last executing test programs: 1m5.566493405s ago: executing program 1 (id=669): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x73, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sh\x00', 0x12, 0x0, 0x26}, 0x2c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, 0x0, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000540)=ANY=[], 0x8) sendmmsg$inet(r7, 0x0, 0x0, 0x20008000) 1m4.522925801s ago: executing program 1 (id=672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0005000024c1020000ff", 0x13}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004085) 1m3.558976894s ago: executing program 1 (id=673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{}, {&(0x7f00000004c0)="f058050000007fb7", 0x8}], 0x2}, 0x15) 1m2.918828019s ago: executing program 1 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) getpgid(r0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @tipc={{0x29, 0x4, 0x0, 0x2a, 0xbd, 0x67, 0x0, 0x69, 0x6, 0x0, @private=0xa010100, @empty, {[@timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x5, [{@remote, 0x7fffffff}, {@remote, 0x5}]}, @timestamp={0x44, 0xc, 0x84, 0x0, 0x1, [0x10000, 0x3]}, @timestamp_addr={0x44, 0x4, 0x52}, @timestamp={0x44, 0x24, 0x1e, 0x0, 0x7, [0x4, 0x7, 0x7, 0x18, 0x3ff, 0x8, 0x6, 0x401]}, @timestamp_prespec={0x44, 0x14, 0xea, 0x3, 0x0, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp={0x44, 0x28, 0xc8, 0x0, 0x2, [0x3, 0x7, 0x0, 0x8, 0x17, 0x9, 0x0, 0x8000, 0x1669]}, @lsrr={0x83, 0xb, 0x16, [@private=0xa010100, @rand_addr=0x64010101]}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, 0x2, 0x0, 0x5, 0x4, 0x4, 0x4e23, 0x4e20}}, [0x0]}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a36019b8af9a900004f78ffffffff1cccff"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000400)={0x0, 0xea60}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 1m1.930442534s ago: executing program 1 (id=677): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) setrlimit(0xa, &(0x7f0000000000)={0x80000000, 0xffffffffffff0f53}) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff, 0xff, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m0.241780385s ago: executing program 1 (id=681): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$eJzs3U1rE0Ecx/HfbJI2fSBuH0TwolQLeilWPYgIEcnVuydRmxSKoWJbQb2YikfxBXj3LfgivCi+AT158gX0tjKzk4dNNpsWm6yt3w8kbGZnZv/L7GTnH7ErAP+te7Ufn278si8jFVSQdFsKJJWlouRKrL1mo57VUcG1sC+juKUZqLOx3Uhratu5Fl5oPxU131uG8Yii6O7PvINA7kx3picE0rSfh25/ecJxjUtLupB3DJPWO8DmQAd6qekcwwEA/AP8/T/wt4l5V2QUBNKqv+2fqvv/Qd4BHK+bzYGiKLOBv/9X2plXZOz4nnG7yi+297ZcvudSOLs/aGeJhwmm1Pd5SvGVlVhg9hwlnYslmNncKmptY1/1QG9V9Xpyy2X3Xo8v3bYR0a7056amlXU+w3sr6f5s3IFbUfZrh7S51Wy4lVYn/q6lox3x75kv5pt5aEJ9VF0VPyjFyNhhciMV9o1UULLxXxve45xrZWvJp/3VajVIVFlwBznvj+CNOMtyekai9hW10P3RoNWJICtO12pRyZ8V4rNbH9FqKa1V2Pk0pNVyolXBXwlrG8+amT+ljEf7FM0H88Cs6Lc+q+bmfyyw8a3qMDPT1nE1/ZURn89Ues2iqxkO3Dm60+ViJwKPpGQC3uuJbqmy++r100Kz2dixG49TNp7P7xhfUnonpdYZ/0ZBGXXU6pZE1psoOmzP0TiDv3qsHdrvj06JnT77fih7K9tZ1mkVTGyYTF8Yp3yj9lVZF+TYN+5UjqnDKJKG7Mr5+wkTsWvag+4LZnIOCJNm110mzv/cSj5e1cXLOfu9Hmas07OTTCV6XO9kcMml4KJ7nz1SBjeX8q+Lg0e8nsgZu1zOdemKdLmn0CjziKGP85QwNX3Xo571PwAAAAAAAAAAAAAAAAAAAE6ESfyPhbzPEQAAAAAAAAAAAAAAAAAAAACAk27k83/P6tzA82DS/ka8e/5vyPN/gRPkTwAAAP//r+1ytg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x0, 0xfffffffe, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) creat(&(0x7f0000000500)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) write$P9_RLCREATE(r5, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x8, 0x4000c5}, 0x9}}, 0x18) 59.668186629s ago: executing program 32 (id=681): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x0, 0xfffffffe, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) creat(&(0x7f0000000500)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) write$P9_RLCREATE(r5, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x8, 0x4000c5}, 0x9}}, 0x18) 15.731266615s ago: executing program 2 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1df) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=126.0.0.1,port=2049,mountport=2049,proto=tOt']) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x3, 'macvlan1\x00', {0x5}, 0x6}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4000000) 15.654910596s ago: executing program 4 (id=795): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES8=r0], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000580)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}, {"f96e"}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) 12.851650515s ago: executing program 2 (id=797): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) unshare(0x28000600) statx(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) 12.486026434s ago: executing program 4 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1df) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=126.0.0.1,port=2049,mountport=2049,proto=tOt']) socket(0x10, 0x803, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x3, 'macvlan1\x00', {0x5}, 0x6}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4000000) 12.371748957s ago: executing program 2 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1df) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=126.0.0.1,port=2049,mountport=2049,proto=tOt']) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x3, 'macvlan1\x00', {0x5}, 0x6}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4000000) 11.43135659s ago: executing program 4 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1df) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=126.0.0.1,port=2049,mountport=2049,proto=tOt']) close(0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x3, 'macvlan1\x00', {0x5}, 0x6}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4000000) 10.269850239s ago: executing program 4 (id=805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0005000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1ca", 0x6}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004085) 9.268906973s ago: executing program 2 (id=807): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f00000002c0)='\n', 0x1) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd000000001a00000000ff0200000000000000000d0098000000007f00000000000000000000000100"/66], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000001240001801400018008000100ac1414bb08000200ac0314bb0c00028005004100000000002400028014000180080001000000000008000900ac1414000c000280050001000000000008000740000000000800084000000cde10a8ea1af935d155eb140c23b578ee9504b0f423674f4e36092ad124e3911c2c5f14c85ca3a94c94edbb4323da986a74b443d2fa60ce919b27244f52638e2aa56ca238b18e273c04d991e00261ca1c32cb831614509d2b1b13d20ce15f5a1b63e22e908e12e0463e2a89dec88fcaf10cb85998971144ad8d8c9d10e295"], 0x6c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40402) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000080)={0xa, {0x4000003, 0x5ffc, 0x8, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(0x0, 0x13b) 9.221205064s ago: executing program 4 (id=808): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @thr={&(0x7f0000000240)="a0f40eec10df087129377bd916b4a717f5c232bdfd7b12c559c9a6963e9fe0d622dcea151afc9c7ad9f862649b3ec90b31af47dade93fdcb277c4a7ea8b94b61e54ef126691c7b", &(0x7f0000000300)="22a192e38e27565a20a1846a2bc017"}}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x28, 0x20, 0x300, &(0x7f0000000880)="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"}) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6}}, './file0\x00'}) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) 8.393071414s ago: executing program 0 (id=809): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800012, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca593d94ff0175f5badbe0034e20162", @ANYRESOCT, @ANYRES16, @ANYRES8], 0x1, 0x1d2, &(0x7f0000000580)="$eJzslU9rE0EYxn+zO2kSzaFnrxbbi7bZgvgN7AfwAxjStRYT/3QDmlAweunFg/glCn4KD4LePYgIXupBQQ8VTxWJzM474ywNRMVQCvPA8j7vM++fmVlm5mZxr6gDPw93uyxSQtHivVJoYFlZ7WjB2m9iJ4JP2vpt0Z+L/Si2GI7ePLF0dKvT6+U7xXAGUQpmxVTIcUn/cbMp5PXjqqL4tzrzJ4PU7uzxoacVpT4tRnI58VXMg3xvQah8/t8tasx7FeCVH63Zv+ndM/s7p8akkt6kui2njyR/lVUg11dx9VHC19J5e7jbNeS63GJG27SfOxJljHFeBjHnNIxBpUx8HV3elrAMrA76d1eL4ejidr+zlW/lt7Ns/fLaq7NyRCcPYbuXr6lgGokhGg9zTpvBeA348Ht8TAAVTM3gDCiX61Lc5bxyPkhsQhLkhjUMGrzw/euipfS5xgUawP2xGc6wu7WEqaa5YZa2gSIVp62DecIRCY1y4FL3Tm9zD4VyaftoX6N9QM07mTimUb5+xS9/T+yS2A2x+2IPxLq3y71JuqzwRbyVMSzwoDMY7JSPl2Vey7yWLfrOiXR1r6FyM6kTEREREREREXFK8CsAAP//TTFPEQ==") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)={0x2, 0xa, 0x7, 0x7, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa965}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x60040, 0x30, 0x21}, 0x18) r11 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r11, 0x4054561e, &(0x7f0000000600)={0x0, "126ebf7d9fdf9aec84c0fe4cb734f282d46938152a71b9399c8d590c79cfaf41", 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r13, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) 8.17784952s ago: executing program 2 (id=811): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x2d, 0x107, 0xfffffffe, 0x1, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488d1}, 0x4004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000500)={0xbb, 0x10000}, 0xc) socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000200)=@generic={0x1, 0x2000000000000001, 0xf}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x2000003, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)=@in={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002640), 0x0, &(0x7f0000002680)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x40}}, @init={0x18, 0x84, 0x0, {0x5, 0x1, 0xaf, 0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x68, 0x30}, 0x40020) 8.14892461s ago: executing program 4 (id=812): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xc0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) unshare(0x28000600) statx(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) 8.112875361s ago: executing program 5 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1df) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=126.0.0.1,port=2049,mountport=2049,proto=tOt']) socket(0x10, 0x803, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x3, 'macvlan1\x00', {0x5}, 0x6}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4000000) 7.953539115s ago: executing program 0 (id=814): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x4, 0x8, '\x00', &(0x7f0000000180)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400009c00000000e4e1e0fe80208c3abcd362ca885bdeff7a481c7ea0a803977359148a3c4e4bd4d9d8032d921910051d320efe752233d7e8b74eb6d43ab8bafdcad60165edc7b9528eac8b3b16fd310a059dc89a6699d0fce80a6bea4017ee279a144c0f6904c6d9082aab0a7b35a12775e92f18d569b42d4c3936b991"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="182200000000006f36e581000000e0bf33aa00263cc7ba"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1f}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) shutdown(r6, 0x1) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='-+\x00', r7) 6.861669452s ago: executing program 5 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000) kcmp(r2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000040)=0xfffc, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)={0x60, 0x0, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040001}, 0x800) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000000380)="170000000200010000ffbe8c5ee17688a20033000301fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3c63e5a1b47b63a6323ded223", 0xb8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8004, &(0x7f00000000c0)={[{@shortname_win95}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@rodir}, {@fat=@discard}, {@shortname_winnt}]}, 0xfc, 0x259, &(0x7f0000000540)="$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") r8 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000040)=0xff, 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x5, 0x2, 0x0, 0x80}, 0x10}}, 0x8800) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="030427bd7000fddbdf250e0000003400035bd20001000080000008000200f9ffffff0800010003000000080003000000000008001300e21a000008000300040000000c000180080003000500000034100980080001000700000008000100080002000100000008000200"], 0x88}}, 0x40040) 6.795949244s ago: executing program 0 (id=816): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f00000001c0)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) clock_gettime(0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESDEC=r7, @ANYBLOB], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 5.647808702s ago: executing program 0 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1df) socket(0x10, 0x803, 0x0) close(0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x3, 'macvlan1\x00', {0x5}, 0x6}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4000000) 5.625248242s ago: executing program 3 (id=818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0005000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1ca", 0x6}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004085) 5.611382402s ago: executing program 5 (id=819): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x202, 0x82) 4.604390617s ago: executing program 0 (id=820): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="021606030600006f45bd7000fedbdf250400170096270000020000000000000000000000400000001c800000000000007a31a5ef12930f2931b41c91538676136d80f688242d4029408a0aec5247722322a4f1f8abb68f296b0c028b67d40e1f65b2538736ac0251da14d8e136797c7d024ee25cf2187be76ad58271aa0cddfc8498efbbf25358c7373a368aaf96dbf8c95ddf24da083d9a6de652cdc68283f2f3cb3d5ef675d3c5bf42f5698f3a81ccb816109244bab27ed1d3d06d744b173e2c65c8c1e43693f2"], 0x30}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0xb, 0x9, 0x7fff0000}]}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r1, 0xcc8c8000) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000180)=0x400000) 4.322481334s ago: executing program 2 (id=821): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005480)={'wlan0\x00'}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d1200383aff20010000000000000000000000000001ff020000000000000000000000000001010190780f000000606c0f42fff56c01fe8000000000000000000000000096a3e90bd0f001e4003bfc000000000000000000000000000001"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000900)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0xd, 0x4, 0x0, 0x6, 0x3c, 0x64, 0x0, 0x5, 0x2, 0x0, @empty, @empty, {[@generic={0xc7, 0x2}, @ssrr={0x89, 0x1b, 0x53, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @loopback, @loopback, @local, @broadcast]}]}}, {0x12, 0xf9, 0x0, @loopback}}}}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000"/66], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xcf}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xdbd}}]}, 0x30}}, 0x48040) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_io_uring_setup(0x7dd1, &(0x7f00000003c0)={0x0, 0x50b6, 0x2, 0x3, 0x167}, &(0x7f0000000500), &(0x7f0000000040), &(0x7f0000000000)) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(0x0, 0x0) io_uring_enter(r5, 0xfffffdff, 0xe875, 0x3, &(0x7f0000000240)={[0xfffffffffffffffc]}, 0x8) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1, 0x7, 0x8) ioctl$XFS_IOC_FSGROWFSDATA(r6, 0x400c586e, &(0x7f0000000000)={0x6, 0x8fe}) preadv(r6, &(0x7f0000002740)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1, 0x4, 0xa) 3.786894207s ago: executing program 3 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00') read$FUSE(r4, &(0x7f0000006280)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f0000002700)={0x6}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000001040)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8004, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x4, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0xd, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x6, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0xb40, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7dff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac6, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffd, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x400, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0x0, 0x19, 0x542c, 0xd0, 0x3200, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xffffffff, 'bond_slave_0\x00', 'vlan1\x00'}, 0x32020000, 0x70, 0xd0, 0x6400, {0x500000000000000, 0xffffffffa0028000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x80000, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) 3.397809217s ago: executing program 5 (id=823): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x84) msgsnd(r0, &(0x7f0000002580)=ANY=[], 0x401, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ptrace(0x10, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000500)={{0x3, 0x4, 0x8edf, 0x1, 'syz0\x00', 0x5}, 0x6, 0x4, 0x0, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f0000000040)=['\x16%*\\!!