198): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 4.080686609s ago: executing program 0 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000080)={0x1, @sdr={0x38415261, 0x400}}) 4.076404349s ago: executing program 2 (id=200): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x28de, 'syz0\x00'}, 0x2, 0x30, 0x8, r2, 0x0, 0xff, 'syz1\x00', 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3.914490659s ago: executing program 2 (id=201): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.538652634s ago: executing program 32 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.508866214s ago: executing program 2 (id=203): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000000), 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x200400, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setresuid(0x0, 0xee00, 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x0) setfsuid(0x0) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x1000000) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 1.495280164s ago: executing program 3 (id=204): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.491025254s ago: executing program 1 (id=205): syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) 1.309400123s ago: executing program 0 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 1.204169193s ago: executing program 2 (id=207): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000700)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f0000000080)={[{@noload}, {@discard}, {@nogrpid}, {@noblock_validity}]}, 0x0, 0x50e, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.203608283s ago: executing program 3 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000001090300000000000000"], 0x14}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, &(0x7f0000000300)) 177.634411ms ago: executing program 0 (id=209): r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="92", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) 168.813931ms ago: executing program 3 (id=210): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 488.57µs ago: executing program 3 (id=211): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ee50d"], 0xf8) 0s ago: executing program 0 (id=212): r0 = timerfd_create(0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xc, &(0x7f0000000180)={0x1, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 42.322042][ T4014] cgroup: Unknown subsys name 'net' [ 42.584020][ T4014] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.911728][ T4014] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 44.831864][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 44.915570][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 44.971360][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.972909][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.975193][ T4024] device bridge_slave_0 entered promiscuous mode [ 44.982554][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.984018][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.986258][ T4024] device bridge_slave_1 entered promiscuous mode [ 45.000171][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 45.011863][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 45.032134][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 45.077992][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.082876][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.084302][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.086521][ T4025] device bridge_slave_0 entered promiscuous mode [ 45.101278][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.121445][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.122999][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.124942][ T4025] device bridge_slave_1 entered promiscuous mode [ 45.141147][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.142707][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.144739][ T4027] device bridge_slave_0 entered promiscuous mode [ 45.173496][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.175071][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.177276][ T4027] device bridge_slave_1 entered promiscuous mode [ 45.187474][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.196738][ T4024] team0: Port device team_slave_0 added [ 45.217644][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.230427][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.231872][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.233886][ T4032] device bridge_slave_0 entered promiscuous mode [ 45.237279][ T4024] team0: Port device team_slave_1 added [ 45.239053][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.240567][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.242737][ T4037] device bridge_slave_0 entered promiscuous mode [ 45.246696][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.251020][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.260697][ T4025] team0: Port device team_slave_0 added [ 45.262233][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.263752][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.265948][ T4032] device bridge_slave_1 entered promiscuous mode [ 45.270239][ T4025] team0: Port device team_slave_1 added [ 45.282435][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.283919][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.286183][ T4037] device bridge_slave_1 entered promiscuous mode [ 45.332471][ T4027] team0: Port device team_slave_0 added [ 45.334403][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.335758][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.340972][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.344793][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.346162][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.351472][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.357175][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.366364][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.367788][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.372703][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.376962][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.385699][ T4027] team0: Port device team_slave_1 added [ 45.402840][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.404336][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.409797][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.425133][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.453775][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.490245][ T4025] device hsr_slave_0 entered promiscuous mode [ 45.528266][ T4025] device hsr_slave_1 entered promiscuous mode [ 45.570296][ T4032] team0: Port device team_slave_0 added [ 45.589743][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.591167][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.596004][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.611048][ T4032] team0: Port device team_slave_1 added [ 45.659991][ T4024] device hsr_slave_0 entered promiscuous mode [ 45.708216][ T4024] device hsr_slave_1 entered promiscuous mode [ 45.747958][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.749732][ T4024] Cannot create hsr debugfs directory [ 45.751315][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.752822][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.758267][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.793189][ T4037] team0: Port device team_slave_0 added [ 45.816337][ T4037] team0: Port device team_slave_1 added [ 45.818490][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.819866][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.824942][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.846034][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.847453][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.853284][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.886231][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.887668][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.893525][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.969872][ T4027] device hsr_slave_0 entered promiscuous mode [ 46.008260][ T4027] device hsr_slave_1 entered promiscuous mode [ 46.047937][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.049610][ T4027] Cannot create hsr debugfs directory [ 46.064592][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.065895][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.071427][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.129749][ T4032] device hsr_slave_0 entered promiscuous mode [ 46.178266][ T4032] device hsr_slave_1 entered promiscuous mode [ 46.218024][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.219576][ T4032] Cannot create hsr debugfs directory [ 46.339756][ T4037] device hsr_slave_0 entered promiscuous mode [ 46.398200][ T4037] device hsr_slave_1 entered promiscuous mode [ 46.437959][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.439552][ T4037] Cannot create hsr debugfs directory [ 46.536096][ T4025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.604410][ T4025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.650249][ T4025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.668486][ T4071] Bluetooth: hci4: command 0x0409 tx timeout [ 46.668576][ T3607] Bluetooth: hci2: command 0x0409 tx timeout [ 46.671327][ T3607] Bluetooth: hci0: command 0x0409 tx timeout [ 46.672677][ T3607] Bluetooth: hci3: command 0x0409 tx timeout [ 46.673904][ T3607] Bluetooth: hci1: command 0x0409 tx timeout [ 46.695317][ T4025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.809003][ T4024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.860435][ T4024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.909821][ T4024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.968659][ T4024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.045098][ T4027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.085687][ T4027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.120248][ T4027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.176454][ T4027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.233590][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.262948][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.265786][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.272579][ T4032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.300504][ T4032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.356929][ T4032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.413382][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.414974][ T4032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.457340][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.459988][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.462351][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.463861][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.481335][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.499423][ T4037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.522434][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.535737][ T4037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.562682][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.564999][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.566874][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.568300][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.575276][ T4037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.613395][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.621232][ T4037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.685301][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.688940][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.690934][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.695755][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.706604][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.709381][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.711642][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.716449][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.725992][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.728590][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.730392][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.731781][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.733512][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.736290][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.741154][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.759055][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.761161][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.763219][ T513] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.764706][ T513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.766569][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.769078][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.784797][ T4025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.788446][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.790891][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.793065][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.795104][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.799739][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.802030][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.814198][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.834188][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.836492][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.844800][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.846883][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.848368][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.851279][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.870063][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.872138][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.873992][ T513] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.875379][ T513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.893465][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.896114][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.900698][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.904283][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.908812][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.925264][ T4024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.927413][ T4024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.939235][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.941610][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.943683][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.946251][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.951126][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.969856][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.971933][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.974270][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.976772][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.984670][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.986917][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.990818][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.993194][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.995380][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.003137][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.011052][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.017729][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.019664][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.034719][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.036905][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.044784][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.046791][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.052675][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.060926][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.066371][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.077441][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.080072][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.082626][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.084161][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.097199][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.101613][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.103707][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.105833][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.107247][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.115561][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.117609][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.122606][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.124837][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.132237][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.135495][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.145723][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.172896][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.175174][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.177192][ T513] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.178669][ T513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.188793][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.191892][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.198563][ T513] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.200116][ T513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.201946][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.217635][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.220124][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.222820][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.225268][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.227549][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.242858][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.245248][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.246840][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.250278][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.252472][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.270729][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.273169][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.275717][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.279107][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.281279][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.283474][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.285616][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.289051][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.291909][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.293922][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.297653][ T4025] device veth0_vlan entered promiscuous mode [ 48.306201][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.314681][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.316325][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.321699][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.334627][ T4032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.336941][ T4032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.344620][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.346998][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.350896][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.353045][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.355984][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.359308][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.361488][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.366546][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.394789][ T4025] device veth1_vlan entered promiscuous mode [ 48.404639][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.406760][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.415319][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.446698][ T675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.449027][ T675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.451377][ T675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.486981][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.489217][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.491272][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.493331][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.495416][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.497304][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.504090][ T4025] device veth0_macvtap entered promiscuous mode [ 48.514508][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.516630][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.520349][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.523476][ T4027] device veth0_vlan entered promiscuous mode [ 