\'!}\':\x00'], 0xc}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, 0x0, 0x4000080) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000), 0x0) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) bind$bt_hci(r3, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x4c014) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x3c, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88}, 0x80) write(0xffffffffffffffff, 0x0, 0x0) 3.197902712s ago: executing program 0 (id=824): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x202, 0x82) 2.603853186s ago: executing program 3 (id=825): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 2.490197949s ago: executing program 3 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1df) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=126.0.0.1,port=2049,mountport=2049,proto=tOt']) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x3, 'macvlan1\x00', {0x5}, 0x6}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4000000) 1.475493844s ago: executing program 3 (id=827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) prctl$PR_SET_SECUREBITS(0x1c, 0xb3d6f486854de123) socket$inet6_udplite(0xa, 0x2, 0x88) clock_adjtime(0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) fsmount(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x4e8, 0x7}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 124.979517ms ago: executing program 5 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x4, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xdb, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffc2, @private0, 0x7}}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x78}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r1, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0xc, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x4, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 85.839278ms ago: executing program 3 (id=829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000006c00000095", @ANYBLOB="273c01210889dc6801b463db8b820566469a1a26f057e57dd3d7f45c7b7ff4e7cfc768ad91b2a4f0a707166f7462103cd9113988db3c8a8c02613ce3817a102a3457f2f4c44c10e231e28b75b7a0ddc6f6710a7d83458980aae278c23c160f1a320a9393f9d4b8b922a048615bbc29291d3ca488d664dd7eb0b621eccedce308dec70d816b9c3adf1f36786d1d6efc031409ff0730faa44907ed628be773649565d5b582636068dd"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) migrate_pages(0x0, 0xfc, &(0x7f0000000080)=0xffffffffffff6df7, &(0x7f0000000240)=0x1) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$key(0xf, 0x3, 0x2) write$binfmt_script(r4, 0x0, 0x6f4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r5, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x14a}}, './file0\x00'}) write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '+#(]&(\\)\''}, {0x20, 'syzkaller\x00'}, {0x20, 'syzkaller\x00'}], 0xa, "243f2cbfd1b3700dffada1133af5ef209ef4ba5c787326efc9eb6980fec1c3eca35af6353b7ebb55ce549b786e3a6097e0c9dc406eb8e0f2344cc019b92f02d2a1705f43dafd25d55e526239000c4895286c6b77ae8836525a80f1d0441ef571f51cc52cb66763b5c51335bd10d335d5e913c2466f5e7a0185c09d735560d6846924206385531d464445d2f682dda1b8b38ff45b4efc7b3573fbff29a33f34b3cab6294a51c9dfbd95a7c494e4"}, 0xda) 0s ago: executing program 5 (id=830): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x8) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 38.214191][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.225864][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. syzkaller login: [ 57.680842][ T4174] cgroup: Unknown subsys name 'net' [ 57.813201][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.089883][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.869730][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 60.954045][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 60.992502][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.022794][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.101902][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 61.114394][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.122476][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.130725][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.170778][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.177860][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.186196][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.193798][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.201184][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.209176][ T4193] device bridge_slave_0 entered promiscuous mode [ 61.233114][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.240377][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.248227][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.262134][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.269322][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.277354][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.284904][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.292159][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.300950][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.311295][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.318888][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.326684][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.344247][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.351463][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.359347][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.382425][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.400200][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.433742][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.455466][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.467013][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.484459][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.493788][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.501200][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.509020][ T4202] device bridge_slave_0 entered promiscuous mode [ 61.517523][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.529012][ T4194] team0: Port device team_slave_0 added [ 61.543854][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.557989][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.565396][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.573152][ T4202] device bridge_slave_1 entered promiscuous mode [ 61.594319][ T4194] team0: Port device team_slave_1 added [ 61.623638][ T4186] team0: Port device team_slave_0 added [ 61.637152][ T4186] team0: Port device team_slave_1 added [ 61.665085][ T4193] team0: Port device team_slave_0 added [ 61.672835][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.683003][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.690103][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.716319][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.734535][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.741806][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.768256][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.781974][ T4187] team0: Port device team_slave_0 added [ 61.789129][ T4193] team0: Port device team_slave_1 added [ 61.795845][ T4187] team0: Port device team_slave_1 added [ 61.803315][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.813312][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.820745][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.847356][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.887404][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.894514][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.921363][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.958769][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.965745][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.992200][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.009912][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.017025][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.043270][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.060137][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.067103][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.093389][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.106970][ T4202] team0: Port device team_slave_0 added [ 62.130438][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.137401][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.163676][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.175852][ T4202] team0: Port device team_slave_1 added [ 62.192858][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.200478][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.210369][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.217621][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.224681][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.232616][ T4194] Cannot create hsr debugfs directory [ 62.271935][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.278995][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.285512][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.293318][ T4193] Cannot create hsr debugfs directory [ 62.306279][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.313496][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.339637][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.378662][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.385641][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.412105][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.452535][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.459567][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.466613][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.474427][ T4187] Cannot create hsr debugfs directory [ 62.528024][ T4202] device hsr_slave_0 entered promiscuous mode [ 62.534939][ T4202] device hsr_slave_1 entered promiscuous mode [ 62.542002][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.549968][ T4202] Cannot create hsr debugfs directory [ 62.629048][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 62.629048][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 62.629477][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 62.647391][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 62.653626][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 62.822380][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.836236][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.845356][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.855101][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.919628][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.937839][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.955484][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.985292][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.995493][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.020464][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.030102][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.051470][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.064687][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.089669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.099859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.120659][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.144459][ T4202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.169407][ T4202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.179082][ T4202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.188523][ T4202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.220554][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.231901][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.241287][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.248577][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.289019][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.301687][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.311591][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.323548][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.340099][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.350100][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.358847][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.365883][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.374145][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.383404][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.392418][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.400503][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.421738][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.432410][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.448628][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.458274][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.467147][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.476256][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.495199][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.504055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.515623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.556731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.565394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.575146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.583956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.593520][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.600632][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.608994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.617537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.626469][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.633703][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.641660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.650107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.659079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.676147][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.685463][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.696977][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.707452][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.732304][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.743762][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.754460][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.763695][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.772602][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.781723][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.806008][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.814721][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.824060][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.833579][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.842299][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.851038][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.860839][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.869970][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.877111][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.885572][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.895871][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.911780][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.921426][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.930603][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.937720][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.962264][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.981189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.999698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.016540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.026897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.036755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.057236][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.066871][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.076599][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.086858][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.101786][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.127665][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.150268][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.160011][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.191895][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.203431][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.223304][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.231935][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.242478][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.251598][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.259809][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.269531][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.277862][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.285204][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.294151][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.306140][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.316688][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.325466][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.332570][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.368462][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.377228][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.392688][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.404778][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.412387][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.421476][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.430654][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.440069][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.447246][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.455051][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.464199][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.474452][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.497497][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.515805][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.566643][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.579409][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.586974][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.595536][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.604175][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.612125][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.621019][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.630592][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.640033][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.648725][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.657125][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.665648][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.674650][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.683625][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.693047][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.702640][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.711496][ T2285] Bluetooth: hci1: command 0x041b tx timeout [ 64.712113][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.725706][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 64.731819][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.732285][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.742117][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 64.752467][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.761391][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 64.762488][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.767549][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 64.794714][ T4202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.806339][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.834503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.853003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.862647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.876557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.889783][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.900999][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.913992][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.947497][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.965915][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.990819][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.013484][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.029644][ T4194] device veth0_vlan entered promiscuous mode [ 65.046300][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.086474][ T4194] device veth1_vlan entered promiscuous mode [ 65.095769][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.114074][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.165373][ T4186] device veth0_vlan entered promiscuous mode [ 65.179496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.189644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.200083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.208828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.217075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.225943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.254192][ T4187] device veth0_vlan entered promiscuous mode [ 65.268037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.277267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.287819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.295896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.304510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.313231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.324736][ T4186] device veth1_vlan entered promiscuous mode [ 65.342890][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.354657][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.364673][ T4194] device veth0_macvtap entered promiscuous mode [ 65.373297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.383133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.391640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.400737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.409978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.417604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.425506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.436018][ T4187] device veth1_vlan entered promiscuous mode [ 65.450189][ T4194] device veth1_macvtap entered promiscuous mode [ 65.474255][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.510849][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.521039][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.530904][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.539122][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.547624][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.557416][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.567323][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.576220][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.585896][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.598711][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.606957][ T4186] device veth0_macvtap entered promiscuous mode [ 65.629739][ T4187] device veth0_macvtap entered promiscuous mode [ 65.636956][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.645734][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.655350][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.664564][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.673314][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.681625][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.690352][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.699457][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.707951][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.716197][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.727181][ T4186] device veth1_macvtap entered promiscuous mode [ 65.736958][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.745120][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.754883][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.767405][ T4202] device veth0_vlan entered promiscuous mode [ 65.776905][ T4187] device veth1_macvtap entered promiscuous mode [ 65.786989][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.796546][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.807454][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.816671][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.835900][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.847593][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.859906][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.872017][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.883089][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.895095][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.906210][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.919230][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.927961][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.937009][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.949702][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.957616][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.966291][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.975775][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.984730][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.012127][ T4202] device veth1_vlan entered promiscuous mode [ 66.060543][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.075837][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.087023][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.097873][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.109584][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.116981][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.126045][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.135640][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.145606][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.160693][ T4193] device veth0_vlan entered promiscuous mode [ 66.185381][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.201549][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.213387][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.224017][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.235745][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.247880][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.255874][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.264479][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.273365][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.286889][ T4193] device veth1_vlan entered promiscuous mode [ 66.324061][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.342784][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.353755][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.362931][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.384345][ T4202] device veth0_macvtap entered promiscuous mode [ 66.403586][ T4202] device veth1_macvtap entered promiscuous mode [ 66.411319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.419794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.427776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.437783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.446602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.484950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.526717][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.532836][ T4193] device veth0_macvtap entered promiscuous mode [ 66.541600][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.563180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.575108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.583991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.592564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.607691][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.618354][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.628834][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.639280][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.649169][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.660664][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.672040][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.681791][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.692606][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.702743][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.714200][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.724279][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.734756][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.745575][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.759092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.760374][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.769161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.782876][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.790540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.791218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.799206][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 66.813906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.824779][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 66.826654][ T4193] device veth1_macvtap entered promiscuous mode [ 66.831249][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 66.844116][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 66.850443][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 66.852801][ T4202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.868029][ T4202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.877323][ T4202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.886729][ T4202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.904518][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.912866][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.923238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.934668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.955157][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.966094][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.976414][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.989455][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.999631][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.010353][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.020758][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.032348][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.043446][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.057731][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.073040][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.083288][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.094146][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.104275][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.115951][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.127959][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.138894][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.150991][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.163641][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.172894][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.182398][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.200751][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.219852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.230629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.240972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.249988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.278707][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.286564][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.308132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.405214][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.418868][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.548577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.239029][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.246875][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.307107][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.321948][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.353278][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.370310][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.607793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.616391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.625575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.001669][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 69.015176][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 69.057351][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.058780][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 69.079638][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.088001][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 69.099881][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.102194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.109365][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.117276][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 69.134745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.408097][ C1] sched: RT throttling activated [ 71.306455][ T4307] capability: warning: `syz.1.9' uses deprecated v2 capabilities in a way that may be insecure [ 71.362040][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.371322][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.528098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.548098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.639637][ T4297] ODEBUG: Out of memory. ODEBUG disabled [ 71.648092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.658092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.668096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.678096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.688101][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.698098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.708104][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.718095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.781324][ T4304] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.829197][ T4304] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 75.268275][ T2285] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.464422][ T4360] loop4: detected capacity change from 0 to 2048 [ 75.579103][ T4360] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.750877][ T4360] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.646373][ T4395] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.348420][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 77.403550][ T4401] netlink: 'syz.3.40': attribute type 29 has an invalid length. [ 77.498167][ T4401] netlink: 'syz.3.40': attribute type 29 has an invalid length. [ 77.509630][ T4401] netlink: 'syz.3.40': attribute type 29 has an invalid length. [ 77.519678][ T4401] netlink: 'syz.3.40': attribute type 29 has an invalid length. [ 78.484698][ T4393] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 79.492967][ T4426] ipt_REJECT: ECHOREPLY no longer supported. [ 79.564881][ T4425] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.775850][ T4444] misc userio: Invalid payload size [ 80.791748][ T4444] netlink: 120 bytes leftover after parsing attributes in process `syz.1.37'. [ 81.243020][ T4441] loop2: detected capacity change from 0 to 2048 [ 82.556219][ T4446] input: syz1 as /devices/virtual/input/input5 [ 82.819027][ T4441] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.135761][ T4460] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 83.151288][ T4460] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 83.164858][ T4460] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.164858][ T4460] [ 83.175196][ T4460] EXT4-fs (loop2): Total free blocks count 0 [ 83.181267][ T4460] EXT4-fs (loop2): Free/Dirty block details [ 83.187284][ T4460] EXT4-fs (loop2): free_blocks=4096 [ 83.192610][ T4460] EXT4-fs (loop2): dirty_blocks=32 [ 83.198544][ T4460] EXT4-fs (loop2): Block reservation details [ 83.204603][ T4460] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 83.462153][ T4231] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 83.596419][ T4374] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 83.659427][ T4374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.659427][ T4374] [ 83.698307][ T4231] usb 1-1: device descriptor read/64, error -71 [ 83.988272][ T4231] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 84.202329][ T4231] usb 1-1: device descriptor read/64, error -71 [ 84.420214][ T4231] usb usb1-port1: attempt power cycle [ 86.448827][ T4485] loop1: detected capacity change from 0 to 1764 [ 86.794312][ T1111] cfg80211: failed to load regulatory.db [ 87.489914][ T4499] capability: warning: `syz.3.56' uses 32-bit capabilities (legacy support in use) [ 87.599150][ T4510] syz.1.57 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.712511][ T4509] loop0: detected capacity change from 0 to 32768 [ 87.746832][ T4515] device syzkaller0 entered promiscuous mode [ 87.803394][ T4522] loop3: detected capacity change from 0 to 16 [ 87.904276][ T4522] erofs: (device loop3): mounted with root inode @ nid 36. [ 88.018575][ T4509] XFS (loop0): Mounting V5 Filesystem [ 88.028405][ T2285] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 88.103787][ T4509] XFS (loop0): Ending clean mount [ 88.117876][ T4509] XFS (loop0): Quotacheck needed: Please wait. [ 88.207424][ T4539] futex_wake_op: syz.4.66 tries to shift op by 144; fix this program [ 88.498175][ T2285] usb 3-1: device descriptor read/64, error -71 [ 89.250037][ T4509] XFS (loop0): Quotacheck: Done. [ 89.587946][ T2285] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.608294][ T26] audit: type=1800 audit(1786469487.758:2): pid=4542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.59" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 89.925947][ T4544] loop1: detected capacity change from 0 to 64 [ 89.930629][ T4193] XFS (loop0): Unmounting Filesystem [ 90.037479][ T2285] usb 3-1: device descriptor read/64, error -71 [ 90.770192][ T2285] usb usb3-port1: attempt power cycle [ 91.621786][ T4564] loop2: detected capacity change from 0 to 256 [ 91.666269][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 91.699184][ T4562] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.708465][ T4562] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.717535][ T4562] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.726278][ T4562] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.758000][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 91.770826][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 91.781616][ T4562] Zero length message leads to an empty skb [ 92.104498][ T4564] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 92.114464][ T4568] device syzkaller0 entered promiscuous mode [ 92.166776][ T4563] attempt to access beyond end of device [ 92.166776][ T4563] loop2: rw=16777216, want=8247, limit=256 [ 92.190172][ T4563] attempt to access beyond end of device [ 92.190172][ T4563] loop2: rw=16777216, want=10767, limit=256 [ 92.221585][ T4563] attempt to access beyond end of device [ 92.221585][ T4563] loop2: rw=16777216, want=15703, limit=256 [ 92.240829][ T4563] attempt to access beyond end of device [ 92.240829][ T4563] loop2: rw=16777216, want=17775, limit=256 [ 92.265267][ T4563] attempt to access beyond end of device [ 92.265267][ T4563] loop2: rw=16777216, want=20887, limit=256 [ 92.267399][ T26] audit: type=1800 audit(1786469490.358:3): pid=4563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.72" name="file1" dev="loop2" ino=1048590 res=0 errno=0 [ 92.306249][ T4563] attempt to access beyond end of device [ 92.306249][ T4563] loop2: rw=16777216, want=28447, limit=256 [ 92.333399][ T4563] attempt to access beyond end of device [ 92.333399][ T4563] loop2: rw=16777216, want=32943, limit=256 [ 93.794080][ T4580] loop0: detected capacity change from 0 to 1764 [ 93.919975][ T4587] futex_wake_op: syz.3.78 tries to shift op by 144; fix this program [ 95.133461][ T4601] autofs4:pid:4601:autofs_fill_super: called with bogus options [ 95.160303][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.176171][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.184592][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.661109][ T4598] hub 8-0:1.0: USB hub found [ 96.666217][ T4598] hub 8-0:1.0: 1 port detected [ 97.684248][ T4612] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 97.885485][ T4617] futex_wake_op: syz.4.87 tries to shift op by 144; fix this program [ 99.141739][ T4622] loop1: detected capacity change from 0 to 64 [ 99.926408][ T4635] loop2: detected capacity change from 0 to 1764 [ 100.462754][ T4642] device syzkaller0 entered promiscuous mode [ 100.686553][ T4649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.612454][ T4675] Config c/1 of g1 needs at least one function. [ 102.620083][ T4675] udc dummy_udc.0: failed to start g1: -22 [ 102.748582][ T4676] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 104.536060][ T4697] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.915268][ T4702] loop4: detected capacity change from 0 to 64 [ 105.957712][ T4716] loop2: detected capacity change from 0 to 1764 [ 108.079265][ T4733] tipc: Started in network mode [ 108.084488][ T4733] tipc: Node identity 4, cluster identity 4711 [ 108.090917][ T4733] tipc: Node number set to 4 [ 108.673797][ T4738] device syzkaller0 entered promiscuous mode [ 108.701485][ T4741] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.792171][ T4755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.119'. [ 109.910338][ T4755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.918167][ T4755] IPv6: NLM_F_CREATE should be set when creating new route [ 110.141800][ T4755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.119'. [ 110.224498][ T4768] ipt_REJECT: ECHOREPLY no longer supported. [ 110.564857][ T4765] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.854233][ T4775] loop3: detected capacity change from 0 to 128 [ 112.047141][ T4785] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.376026][ T4797] device syzkaller0 entered promiscuous mode [ 112.451238][ T4799] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4799] [ 112.499689][ T4201] Bluetooth: Wrong link type (-22) [ 112.912853][ T4803] device syzkaller0 entered promiscuous mode [ 114.213824][ T4830] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 115.610759][ T4839] ipt_REJECT: ECHOREPLY no longer supported. [ 115.620506][ T4839] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.715525][ T4841] loop2: detected capacity change from 0 to 16 [ 116.272169][ T4841] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 116.306731][ T4843] loop0: detected capacity change from 0 to 1024 [ 116.836393][ T4847] 9pnet_virtio: no channels available for device syz [ 117.358224][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 117.370314][ T4850] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.379119][ T4850] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.387831][ T4850] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.396590][ T4850] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.413452][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 117.422910][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 118.733467][ T4881] device syzkaller0 entered promiscuous mode [ 118.972084][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 118.981408][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 118.991068][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 119.000040][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 119.009365][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 119.018144][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 119.027132][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 119.046046][ T4892] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.176891][ T4892] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.198978][ T4892] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.216828][ T4892] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.235284][ T4892] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.274119][ T4892] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.294542][ T4892] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.315145][ T4892] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.387194][ T4892] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.589608][ T4892] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 120.362847][ T4904] loop3: detected capacity change from 0 to 512 [ 120.694779][ T4904] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.156: iget: bad i_size value: 38620345925642 [ 120.718916][ T4888] syz.1.152 (4888) used greatest stack depth: 20752 bytes left [ 120.762775][ T4904] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.156: couldn't read orphan inode 15 (err -117) [ 120.830082][ T4904] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.017232][ T4904] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.156: bg 0: block 5: invalid block bitmap [ 121.045459][ T4904] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 196 with error 28 [ 121.098283][ T4904] EXT4-fs (loop3): This should not happen!! Data will be lost [ 121.098283][ T4904] [ 121.142331][ T4904] EXT4-fs (loop3): Total free blocks count 0 [ 121.159313][ T4904] EXT4-fs (loop3): Free/Dirty block details [ 121.178356][ T4904] EXT4-fs (loop3): free_blocks=0 [ 121.194100][ T4904] EXT4-fs (loop3): dirty_blocks=196 [ 121.205446][ T4904] EXT4-fs (loop3): Block reservation details [ 121.223867][ T4904] EXT4-fs (loop3): i_reserved_data_blocks=196 [ 122.130008][ T4956] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 122.543142][ T4957] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 123.225355][ T4968] Mass Storage Function, version: 2009/09/11 [ 123.231955][ T4968] LUN: removable file: (no medium) [ 123.251622][ T4968] LUN: removable file: (no medium) [ 124.104999][ T4985] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.527550][ T4982] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 125.166188][ T4993] device syzkaller0 entered promiscuous mode [ 126.470961][ T5009] loop2: detected capacity change from 0 to 128 [ 126.674361][ T5016] ======================================================= [ 126.674361][ T5016] WARNING: The mand mount option has been deprecated and [ 126.674361][ T5016] and is ignored by this kernel. Remove the mand [ 126.674361][ T5016] option from the mount to silence this warning. [ 126.674361][ T5016] ======================================================= [ 126.710903][ T5016] Device name cannot be null; rc = [-22] [ 126.746462][ T5016] overlayfs: overlapping lowerdir path [ 126.799484][ T5017] overlayfs: overlapping lowerdir path [ 127.185695][ T5025] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5025] [ 127.269958][ T4201] Bluetooth: Wrong link type (-22) [ 128.230548][ T5047] device syzkaller0 entered promiscuous mode [ 130.623522][ T5075] device syzkaller0 entered promiscuous mode [ 130.747484][ T5080] loop4: detected capacity change from 0 to 128 [ 130.862981][ T5083] input: syz0 as /devices/virtual/input/input6 [ 131.072482][ T5083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.450374][ T5083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.464142][ T5089] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5089] [ 131.482448][ T4189] Bluetooth: Wrong link type (-22) [ 131.532384][ T5083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.543984][ T5083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.185801][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.207980][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.727112][ T5124] device syzkaller0 entered promiscuous mode [ 133.903590][ T5131] file system registered [ 133.920858][ T5134] loop3: detected capacity change from 0 to 64 [ 133.965140][ T4194] ffs_data_put(): freeing [ 134.012645][ T5136] loop2: detected capacity change from 0 to 256 [ 134.951744][ T5143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.213'. [ 135.773472][ T5150] loop2: detected capacity change from 0 to 2048 [ 137.098005][ T4186] ffs_data_put(): freeing [ 138.279990][ T5192] loop2: detected capacity change from 0 to 64 [ 141.003869][ T5236] 9pnet_virtio: no channels available for device syz [ 141.837589][ T4194] ffs_data_put(): freeing [ 141.983833][ T5245] device syzkaller0 entered promiscuous mode [ 142.119120][ T5252] loop3: detected capacity change from 0 to 64 [ 144.862978][ T5279] loop3: detected capacity change from 0 to 40427 [ 144.944792][ T4189] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 144.955085][ T4189] CPU: 0 PID: 4189 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 144.962670][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.973012][ T4189] Workqueue: hci2 hci_rx_work [ 144.977787][ T4189] Call Trace: [ 144.981099][ T4189] [ 144.984021][ T4189] dump_stack_lvl+0x188/0x250 [ 144.988699][ T4189] ? show_regs_print_info+0x20/0x20 [ 144.993903][ T4189] ? load_image+0x410/0x410 [ 144.998410][ T4189] sysfs_create_dir_ns+0x26a/0x290 [ 145.003520][ T4189] ? sysfs_warn_dup+0xa0/0xa0 [ 145.008181][ T4189] ? kthread+0x42e/0x520 [ 145.012570][ T4189] ? do_raw_spin_unlock+0x11d/0x230 [ 145.017766][ T4189] kobject_add_internal+0x5ba/0xcd0 [ 145.022968][ T4189] kobject_add+0x160/0x230 [ 145.027406][ T4189] ? kobject_init+0x1c0/0x1c0 [ 145.032068][ T4189] ? __raw_spin_lock_init+0x41/0x100 [ 145.037346][ T4189] ? klist_children_get+0x50/0x50 [ 145.043080][ T4189] ? get_device_parent+0x121/0x3e0 [ 145.048194][ T4189] device_add+0x470/0x1050 [ 145.052618][ T4189] ? device_initialize+0x2a5/0x4d0 [ 145.057721][ T4189] hci_conn_add_sysfs+0xd1/0x1e0 [ 145.062650][ T4189] le_conn_complete_evt+0xc2e/0x14d0 [ 145.068014][ T4189] ? cs_le_create_conn+0x5e0/0x5e0 [ 145.073113][ T4189] ? __mutex_trylock_common+0x15c/0x260 [ 145.078649][ T4189] hci_le_meta_evt+0x285/0x3ca0 [ 145.083498][ T4189] ? hci_event_packet+0x363/0x1310 [ 145.088728][ T4189] ? __lock_acquire+0x7b50/0x7b50 [ 145.093769][ T4189] ? hci_remote_host_features_evt+0x240/0x240 [ 145.099840][ T4189] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 145.105540][ T4189] ? mark_lock+0x94/0x320 [ 145.109857][ T4189] ? mutex_unlock+0x10/0x10 [ 145.114369][ T4189] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.120362][ T4189] ? lock_chain_count+0x20/0x20 [ 145.125207][ T4189] ? __rwlock_init+0x140/0x140 [ 145.129962][ T4189] hci_event_packet+0xe0b/0x1310 [ 145.134984][ T4189] ? _raw_spin_unlock+0x40/0x40 [ 145.139865][ T4189] ? rcu_lock_release+0x20/0x20 [ 145.144723][ T4189] ? hci_send_to_monitor+0x9c/0x4a0 [ 145.150342][ T4189] hci_rx_work+0x255/0xa10 [ 145.154766][ T4189] process_one_work+0x867/0xff0 [ 145.159726][ T4189] ? worker_detach_from_pool+0x240/0x240 [ 145.165352][ T4189] ? lockdep_hardirqs_off+0x70/0x100 [ 145.170640][ T4189] ? _raw_spin_lock_irq+0xb7/0xf0 [ 145.175861][ T4189] ? _raw_spin_lock_irqsave+0x100/0x100 [ 145.181397][ T4189] ? wq_worker_running+0x97/0x170 [ 145.186497][ T4189] worker_thread+0xad7/0x12a0 [ 145.191176][ T4189] kthread+0x42e/0x520 [ 145.195233][ T4189] ? rcu_lock_release+0x20/0x20 [ 145.200064][ T4189] ? kthread_blkcg+0xd0/0xd0 [ 145.204662][ T4189] ret_from_fork+0x1f/0x30 [ 145.209164][ T4189] [ 145.314548][ T4189] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.328526][ T4189] Bluetooth: hci2: failed to register connection device [ 145.338182][ T5284] netlink: 'syz.0.253': attribute type 2 has an invalid length. [ 145.403031][ T5279] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 145.411413][ T5279] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 145.425351][ T5279] F2FS-fs (loop3): invalid crc value [ 145.477552][ T5279] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.533409][ T5289] device syzkaller0 entered promiscuous mode [ 145.669382][ T4194] ffs_data_put(): freeing [ 145.891345][ T5279] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 145.898953][ T5279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.917931][ T5362] bridge0: port 3(syz_tun) entered blocking state [ 146.924633][ T5362] bridge0: port 3(syz_tun) entered disabled state [ 146.935816][ T5362] device syz_tun entered promiscuous mode [ 146.944252][ T5362] bridge0: port 3(syz_tun) entered blocking state [ 146.951042][ T5362] bridge0: port 3(syz_tun) entered forwarding state [ 151.214493][ T4187] ffs_data_put(): freeing [ 151.635747][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 151.841495][ T5399] 9pnet: Insufficient options for proto=fd [ 152.177146][ T5401] loop3: detected capacity change from 0 to 64 [ 152.293581][ T5403] device syzkaller0 entered promiscuous mode [ 152.561723][ T5411] device syzkaller0 entered promiscuous mode [ 153.560680][ T5416] loop3: detected capacity change from 0 to 64 [ 155.273010][ T4187] ffs_data_put(): freeing [ 155.499287][ T4235] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 155.689680][ T5439] loop2: detected capacity change from 0 to 40427 [ 156.273421][ T5439] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 156.281890][ T5439] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 156.296833][ T5439] F2FS-fs (loop2): invalid crc value [ 156.313036][ T5451] device syzkaller0 entered promiscuous mode [ 156.322076][ T5439] F2FS-fs (loop2): Found nat_bits in checkpoint [ 156.829634][ T4235] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 156.860188][ T4235] usb 5-1: can't read configurations, error -71 [ 156.970088][ T5439] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 156.977226][ T5439] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 158.394657][ T5463] device syzkaller0 entered promiscuous mode [ 161.471106][ T5494] loop3: detected capacity change from 0 to 128 [ 161.482590][ T4193] ffs_data_put(): freeing [ 161.590172][ T5492] device syzkaller0 entered promiscuous mode [ 161.773385][ T5504] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5504] [ 161.804777][ T5504] netlink: 260 bytes leftover after parsing attributes in process `syz.3.295'. [ 161.815585][ T5504] netlink: 104 bytes leftover after parsing attributes in process `syz.3.295'. [ 161.825180][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 161.837457][ T4201] Bluetooth: Wrong link type (-22) [ 163.213322][ T5521] loop3: detected capacity change from 0 to 128 [ 163.581932][ T5527] device syzkaller0 entered promiscuous mode [ 163.680685][ T5530] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5530] [ 163.706657][ T5530] netlink: 260 bytes leftover after parsing attributes in process `syz.3.301'. [ 163.716237][ T5530] netlink: 104 bytes leftover after parsing attributes in process `syz.3.301'. [ 163.725436][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 163.737943][ T4201] Bluetooth: Wrong link type (-22) [ 163.745036][ T4201] Bluetooth: hci4: link tx timeout [ 163.752655][ T4201] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 164.407239][ T5535] loop3: detected capacity change from 0 to 512 [ 164.435841][ T5535] EXT4-fs (loop3): Ignoring removed bh option [ 164.485643][ T5535] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.305: corrupted in-inode xattr [ 164.498716][ T5535] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.305: couldn't read orphan inode 15 (err -117) [ 164.519000][ T5535] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 164.776113][ T4186] ffs_data_put(): freeing [ 166.716809][ T4231] Bluetooth: hci4: command 0x0406 tx timeout [ 166.724371][ T5557] device syzkaller0 entered promiscuous mode [ 167.309628][ T2285] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 167.926829][ T5579] device syzkaller0 entered promiscuous mode [ 168.028297][ T2285] usb 4-1: no configurations [ 168.033033][ T2285] usb 4-1: can't read configurations, error -22 [ 169.275216][ T4187] ffs_data_put(): freeing [ 170.728508][ T5605] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5605] [ 170.760574][ T5605] netlink: 260 bytes leftover after parsing attributes in process `syz.1.322'. [ 170.769996][ T5605] netlink: 104 bytes leftover after parsing attributes in process `syz.1.322'. [ 170.779179][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 171.430002][ T5608] device syzkaller0 entered promiscuous mode [ 171.513933][ T5614] loop4: detected capacity change from 0 to 64 [ 172.598903][ T5626] netlink: 'syz.2.327': attribute type 10 has an invalid length. [ 172.606761][ T5626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.327'. [ 172.653739][ T5626] team0: Port device geneve0 added [ 173.138945][ T5634] device syzkaller0 entered promiscuous mode [ 173.206978][ T5633] loop3: detected capacity change from 0 to 4096 [ 