48.525149][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.527184][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.533377][ T4025] device veth1_macvtap entered promiscuous mode [ 48.539529][ T4024] device veth0_vlan entered promiscuous mode [ 48.548244][ T4024] device veth1_vlan entered promiscuous mode [ 48.551159][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.553217][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.555223][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.556819][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.577574][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.582152][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.584341][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.585956][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.596960][ T4027] device veth1_vlan entered promiscuous mode [ 48.604909][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.610935][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.617513][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.620524][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.622812][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.640436][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.642755][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.645114][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.660111][ T4024] device veth0_macvtap entered promiscuous mode [ 48.662959][ T4027] device veth0_macvtap entered promiscuous mode [ 48.666069][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.671860][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.674039][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.676190][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.683494][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.686634][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.691569][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.701111][ T4025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.702982][ T4025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.704641][ T4025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.706330][ T4025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.712241][ T4024] device veth1_macvtap entered promiscuous mode [ 48.723534][ T4027] device veth1_macvtap entered promiscuous mode [ 48.725924][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.728216][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.730260][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.732545][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.745888][ T4037] device veth0_vlan entered promiscuous mode [ 48.747646][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.750240][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 48.751593][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 48.753475][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 48.754920][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 48.756298][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 48.764729][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.783489][ T4037] device veth1_vlan entered promiscuous mode [ 48.786369][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.789842][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.791860][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.814568][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.816727][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.820859][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.824278][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.826272][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.831983][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.836423][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.838920][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.840971][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.842981][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.856278][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.864488][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.866510][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.870021][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.873408][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.879482][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.881277][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.883052][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.884807][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.895498][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.897659][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.900865][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.939768][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.942101][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.945313][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.947630][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.952300][ T4037] device veth0_macvtap entered promiscuous mode [ 48.956111][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.959734][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.961741][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.963907][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.966866][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.972605][ T4027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.974407][ T4027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.976233][ T4027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.978480][ T4027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.002394][ T4037] device veth1_macvtap entered promiscuous mode [ 49.005045][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.007312][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.011364][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.013617][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.027033][ T513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.029226][ T513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.055394][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.112661][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.114783][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.116681][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.120049][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.122015][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.124065][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.127573][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.136089][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.139721][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.141763][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.143935][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.145868][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.149348][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.152745][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.158964][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.161061][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.163479][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.165548][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.187532][ T513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.189830][ T513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.194301][ T4032] device veth0_vlan entered promiscuous mode [ 49.201150][ T4037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.202888][ T4037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.204637][ T4037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.206336][ T4037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.211613][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.213767][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.215928][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.227012][ T513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.233890][ T513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.249512][ T4032] device veth1_vlan entered promiscuous mode [ 49.269113][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.271117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.273081][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.274993][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.276964][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.316617][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.321584][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.496287][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.502682][ T298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.504383][ T298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.513593][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.519928][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.530021][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.531838][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.534317][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.560864][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.635236][ T4108] netlink: 'syz.2.3': attribute type 18 has an invalid length. [ 49.668268][ T4108] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.670119][ T4108] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.672037][ T4108] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.673702][ T4108] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.351455][ T4032] device veth0_macvtap entered promiscuous mode [ 50.353587][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.398885][ T4032] device veth1_macvtap entered promiscuous mode [ 50.539306][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.541667][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.543565][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.557469][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.564061][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.566413][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.569987][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.571961][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.575128][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.623839][ T4110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.625722][ T4110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.678831][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.681171][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.683325][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.685660][ T4120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 50.690412][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.692018][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.701954][ T4120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.703557][ T4120] IPv6: NLM_F_CREATE should be set when creating new route [ 50.704940][ T4120] IPv6: NLM_F_CREATE should be set when creating new route [ 50.714177][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.849293][ T4125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 50.904532][ T4072] Bluetooth: hci4: command 0x040f tx timeout [ 50.909382][ T4072] Bluetooth: hci2: command 0x040f tx timeout [ 50.912342][ T4072] Bluetooth: hci0: command 0x040f tx timeout [ 50.914784][ T4072] Bluetooth: hci3: command 0x040f tx timeout [ 50.917206][ T4072] Bluetooth: hci1: command 0x040f tx timeout [ 51.538482][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.541058][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.543363][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.545669][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.550865][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.552944][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.554838][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.556820][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.560121][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.561704][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.563891][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.589823][ T4032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.591713][ T4032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.593369][ T4032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.595031][ T4032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.686305][ T4129] udc-core: couldn't find an available UDC or it's busy [ 51.687715][ T4129] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.744322][ T4131] loop1: detected capacity change from 0 to 256 [ 51.800385][ T4131] exfat: Bad value for 'uid' [ 52.520018][ T4129] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 52.548359][ T4129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 52.564922][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.567009][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.725956][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.750229][ T513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.754860][ T513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.772348][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.994197][ T4139] process 'syz.1.11' launched './file1' with NULL argv: empty string added [ 53.930021][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 53.953189][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 53.954553][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 53.955748][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 53.973452][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 54.288800][ T4151] loop1: detected capacity change from 0 to 2048 [ 55.759768][ T4151] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 55.807712][ T4164] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.752418][ T4167] loop3: detected capacity change from 0 to 128 [ 56.897354][ T4167] affs: No valid root block on device loop3 [ 57.078267][ T4171] tipc: Started in network mode [ 57.084842][ T4171] tipc: Node identity ee30827427b6, cluster