174.138576][ T5633] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 174.221750][ T4193] ffs_data_put(): freeing [ 174.625470][ T5658] xt_hashlimit: max too large, truncated to 1048576 [ 174.635145][ T5658] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 175.345968][ T4202] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 175.442719][ T5664] device syzkaller0 entered promiscuous mode [ 179.787148][ T5713] netlink: 'syz.0.349': attribute type 5 has an invalid length. [ 179.830279][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.838514][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.865703][ T5713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.988335][ T4235] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 183.060056][ T4235] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 183.067646][ T4235] usb 3-1: can't read configurations, error -71 [ 183.238402][ T5751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.584364][ T5785] 9pnet: Insufficient options for proto=fd [ 186.231459][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 186.237809][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 186.400578][ T4231] Bluetooth: hci2: command 0x0406 tx timeout [ 186.420826][ T5800] loop3: detected capacity change from 0 to 128 [ 186.461245][ T5800] EXT4-fs (loop3): Test dummy encryption mode enabled [ 186.492733][ T5800] EXT4-fs (loop3): Test dummy encryption mode enabled [ 186.514383][ T5803] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 186.563251][ T5800] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 186.602828][ T5800] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.708151][ T4230] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 186.838448][ T5810] loop4: detected capacity change from 0 to 64 [ 187.998290][ T4230] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 188.005904][ T4230] usb 1-1: can't read configurations, error -71 [ 188.951349][ T5832] device syzkaller0 entered promiscuous mode [ 194.264980][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276765][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.066252][ T5904] loop3: detected capacity change from 0 to 2048 [ 198.356636][ T5915] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 199.600332][ T5929] loop3: detected capacity change from 0 to 64 [ 199.960537][ T5933] device syzkaller0 entered promiscuous mode [ 201.021209][ T5940] loop4: detected capacity change from 0 to 64 [ 202.192952][ T5963] loop2: detected capacity change from 0 to 128 [ 202.573233][ T5972] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 202.787412][ T5973] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5973] [ 202.824028][ T5973] netlink: 260 bytes leftover after parsing attributes in process `syz.2.416'. [ 202.833577][ T5973] netlink: 104 bytes leftover after parsing attributes in process `syz.2.416'. [ 202.842798][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 202.920956][ T4201] Bluetooth: Wrong link type (-22) [ 203.164149][ T5977] loop4: detected capacity change from 0 to 128 [ 203.190809][ T5980] loop3: detected capacity change from 0 to 64 [ 205.858350][ T5993] process 'syz.3.425' launched './file2' with NULL argv: empty string added [ 205.907740][ T5992] device syzkaller0 entered promiscuous mode [ 206.591985][ T6004] loop4: detected capacity change from 0 to 2048 [ 206.777124][ T6004] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 206.849899][ T6004] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 208.151130][ T2285] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 208.206550][ T4187] ffs_data_put(): freeing [ 208.519521][ T4187] ffs_data_put(): freeing [ 208.626748][ T6031] fuse: Unknown parameter '0xffffffffffffffff' [ 208.642497][ T2285] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 208.710719][ T2285] usb 1-1: can't read configurations, error -71 [ 210.967347][ T6061] configfs-gadget gadget: uvc: uvc_function_bind() [ 211.602257][ T4193] ffs_data_put(): freeing [ 212.049929][ T4193] ffs_data_put(): freeing [ 214.188164][ T4231] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 214.422907][ T6099] loop2: detected capacity change from 0 to 64 [ 215.808243][ T4231] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 215.815892][ T4231] usb 1-1: can't read configurations, error -71 [ 216.198995][ T13] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 216.783181][ T4193] ffs_data_put(): freeing [ 216.920368][ T6143] overlayfs: conflicting lowerdir path [ 217.728772][ T13] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 217.805379][ T13] usb 5-1: can't read configurations, error -71 [ 218.136412][ T6158] loop2: detected capacity change from 0 to 4096 [ 218.880592][ T6158] ntfs3: Unknown parameter 'Ÿ6ä‡SËvj' [ 220.881889][ T6177] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 220.928174][ T13] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 222.469314][ T6180] device syzkaller0 entered promiscuous mode [ 223.378248][ T6188] vivid-004: ================= START STATUS ================= [ 223.387269][ T6188] vivid-004: Radio HW Seek Mode: Bounded [ 223.393415][ T6188] vivid-004: Radio Programmable HW Seek: false [ 223.399754][ T6188] vivid-004: RDS Rx I/O Mode: Block I/O [ 223.405411][ T6188] vivid-004: Generate RBDS Instead of RDS: false [ 223.411813][ T6188] vivid-004: RDS Reception: true [ 223.416864][ T6188] vivid-004: RDS Program Type: 0 inactive [ 223.422636][ T6188] vivid-004: RDS PS Name: inactive [ 223.428023][ T6188] vivid-004: RDS Radio Text: inactive [ 223.433532][ T6188] vivid-004: RDS Traffic Announcement: false inactive [ 223.440362][ T6188] vivid-004: RDS Traffic Program: false inactive [ 223.446725][ T6188] vivid-004: RDS Music: false inactive [ 223.452264][ T6188] vivid-004: ================== END STATUS ================== [ 223.688215][ T13] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 223.695832][ T13] usb 5-1: can't read configurations, error -71 [ 223.727888][ T13] usb usb5-port1: attempt power cycle [ 223.909665][ T6203] Mass Storage Function, version: 2009/09/11 [ 223.917040][ T6203] LUN: removable file: (no medium) [ 223.937717][ T26] audit: type=1800 audit(1786469622.128:4): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.481" name="file" dev="configfs" ino=39001 res=0 errno=0 [ 223.988236][ T4188] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 224.377927][ T6202] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 224.386249][ T6202] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 224.394710][ T6202] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 224.734516][ T6210] loop4: detected capacity change from 0 to 64 [ 225.362854][ T6215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.484'. [ 225.380548][ T6215] loop2: detected capacity change from 0 to 8 [ 226.608155][ T6224] syz.0.485 uses obsolete (PF_INET,SOCK_PACKET) [ 226.636582][ T6215] SQUASHFS error: zlib decompression failed, data probably corrupt [ 226.644986][ T6215] SQUASHFS error: Failed to read block 0x9b: -5 [ 226.651482][ T6215] SQUASHFS error: Unable to read metadata cache entry [99] [ 226.658945][ T6215] SQUASHFS error: Unable to read inode 0x127 [ 226.740391][ T4188] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 226.760492][ T4188] usb 4-1: can't read configurations, error -71 [ 227.044941][ T6229] hub 8-0:1.0: USB hub found [ 227.053088][ T6229] hub 8-0:1.0: 1 port detected [ 227.787417][ T6240] device syzkaller0 entered promiscuous mode [ 228.007251][ T6250] device syzkaller0 entered promiscuous mode [ 228.278270][ T4188] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 228.560689][ T6264] loop4: detected capacity change from 0 to 64 [ 228.848205][ T4188] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 229.533949][ T4188] usb 4-1: can't read configurations, error -71 [ 229.540940][ T4188] usb usb4-port1: attempt power cycle [ 230.662390][ T6276] loop3: detected capacity change from 0 to 4096 [ 232.590542][ T6296] device syzkaller0 entered promiscuous mode [ 232.948191][ T7] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 233.103256][ T6312] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 233.110440][ T6312] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 233.119784][ T6312] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 233.126602][ T6312] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 233.134920][ T6312] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 233.143208][ T6312] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 233.158344][ T6312] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 233.165213][ T6312] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 233.173497][ T6312] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 233.181262][ T6312] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 233.187992][ T6312] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 233.195316][ T6312] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 233.202623][ T6312] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 233.210161][ T6312] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 233.217081][ T6312] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 233.224538][ T6312] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 233.231525][ T6312] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 233.238325][ T6312] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 233.245129][ T6312] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 233.252199][ T6312] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 233.258945][ T6312] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 233.265938][ T6312] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 233.272932][ T6312] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 233.280127][ T6312] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 234.010568][ T6321] loop2: detected capacity change from 0 to 64 [ 235.144822][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 235.152903][ T7] usb 5-1: can't read configurations, error -71 [ 237.201926][ T6354] gadgetfs: bound to dummy_udc driver [ 237.757039][ T6363] device syzkaller0 entered promiscuous mode [ 238.091134][ T6367] device syzkaller0 entered promiscuous mode [ 238.111074][ T4194] ffs_data_put(): freeing [ 239.500663][ T6390] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 239.567815][ T6393] loop4: detected capacity change from 0 to 128 [ 239.879833][ T6397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.529'. [ 241.443744][ T4202] ffs_data_put(): freeing [ 241.624533][ T6422] device syzkaller0 entered promiscuous mode [ 242.566784][ T6438] device syzkaller0 entered promiscuous mode [ 243.131005][ T6442] loop4: detected capacity change from 0 to 512 [ 243.862122][ T6442] EXT4-fs (loop4): Ignoring removed bh option [ 243.868377][ T6442] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 243.967075][ T6442] EXT4-fs (loop4): 1 truncate cleaned up [ 243.972980][ T6442] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000003,bh,,errors=continue. Quota mode: none. [ 244.506491][ T6456] loop2: detected capacity change from 0 to 1024 [ 245.126260][ T6450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 245.183212][ T6456] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 245.193928][ T6456] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #32: comm syz.2.545: iget: special inode unallocated [ 245.207846][ T6456] EXT4-fs (loop2): no journal found [ 245.213154][ T6456] EXT4-fs (loop2): can't get journal size [ 246.119468][ T6456] EXT4-fs (loop2): filesystem is read-only [ 246.126294][ T6456] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 249.049079][ T6493] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 249.916578][ T6498] device syzkaller0 entered promiscuous mode [ 250.548557][ T26] audit: type=1326 audit(1786469648.738:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78276bb0d9 code=0x7ffc0000 [ 250.581262][ T26] audit: type=1326 audit(1786469648.738:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78276bb0d9 code=0x7ffc0000 [ 250.606979][ T26] audit: type=1326 audit(1786469648.778:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f78276bb0d9 code=0x7ffc0000 [ 250.636758][ T26] audit: type=1326 audit(1786469648.778:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78276bb0d9 code=0x7ffc0000 [ 250.752508][ T26] audit: type=1326 audit(1786469648.778:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78276bb0d9 code=0x7ffc0000 [ 250.782212][ T26] audit: type=1326 audit(1786469648.778:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78276bb0d9 code=0x7ffc0000 [ 250.807666][ T26] audit: type=1326 audit(1786469648.778:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78276bb0d9 code=0x7ffc0000 [ 251.026243][ T26] audit: type=1326 audit(1786469648.778:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78276bb0d9 code=0x7ffc0000 [ 251.058078][ C0] hrtimer: interrupt took 36378 ns [ 251.471877][ T26] audit: type=1326 audit(1786469648.778:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f78276bb0d9 code=0x7ffc0000 [ 251.542932][ T26] audit: type=1326 audit(1786469648.778:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78276bb0d9 code=0x7ffc0000 [ 252.442429][ T6530] device syzkaller0 entered promiscuous mode [ 254.303372][ T6557] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 254.310564][ T6557] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 254.391165][ T6557] vhci_hcd vhci_hcd.0: Device attached [ 254.818259][ T4235] usb 34-1: SetAddress Request (2) to port 0 [ 254.829944][ T4235] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 255.087707][ T6558] vhci_hcd: connection closed [ 255.093424][ T4553] vhci_hcd: stop threads [ 255.197738][ T6564] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 6564 comm: syz.1.575) [ 255.219289][ T6564] tmpfs: Bad value for 'mpol' [ 255.932680][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.958213][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.056658][ T4553] vhci_hcd: release socket [ 256.168944][ T4553] vhci_hcd: disconnect device [ 256.380720][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 256.380736][ T26] audit: type=1107 audit(1786469654.578:28): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ü' [ 256.513259][ T26] audit: type=1326 audit(1786469654.608:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.2.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc423060d9 code=0x7ffc0000 [ 256.555954][ T26] audit: type=1326 audit(1786469654.608:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.2.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc423060d9 code=0x7ffc0000 [ 256.572058][ T6578] device syzkaller0 entered promiscuous mode [ 256.621121][ T26] audit: type=1326 audit(1786469654.608:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.2.