identity 4711 [ 57.093043][ T4171] tipc: Enabled bearer , priority 0 [ 57.217013][ T4171] device syzkaller0 entered promiscuous mode [ 57.313695][ T4170] tipc: Resetting bearer [ 57.403808][ T4170] tipc: Disabling bearer [ 61.076264][ T4214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 62.724704][ T4109] libceph: connect (1)[c::]:6789 error -101 [ 62.726834][ T4109] libceph: mon0 (1)[c::]:6789 connect error [ 62.735971][ T4109] libceph: connect (1)[c::]:6789 error -101 [ 62.737525][ T4109] libceph: mon0 (1)[c::]:6789 connect error [ 62.998657][ T4109] libceph: connect (1)[c::]:6789 error -101 [ 63.000010][ T4109] libceph: mon0 (1)[c::]:6789 connect error [ 63.040813][ T4230] ceph: No mds server is up or the cluster is laggy [ 63.517631][ T4246] loop0: detected capacity change from 0 to 40427 [ 63.659814][ T4246] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 63.661659][ T4246] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 64.327874][ T4246] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.535024][ T4246] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 64.536766][ T4246] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 66.237935][ T4073] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.477935][ T4073] usb 1-1: Using ep0 maxpacket: 16 [ 68.358661][ T4073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.361344][ T4073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.810438][ T4291] loop4: detected capacity change from 0 to 64 [ 68.962999][ T4073] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 68.964968][ T4073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.974169][ T4073] usb 1-1: config 0 descriptor?? [ 68.998614][ T4073] usb 1-1: can't set config #0, error -71 [ 69.003683][ T4073] usb 1-1: USB disconnect, device number 2 [ 69.767677][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.769356][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.772732][ T21] cfg80211: failed to load regulatory.db [ 70.879065][ T4309] loop0: detected capacity change from 0 to 40427 [ 71.339632][ T4316] capability: warning: `syz.4.55' uses deprecated v2 capabilities in a way that may be insecure [ 71.349479][ T4313] loop4: detected capacity change from 0 to 512 [ 71.420173][ T13] libceph: connect (1)[c::]:6789 error -101 [ 71.421532][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 71.436661][ T4309] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.438468][ T4309] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 71.459574][ T4313] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 71.461584][ T4313] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 71.463464][ T4313] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 71.479209][ T4313] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.480919][ T4313] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 71.549389][ T4313] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.554962][ T4313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.55: bg 0: block 34: padding at end of block bitmap is not set [ 71.561510][ T4313] Quota error (device loop4): write_blk: dquota write failed [ 71.563255][ T4313] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 71.565498][ T4313] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.55: Failed to acquire dquot type 1 [ 71.572464][ T4313] EXT4-fs (loop4): 1 truncate cleaned up [ 71.596067][ T4309] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.622643][ T4309] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 71.624153][ T4309] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.630506][ T4313] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,discard,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 71.679145][ T13] libceph: connect (1)[c::]:6789 error -101 [ 71.680698][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 72.378557][ T4317] ceph: No mds server is up or the cluster is laggy [ 72.436334][ T4109] libceph: connect (1)[c::]:6789 error -101 [ 72.437707][ T4109] libceph: mon0 (1)[c::]:6789 connect error [ 72.529063][ T4332] loop1: detected capacity change from 0 to 64 [ 73.997598][ T4035] Bluetooth: Wrong link type (-22) [ 74.633441][ T4350] loop3: detected capacity change from 0 to 1024 [ 76.801398][ T4371] loop2: detected capacity change from 0 to 512 [ 77.742657][ T4371] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 77.744764][ T4371] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 77.746817][ T4371] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 77.791746][ T4371] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 77.793463][ T4371] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 77.795689][ T4371] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.804235][ T4371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.70: bg 0: block 34: padding at end of block bitmap is not set [ 77.811407][ T4371] Quota error (device loop2): write_blk: dquota write failed [ 77.812919][ T4371] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 77.814878][ T4371] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.70: Failed to acquire dquot type 1 [ 77.818615][ T4371] EXT4-fs (loop2): 1 truncate cleaned up [ 77.820824][ T4371] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,discard,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 78.768327][ T4394] loop0: detected capacity change from 0 to 64 [ 80.516965][ T4035] Bluetooth: Wrong link type (-22) [ 81.277768][ C0] sched: RT throttling activated [ 87.083763][ T4035] Bluetooth: Wrong link type (-22) [ 87.381469][ T4462] loop4: detected capacity change from 0 to 512 [ 87.662271][ T4462] ======================================================= [ 87.662271][ T4462] WARNING: The mand mount option has been deprecated and [ 87.662271][ T4462] and is ignored by this kernel. Remove the mand [ 87.662271][ T4462] option from the mount to silence this warning. [ 87.662271][ T4462] ======================================================= [ 88.151020][ T4468] loop1: detected capacity change from 0 to 64 [ 88.399251][ T4467] loop2: detected capacity change from 0 to 40427 [ 88.433662][ T4467] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 88.435239][ T4467] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 88.470469][ T4462] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.473281][ T4462] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.92: bg 0: block 248: padding at end of block bitmap is not set [ 88.503575][ T4462] Quota error (device loop4): write_blk: dquota write failed [ 88.505995][ T4462] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 88.511905][ T4467] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.521107][ T4462] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.92: Failed to acquire dquot type 1 [ 88.539533][ T4462] EXT4-fs (loop4): 1 truncate cleaned up [ 88.574501][ T4462] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 88.580960][ T4467] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 88.582510][ T4467] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.102596][ T21] libceph: connect (1)[c::]:6789 error -101 [ 89.103999][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 89.107610][ T21] libceph: connect (1)[c::]:6789 error -101 [ 89.110496][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 89.368245][ T1962] libceph: connect (1)[c::]:6789 error -101 [ 89.369663][ T1962] libceph: mon0 (1)[c::]:6789 connect error [ 89.775471][ T4040] Bluetooth: Wrong link type (-22) [ 89.778595][ T4040] Bluetooth: hci2: link tx timeout [ 89.780320][ T4040] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 90.492823][ T1962] libceph: connect (1)[c::]:6789 error -101 [ 90.494239][ T1962] libceph: mon0 (1)[c::]:6789 connect error [ 90.520811][ T4485] ceph: No mds server is up or the cluster is laggy [ 91.643134][ T4515] loop1: detected capacity change from 0 to 64 [ 92.440119][ T4109] Bluetooth: hci2: command 0x0406 tx timeout [ 93.047419][ T4528] loop1: detected capacity change from 0 to 512 [ 93.051603][ T4528] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 93.053767][ T4528] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 93.055716][ T4528] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 93.084782][ T4528] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 93.086328][ T4528] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 93.088602][ T4528] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.091578][ T4528] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.113: bg 0: block 34: padding at end of block bitmap is not set [ 93.094872][ T4528] Quota error (device loop1): write_blk: dquota write failed [ 93.096462][ T4528] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 93.098474][ T4528] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.113: Failed to acquire dquot type 1 [ 93.104981][ T4528] EXT4-fs (loop1): 1 truncate cleaned up [ 93.125433][ T4528] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,discard,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 93.638852][ T4035] Bluetooth: Wrong link type (-22) [ 93.648460][ T4035] Bluetooth: hci0: link tx timeout [ 93.651125][ T4035] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 94.584687][ T4553] loop1: detected capacity change from 0 to 64 [ 95.816223][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 95.826833][ T4567] loop3: detected capacity change from 0 to 512 [ 96.021060][ T4567] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 96.023007][ T4567] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 96.025129][ T4567] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 96.052586][ T4567] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 96.054381][ T4567] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 96.056814][ T4567] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.059568][ T4567] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.126: bg 0: block 34: padding at end of block bitmap is not set [ 96.062759][ T4567] Quota error (device loop3): write_blk: dquota write failed [ 96.064364][ T4567] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 96.066372][ T4567] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.126: Failed to acquire dquot type 1 [ 96.101405][ T4567] EXT4-fs (loop3): 1 truncate cleaned up [ 96.104326][ T4567] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,discard,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 96.260873][ T4134] libceph: connect (1)[c::]:6789 error -101 [ 96.262437][ T4134] libceph: mon0 (1)[c::]:6789 connect error [ 96.265347][ T4134] libceph: connect (1)[c::]:6789 error -101 [ 96.266918][ T4134] libceph: mon0 (1)[c::]:6789 connect error [ 96.609489][ T4035] Bluetooth: Wrong link type (-22) [ 96.614202][ T4035] Bluetooth: hci4: link tx timeout [ 96.616713][ T4035] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.279510][ T21] libceph: connect (1)[c::]:6789 error -101 [ 97.280964][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 97.345857][ T4578] ceph: No mds server is up or the cluster is laggy [ 97.382499][ T4586] loop4: detected capacity change from 0 to 1024 [ 99.551246][ T4109] Bluetooth: hci4: command 0x0406 tx timeout [ 99.626596][ T21] libceph: connect (1)[c::]:6789 error -101 [ 99.627989][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 99.633718][ T4134] libceph: connect (1)[c::]:6789 error -101 [ 99.635155][ T4134] libceph: mon0 (1)[c::]:6789 connect error [ 101.475528][ T4610] loop4: detected capacity change from 0 to 64 [ 101.606570][ T4614] loop3: detected capacity change from 0 to 1024 [ 102.252145][ T4035] Bluetooth: Wrong link type (-22) [ 102.263305][ T4035] Bluetooth: hci1: link tx timeout [ 102.265664][ T4035] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.549189][ T4630] loop2: detected capacity change from 0 to 1024 [ 104.918583][ T4109] Bluetooth: hci1: command 0x0406 tx timeout [ 109.135771][ T4687] loop3: detected capacity change from 0 to 1024 [ 110.425464][ T4035] Bluetooth: Wrong link type (-22) [ 110.428695][ T4035] Bluetooth: hci1: link tx timeout [ 110.430242][ T4035] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.314055][ T4745] loop2: detected capacity change from 0 to 1024 [ 114.766002][ T4035] Bluetooth: Wrong link type (-22) [ 114.769149][ T4035] Bluetooth: hci0: link tx timeout [ 114.770260][ T4035] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.256369][ T4753] netlink: 56 bytes leftover after parsing attributes in process `syz.3.182'. [ 119.187955][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 119.228112][ T4792] loop0: detected capacity change from 0 to 164 [ 119.367380][ T4792] attempt to access beyond end of device [ 119.367380][ T4792] loop0: rw=524288, want=263332, limit=164 [ 119.393570][ T4792] attempt to access beyond end of device [ 119.393570][ T4792] loop0: rw=0, want=263332, limit=164 [ 119.914563][ T4040] Bluetooth: Wrong link type (-22) [ 119.917348][ T4040] Bluetooth: hci1: link tx timeout [ 119.918655][ T4040] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.637400][ T4805] loop3: detected capacity change from 0 to 1024 [ 123.512980][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 124.669764][ T4849] loop2: detected capacity change from 0 to 512 [ 124.715730][ T4040] ================================================================== [ 124.717490][ T4040] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xdd0/0x31c0 [ 124.718973][ T4040] Read of size 1 at addr ffff0000d8284c0a by task kworker/u5:7/4040 [ 124.720520][ T4040] [ 124.721001][ T4040] CPU: 1 PID: 4040 Comm: kworker/u5:7 Not tainted 5.15.176-syzkaller #0 [ 124.722654][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.724609][ T4040] Workqueue: hci4 hci_rx_work [ 124.725524][ T4040] Call trace: [ 124.726166][ T4040] dump_backtrace+0x0/0x530 [ 124.727032][ T4040] show_stack+0x2c/0x3c [ 124.727841][ T4040] dump_stack_lvl+0x108/0x170 [ 124.728749][ T4040] print_address_description+0x7c/0x3f0 [ 124.729926][ T4040] kasan_report+0x174/0x1e4 [ 124.730788][ T4040] __asan_report_load1_noabort+0x44/0x50 [ 124.731903][ T4040] hci_le_meta_evt+0xdd0/0x31c0 [ 124.732885][ T4040] hci_event_packet+0xd34/0x12b4 [ 124.733851][ T4040] hci_rx_work+0x1d0/0x830 [ 124.734745][ T4040] process_one_work+0x790/0x11b8 [ 124.735790][ T4040] worker_thread+0x910/0x1034 [ 124.736690][ T4040] kthread+0x37c/0x45c [ 124.737485][ T4040] ret_from_fork+0x10/0x20 [ 124.738371][ T4040] [ 124.738820][ T4040] Allocated by task 4852: [ 124.739726][ T4040] ____kasan_kmalloc+0xbc/0xfc [ 124.740708][ T4040] __kasan_kmalloc+0x10/0x1c [ 124.741623][ T4040] __kmalloc_node_track_caller+0x234/0x448 [ 124.742836][ T4040] kmalloc_reserve+0xe8/0x270 [ 124.743739][ T4040] __alloc_skb+0x1a4/0x584 [ 124.744645][ T4040] vhci_write+0xb8/0x3b8 [ 124.745465][ T4040] vfs_write+0x884/0xb44 [ 124.746310][ T4040] ksys_write+0x15c/0x26c [ 124.747203][ T4040] __arm64_sys_write+0x7c/0x90 [ 124.748199][ T4040] invoke_syscall+0x98/0x2b8 [ 124.749123][ T4040] el0_svc_common+0x138/0x258 [ 124.750092][ T4040] do_el0_svc+0x58/0x14c [ 124.750956][ T4040] el0_svc+0x7c/0x1f0 [ 124.751760][ T4040] el0t_64_sync_handler+0x84/0xe4 [ 124.752886][ T4040] el0t_64_sync+0x1a0/0x1a4 [ 124.753822][ T4040] [ 124.754245][ T4040] The buggy address belongs to the object at ffff0000d8284800 [ 124.754245][ T4040] which belongs to the cache kmalloc-1k of size 1024 [ 124.757067][ T4040] The buggy address is located 10 bytes to the right of [ 124.757067][ T4040] 1024-byte region [ffff0000d8284800, ffff0000d8284c00) [ 124.759685][ T4040] The buggy address belongs to the page: [ 124.760781][ T4040] page:00000000ec4b4c77 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d8283800 pfn:0x118280 [ 124.763039][ T4040] head:00000000ec4b4c77 order:3 compound_mapcount:0 compound_pincount:0 [ 124.764673][ T4040] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 124.766308][ T4040] raw: 05ffc00000010200 fffffc000303ba00 0000000700000007 ffff0000c0002780 [ 124.768097][ T4040] raw: ffff0000d8283800 000000008010000f 00000001ffffffff 0000000000000000 [ 124.769802][ T4040] page dumped because: kasan: bad access detected [ 124.771083][ T4040] [ 124.771607][ T4040] Memory state around the buggy address: [ 124.772725][ T4040] ffff0000d8284b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 124.774432][ T4040] ffff0000d8284b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 124.776091][ T4040] >ffff0000d8284c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.777852][ T4040] ^ [ 124.778703][ T4040] ffff0000d8284c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.780304][ T4040] ffff0000d8284d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.781916][ T4040] ================================================================== [ 124.783527][ T4040] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 124.788003][ T4040] Bluetooth: hci4: Unknown advertising packet type: 0xff00 [ 124.788023][ T4040] Bluetooth: hci4: Unknown advertising packet type: 0x8000 [ 124.789512][ T4040] Bluetooth: hci4: Unknown advertising packet type: 0xffff [ 124.921708][ T4849] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 124.948181][ T4849] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 124.950227][ T4849] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 125.441588][ T4849] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.443364][ T4849] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 125.445453][ T4849] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.550397][ T4849] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.207: bg 0: block 34: padding at end of block bitmap is not set [ 125.558154][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 125.567022][ T4849] Quota error (device loop2): write_blk: dquota write failed [ 125.568749][ T4849] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 125.571582][ T4849] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.207: Failed to acquire dquot type 1 [ 125.603023][ T4849] EXT4-fs (loop2): 1 truncate cleaned up [ 125.621626][ T4849] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,discard,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 125.722877][ T4162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.793983][ T4162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.867737][ T4162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.944335][ T4162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.209110][ T4162] tipc: Left network mode [ 127.359736][ T4162] device hsr_slave_0 left promiscuous mode [ 127.388821][ T4162] device hsr_slave_1 left promiscuous mode [ 127.488087][ T4162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.489571][ T4162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.492255][ T4162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.493686][ T4162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.495442][ T4162] device bridge_slave_1 left promiscuous mode [ 127.496700][ T4162] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.538871][ T4162] device bridge_slave_0 left promiscuous mode [ 127.540346][ T4162] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.698088][ T4162] device veth1_macvtap left promiscuous mode [ 127.699342][ T4162] device veth0_macvtap left promiscuous mode [ 127.700578][ T4162] device veth1_vlan left promiscuous mode [ 127.701817][ T4162] device veth0_vlan left promiscuous mode [ 127.846532][ T4162] team0 (unregistering): Port device team_slave_1 removed [ 127.852721][ T4162] team0 (unregistering): Port device team_slave_0 removed [ 127.860192][ T4162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.894801][ T4162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.020916][ T4162] bond0 (unregistering): Released all slaves [ 130.453500][ T4162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.456159][ T4162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.522922][ T4162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.525070][ T4162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.594066][ T4162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.596204][ T4162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.653051][ T4162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.655121][ T4162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.836318][ T4162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.876169][ T4162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.926619][ T4162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.973862][ T4162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.069108][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.070407][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.112374][ T4162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.154876][ T4162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.205408][ T4162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.234474][ T4162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0