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fdc423060d9 code=0x7ffc0000 [ 256.644596][ T6579] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 256.652139][ T26] audit: type=1326 audit(1786469654.608:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.2.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc423060d9 code=0x7ffc0000 [ 256.677098][ T26] audit: type=1326 audit(1786469654.608:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.2.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc423060d9 code=0x7ffc0000 [ 256.707512][ T6579] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 256.715751][ T6579] netlink: 'syz.1.580': attribute type 2 has an invalid length. [ 256.889654][ T26] audit: type=1326 audit(1786469654.608:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.2.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc423060d9 code=0x7ffc0000 [ 256.919814][ T26] audit: type=1326 audit(1786469654.608:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.2.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc423060d9 code=0x7ffc0000 [ 256.946309][ T26] audit: type=1326 audit(1786469654.608:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.2.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc423060d9 code=0x7ffc0000 [ 257.544114][ T26] audit: type=1326 audit(1786469654.608:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.2.574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fdc423060d9 code=0x7ffc0000 [ 257.556729][ T6591] device syzkaller0 entered promiscuous mode [ 261.064130][ T4235] usb 34-1: device descriptor read/8, error -110 [ 261.259072][ T6642] device syzkaller0 entered promiscuous mode [ 262.069948][ T4235] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 262.077653][ T4235] usb usb34-port1: attempt power cycle [ 262.113528][ T6660] loop4: detected capacity change from 0 to 128 [ 262.468761][ T4235] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 262.848654][ T4235] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 262.871223][ T4235] usb usb34-port1: unable to enumerate USB device [ 263.618271][ T6675] loop2: detected capacity change from 0 to 16 [ 263.779948][ T6675] erofs: (device loop2): mounted with root inode @ nid 36. [ 265.080651][ T6688] attempt to access beyond end of device [ 265.080651][ T6688] loop2: rw=0, want=40, limit=16 [ 265.189519][ T6688] attempt to access beyond end of device [ 265.189519][ T6688] loop2: rw=0, want=40, limit=16 [ 266.552423][ T6681] Process accounting resumed [ 266.567378][ T6699] loop4: detected capacity change from 0 to 4096 [ 266.664919][ T6699] NILFS (loop4): invalid segment: Checksum error in segment payload [ 266.742843][ T6699] NILFS (loop4): trying rollback from an earlier position [ 266.888700][ T6712] device syzkaller0 entered promiscuous mode [ 267.326296][ T6699] NILFS (loop4): recovery complete [ 267.391613][ T6715] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.688793][ T6721] No source specified [ 269.029886][ T6739] loop4: detected capacity change from 0 to 64 [ 270.844472][ T6750] loop4: detected capacity change from 0 to 1024 [ 271.019007][ T6750] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,bsddf,journal_ioprio=0x0000000000000001,barrier,block_validity,nodioread_nolock,grpid,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 271.177129][ T6750] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.921286][ T6770] No source specified [ 273.884860][ T6789] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 6789 comm: syz.0.629) [ 273.907032][ T6789] tmpfs: Bad value for 'mpol' [ 273.936260][ T4230] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 274.748220][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 274.908614][ T4230] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.970762][ T4230] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.088348][ T4230] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.107568][ T4230] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.172596][ T4230] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.396492][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.569525][ T4230] usb 4-1: can't set config #16, error -71 [ 275.594699][ T4230] usb 4-1: USB disconnect, device number 7 [ 277.483148][ T6819] loop3: detected capacity change from 0 to 32768 [ 277.568999][ T6827] No source specified [ 277.878213][ T4235] Bluetooth: hci4: command 0x0405 tx timeout [ 280.222699][ T6848] device syzkaller0 entered promiscuous mode [ 281.608250][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 281.608265][ T26] audit: type=1800 audit(1786469679.798:66): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.648" name="pnp_string" dev="configfs" ino=42031 res=0 errno=0 [ 284.576206][ T6891] device syzkaller0 entered promiscuous mode [ 284.910719][ T6905] ceph: No mds server is up or the cluster is laggy [ 285.065135][ T4720] libceph: connect (1)[c::]:6789 error -101 [ 285.210512][ T4720] libceph: mon0 (1)[c::]:6789 connect error [ 285.650717][ T4232] libceph: connect (1)[c::]:6789 error -101 [ 285.657909][ T4232] libceph: mon0 (1)[c::]:6789 connect error [ 288.154115][ T6937] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 289.019054][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 290.295034][ T6953] IPVS: set_ctl: invalid protocol: 115 172.20.20.39:20002 [ 291.230406][ T6960] loop3: detected capacity change from 0 to 4096 [ 291.957182][ T6960] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 293.697722][ T4886] bridge0: port 3(syz_tun) entered disabled state [ 293.746561][ T4886] device syz_tun left promiscuous mode [ 293.753948][ T4886] bridge0: port 3(syz_tun) entered disabled state [ 294.223887][ T4186] ffs_data_put(): freeing [ 294.409520][ T6535] Bluetooth: hci4: command 0x0405 tx timeout [ 294.515550][ T7006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.680'. [ 294.538648][ T7006] loop4: detected capacity change from 0 to 8 [ 295.362052][ T7006] SQUASHFS error: zlib decompression failed, data probably corrupt [ 295.370177][ T7006] SQUASHFS error: Failed to read block 0x9b: -5 [ 295.376690][ T7006] SQUASHFS error: Unable to read metadata cache entry [99] [ 295.383993][ T7006] SQUASHFS error: Unable to read inode 0x127 [ 295.496054][ T5318] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.815207][ T5318] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.980382][ T5318] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.169007][ T5318] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.602475][ T5318] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.867864][ T5318] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.204907][ T5318] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.650657][ T5318] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.105557][ T7037] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.830722][ T7032] chnl_net:caif_netlink_parms(): no params data found [ 299.610119][ T4194] ffs_data_put(): freeing [ 299.668198][ T4229] Bluetooth: hci0: command 0x0409 tx timeout [ 300.477772][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.486530][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.499185][ T7032] device bridge_slave_0 entered promiscuous mode [ 300.903104][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.915692][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.924310][ T7032] device bridge_slave_1 entered promiscuous mode [ 300.993792][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.023582][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.261924][ T7032] team0: Port device team_slave_0 added [ 301.319213][ T7032] team0: Port device team_slave_1 added [ 302.360567][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 302.772938][ T7106] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 302.824705][ T7116] loop2: detected capacity change from 0 to 512 [ 302.910315][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.942708][ T7116] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 302.955846][ T7116] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 302.995750][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.998888][ T7116] EXT4-fs (loop2): 1 truncate cleaned up [ 303.024057][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.028461][ T7116] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 303.070300][ T7125] using random self ethernet address [ 303.075696][ T7125] using random host ethernet address [ 303.084354][ T26] audit: type=1800 audit(1786469701.278:67): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.706" name="UDC" dev="configfs" ino=41544 res=0 errno=0 [ 303.201602][ T4193] ffs_data_put(): freeing [ 303.410537][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.417566][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.443510][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.731274][ T7128] syz.2.704 (7128) used greatest stack depth: 20496 bytes left [ 303.920466][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.987998][ T7032] device hsr_slave_0 entered promiscuous mode [ 303.995353][ T7032] device hsr_slave_1 entered promiscuous mode [ 304.003242][ T7032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.022512][ T7032] Cannot create hsr debugfs directory [ 304.729377][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 305.151175][ T7149] device syzkaller0 entered promiscuous mode [ 305.811365][ T5318] device hsr_slave_0 left promiscuous mode [ 305.825570][ T5318] device hsr_slave_1 left promiscuous mode [ 305.842948][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.865383][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.925207][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.943332][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.952964][ T5318] device bridge_slave_1 left promiscuous mode [ 306.179500][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.752472][ T5318] device bridge_slave_0 left promiscuous mode [ 306.761254][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.029144][ T6535] Bluetooth: hci0: command 0x0419 tx timeout [ 307.063041][ T7182] loop4: detected capacity change from 0 to 1024 [ 307.082408][ T5318] device veth1_macvtap left promiscuous mode [ 307.090270][ T5318] device veth0_macvtap left promiscuous mode [ 307.096320][ T5318] device veth1_vlan left promiscuous mode [ 307.103431][ T5318] device veth0_vlan left promiscuous mode [ 307.110838][ T7182] hfsplus: unable to parse mount options [ 307.334597][ T5318] team0 (unregistering): Port device team_slave_1 removed [ 307.370386][ T5318] team0 (unregistering): Port device team_slave_0 removed [ 307.390183][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.404900][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.967320][ T5318] bond0 (unregistering): Released all slaves [ 308.086203][ T7032] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 308.096808][ T7032] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.147267][ T7186] loop3: detected capacity change from 0 to 1024 [ 308.166555][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 308.264956][ T7032] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.304360][ T7032] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.318002][ T4193] ffs_data_put(): freeing [ 308.351592][ T7186] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,nolazytime,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 308.396850][ T26] audit: type=1800 audit(1786469706.588:68): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.717" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 310.108639][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.276517][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.329949][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.344038][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.637169][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.692135][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.720713][ T7226] loop4: detected capacity change from 0 to 2048 [ 310.772152][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.779293][ T5323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.844507][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.864476][ T7226] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 310.892923][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.918714][ T7226] NILFS (loop4): mounting unchecked fs [ 310.941275][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.948439][ T5323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.016121][ T4356] udevd[4356]: incorrect nilfs2 checksum on /dev/loop4 [ 311.059725][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.160060][ T7226] NILFS (loop4): recovery complete [ 311.247358][ T7240] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.442407][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 311.459112][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 311.469922][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 311.575129][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.722666][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 311.819322][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 311.837925][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.848808][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 311.857264][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.083142][ T7032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.321903][ T7032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.837844][ T7232] device syzkaller0 entered promiscuous mode [ 312.892198][ T7226] syz.4.724 (7226) used greatest stack depth: 20144 bytes left [ 313.100624][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.112581][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.207141][ T7260] netlink: 64 bytes leftover after parsing attributes in process `syz.3.728'. [ 314.881548][ T7276] loop3: detected capacity change from 0 to 256 [ 314.925062][ T7276] FAT-fs (loop3): Unrecognized mount option "uU 鎰ñ#Mìé Di ©9!ø;¬íl­Ÿ‘ÀN9•AâôÀþ\>Ú{®ÌC½øòJdV0ÿ" or missing value [ 314.945126][ T4186] ffs_data_put(): freeing [ 315.224220][ T4186] ffs_data_put(): freeing [ 316.414264][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.478857][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.498302][ T7032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.696297][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.714528][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.738512][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 319.782038][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.845981][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.863311][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.910378][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.939124][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.974007][ T7032] device veth0_vlan entered promiscuous mode [ 320.019556][ T7032] device veth1_vlan entered promiscuous mode [ 320.117564][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.126798][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.155843][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.188537][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.235244][ T7032] device veth0_macvtap entered promiscuous mode [ 320.262811][ T7032] device veth1_macvtap entered promiscuous mode [ 320.327917][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.373771][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.421733][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.459003][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.498724][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.529247][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.569437][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.577859][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.592011][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 320.645210][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.679122][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.721676][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.759822][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.778130][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.808119][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.830062][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.852332][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.880212][ T4186] ffs_data_put(): freeing [ 320.903510][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.922540][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.952395][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.104116][ T7032] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.114096][ T7032] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.123060][ T7032] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.132686][ T7032] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.227712][ T4186] ffs_data_put(): freeing [ 321.283316][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.312478][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.356324][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.977757][ T7375] binder_alloc: 7374: binder_alloc_buf, no vma [ 322.208264][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.242639][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.317471][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.545184][ T7389] device syzkaller0 entered promiscuous mode [ 324.515704][ T7412] 9pnet_virtio: no channels available for device 127.0.0.1 [ 324.978875][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 325.100846][ T4202] ffs_data_put(): freeing [ 325.826613][ T4186] ffs_data_put(): freeing [ 325.986692][ T7421] Restarting kernel threads ... done. [ 326.210247][ T7442] device syzkaller0 entered promiscuous mode [ 326.334343][ T7448] misc userio: No port type given on /dev/userio [ 326.344647][ T7448] misc userio: The device must be registered before sending interrupts [ 326.353791][ T7448] misc userio: The device must be registered before sending interrupts [ 326.848350][ T7450] loop3: detected capacity change from 0 to 256 [ 326.925659][ T7450] exfat: Deprecated parameter 'utf8' [ 326.967342][ T7450] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d) [ 327.158135][ T7453] loop4: detected capacity change from 0 to 1024 [ 327.958989][ T7465] 9pnet_virtio: no channels available for device syz [ 328.082289][ T26] audit: type=1800 audit(1786469726.238:69): pid=7465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.761" name="file0" dev="loop4" ino=18 res=0 errno=0 [ 329.327601][ T7479] block device autoloading is deprecated and will be removed. [ 329.338473][ T4202] ffs_data_put(): freeing [ 329.937616][ T7490] loop4: detected capacity change from 0 to 2048 [ 330.217603][ T7495] vivid-000: ================= START STATUS ================= [ 330.225537][ T7495] vivid-000: Radio HW Seek Mode: Bounded [ 330.231578][ T7495] vivid-000: Radio Programmable HW Seek: false [ 330.237898][ T7495] vivid-000: RDS Rx I/O Mode: Block I/O [ 330.243843][ T7495] vivid-000: Generate RBDS Instead of RDS: false [ 330.250378][ T7495] vivid-000: RDS Reception: true [ 330.255828][ T7495] vivid-000: RDS Program Type: 0 inactive [ 330.261872][ T7495] vivid-000: RDS PS Name: inactive [ 330.267315][ T7495] vivid-000: RDS Radio Text: inactive [ 330.272990][ T7495] vivid-000: RDS Traffic Announcement: false inactive [ 330.279943][ T7495] vivid-000: RDS Traffic Program: false inactive [ 330.286505][ T7495] vivid-000: RDS Music: false inactive [ 330.292138][ T7495] vivid-000: ================== END STATUS ================== [ 331.750897][ T4202] ffs_data_put(): freeing [ 332.894053][ T7032] ffs_data_put(): freeing [ 333.390765][ T7539] loop4: detected capacity change from 0 to 512 [ 333.892342][ T7539] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 333.963104][ T7539] EXT4-fs (loop4): Unrecognized mount option "fscontext=system_u" or missing value [ 334.740270][ T7553] loop5: detected capacity change from 0 to 32768 [ 335.937642][ T7561] loop4: detected capacity change from 0 to 2048 [ 337.073873][ T7572] dlm: dev_write: no op 0 0 [ 337.633639][ T7032] ffs_data_put(): freeing [ 338.061110][ T4186] ffs_data_put(): freeing [ 338.173324][ T7588] loop3: detected capacity change from 0 to 1024 [ 338.838689][ T7588] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 340.044784][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 340.087409][ T7615] siw: device registration error -23 [ 342.362615][ T7630] using random self ethernet address [ 342.368066][ T7630] using random host ethernet address [ 346.660235][ T7687] binder: 7677:7687 ioctl c0306201 0 returned -14 [ 347.150058][ T7695] configfs-gadget gadget: uvc: uvc_function_unbind() [ 347.266771][ T7700] loop3: detected capacity change from 0 to 2048 [ 347.658613][ T7720] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.830300][ T7731] netlink: 'syz.5.815': attribute type 1 has an invalid length. [ 348.873873][ T7731] loop5: detected capacity change from 0 to 128 [ 349.063953][ T7733] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 349.285224][ T7733] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000011 [ 351.072449][ T7746] device syzkaller0 entered promiscuous mode [ 351.299920][ T7749] ubi0: attaching mtd0 [ 351.315235][ T7749] ubi0: scanning is finished [ 351.319919][ T7749] ubi0: empty MTD device detected [ 351.534461][ T7749] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 351.542190][ T7749] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 351.549590][ T7749] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 351.556639][ T7749] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 351.564393][ T7749] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 351.571896][ T7749] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 351.580043][ T7749] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2059478847 [ 351.590152][ T7749] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 351.644988][ T7750] ubi0: background thread "ubi_bgt0d" started, PID 7750 [ 351.942745][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.821'. [ 352.184508][ T7760] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 352.195432][ T7760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.535055][ T7784] hub 8-0:1.0: USB hub found [ 354.550720][ T7784] hub 8-0:1.0: 1 port detected [ 355.537451][ T7032] ffs_data_put(): freeing [ 355.555226][ T7789] configfs-gadget gadget: uvc: uvc_function_bind() [ 355.567743][ T7789] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 355.576109][ T7789] ================================================================== [ 355.584779][ T7789] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x3b/0x70 [ 355.592543][ T7789] Read of size 8 at addr ffff888025deaef0 by task syz.3.829/7789 [ 355.600272][ T7789] [ 355.602599][ T7789] CPU: 1 PID: 7789 Comm: syz.3.829 Not tainted syzkaller #0 [ 355.609919][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.619985][ T7789] Call Trace: [ 355.623268][ T7789] [ 355.626205][ T7789] dump_stack_lvl+0x188/0x250 [ 355.630901][ T7789] ? show_regs_print_info+0x20/0x20 [ 355.636118][ T7789] ? _printk+0xda/0x130 [ 355.640296][ T7789] ? dummy_free_request+0x3b/0x70 [ 355.645431][ T7789] ? load_image+0x410/0x410 [ 355.650168][ T7789] ? _dev_info+0x11b/0x170 [ 355.654613][ T7789] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 355.660272][ T7789] print_address_description+0x60/0x2d0 [ 355.665928][ T7789] ? dummy_free_request+0x3b/0x70 [ 355.670984][ T7789] kasan_report+0xdf/0x130 [ 355.675439][ T7789] ? dummy_free_request+0x3b/0x70 [ 355.680485][ T7789] ? rcu_is_watching+0x11/0xa0 [ 355.685323][ T7789] dummy_free_request+0x3b/0x70 [ 355.690293][ T7789] uvc_function_bind+0xe24/0x12d0 [ 355.695361][ T7789] usb_add_function+0x2d9/0x980 [ 355.700243][ T7789] configfs_composite_bind+0xa02/0xf60 [ 355.705739][ T7789] ? os_desc_qw_sign_store+0x130/0x130 [ 355.711239][ T7789] udc_bind_to_driver+0x203/0x5f0 [ 355.716388][ T7789] usb_gadget_probe_driver+0x1fb/0x380 [ 355.721877][ T7789] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 355.727551][ T7789] configfs_write_iter+0x30b/0x400 [ 355.732681][ T7789] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 355.738309][ T7789] vfs_write+0x748/0xd70 [ 355.742590][ T7789] ? file_end_write+0x250/0x250 [ 355.747638][ T7789] ? mutex_lock_nested+0x17/0x20 [ 355.752604][ T7789] ? __fdget_pos+0x2bf/0x370 [ 355.757213][ T7789] ? ksys_write+0x70/0x260 [ 355.761655][ T7789] ksys_write+0x153/0x260 [ 355.766011][ T7789] ? __ia32_sys_read+0x80/0x80 [ 355.770812][ T7789] ? lockdep_hardirqs_on+0x94/0x140 [ 355.776155][ T7789] do_syscall_64+0x4c/0xa0 [ 355.780594][ T7789] ? clear_bhb_loop+0x30/0x80 [ 355.785293][ T7789] ? clear_bhb_loop+0x30/0x80 [ 355.789990][ T7789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.795918][ T7789] RIP: 0033:0x7fde5bd6e0d9 [ 355.800347][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.820076][ T7789] RSP: 002b:00007fde59fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.828542][ T7789] RAX: ffffffffffffffda RBX: 00007fde5bff5fa0 RCX: 00007fde5bd6e0d9 [ 355.836532][ T7789] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000005 [ 355.844519][ T7789] RBP: 00007fde5be05024 R08: 0000000000000000 R09: 0000000000000000 [ 355.852590][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.860665][ T7789] R13: 00007fde5bff6038 R14: 00007fde5bff5fa0 R15: 00007fffc3eb5c98 [ 355.868776][ T7789] [ 355.871807][ T7789] [ 355.874136][ T7789] Allocated by task 7032: [ 355.878459][ T7789] __kasan_kmalloc+0xaf/0xe0 [ 355.883066][ T7789] tipc_nametbl_insert_publ+0x437/0x1380 [ 355.888713][ T7789] tipc_nametbl_publish+0xb9/0x1e0 [ 355.893864][ T7789] tipc_sk_publish+0x1c8/0x420 [ 355.898687][ T7789] tipc_sk_bind+0x1ea/0x2f0 [ 355.903216][ T7789] tipc_topsrv_init_net+0x540/0x7f0 [ 355.908434][ T7789] ops_init+0x360/0x5f0 [ 355.912702][ T7789] setup_net+0x39e/0xa10 [ 355.916964][ T7789] copy_net_ns+0x33e/0x5b0 [ 355.921391][ T7789] create_new_namespaces+0x3ce/0x700 [ 355.926683][ T7789] unshare_nsproxy_namespaces+0x116/0x160 [ 355.932957][ T7789] ksys_unshare+0x4f6/0x8e0 [ 355.937476][ T7789] __x64_sys_unshare+0x34/0x40 [ 355.942256][ T7789] do_syscall_64+0x4c/0xa0 [ 355.946680][ T7789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.952577][ T7789] [ 355.954897][ T7789] The buggy address belongs to the object at ffff888025deae00 [ 355.954897][ T7789] which belongs to the cache kmalloc-128 of size 128 [ 355.968953][ T7789] The buggy address is located 112 bytes to the right of [ 355.968953][ T7789] 128-byte region [ffff888025deae00, ffff888025deae80) [ 355.982921][ T7789] The buggy address belongs to the page: [ 355.988575][ T7789] page:ffffea0000977a80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25dea [ 355.998754][ T7789] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 356.006601][ T7789] raw: 00fff00000000200 0000000000000000 0000000800000001 ffff888016c418c0 [ 356.015207][ T7789] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 356.023803][ T7789] page dumped because: kasan: bad access detected [ 356.030236][ T7789] page_owner tracks the page as allocated [ 356.035958][ T7789] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4356, ts 131485804001, free_ts 131053758077 [ 356.052321][ T7789] get_page_from_freelist+0x24f6/0x2670 [ 356.057895][ T7789] __alloc_pages+0x1ee/0x480 [ 356.062596][ T7789] new_slab+0xc0/0x4b0 [ 356.066683][ T7789] ___slab_alloc+0x807/0xdd0 [ 356.071284][ T7789] kmem_cache_alloc_trace+0xf9/0x290 [ 356.076575][ T7789] kernfs_fop_open+0x887/0xba0 [ 356.081359][ T7789] do_dentry_open+0x7f7/0xf90 [ 356.086054][ T7789] path_openat+0x2718/0x2fb0 [ 356.090656][ T7789] do_filp_open+0x1df/0x400 [ 356.095170][ T7789] do_sys_openat2+0x14b/0x500 [ 356.099856][ T7789] __x64_sys_openat+0x135/0x160 [ 356.104724][ T7789] do_syscall_64+0x4c/0xa0 [ 356.109154][ T7789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.115069][ T7789] page last free stack trace: [ 356.120181][ T7789] free_unref_page_prepare+0x637/0x6c0 [ 356.125655][ T7789] free_unref_page+0x8f/0x2a0 [ 356.130345][ T7789] af_alg_free_resources+0x3cd/0x650 [ 356.135642][ T7789] skcipher_recvmsg+0x7aa/0x9d0 [ 356.140501][ T7789] ____sys_recvmsg+0x2ca/0x5b0 [ 356.145278][ T7789] ___sys_recvmsg+0x213/0x5c0 [ 356.149974][ T7789] __x64_sys_recvmsg+0x201/0x2d0 [ 356.154929][ T7789] do_syscall_64+0x4c/0xa0 [ 356.159443][ T7789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.165359][ T7789] [ 356.167694][ T7789] Memory state around the buggy address: [ 356.173327][ T7789] ffff888025dead80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 356.181396][ T7789] ffff888025deae00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.189463][ T7789] >ffff888025deae80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 356.197529][ T7789] ^ [ 356.205251][ T7789] ffff888025deaf00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 356.213324][ T7789] ffff888025deaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 356.221387][ T7789] ================================================================== [ 356.229453][ T7789] Disabling lock debugging due to kernel taint [ 356.256887][ T7789] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 356.264113][ T7789] CPU: 1 PID: 7789 Comm: syz.3.829 Tainted: G B syzkaller #0 [ 356.272902][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.282966][ T7789] Call Trace: [ 356.286354][ T7789] [ 356.289285][ T7789] dump_stack_lvl+0x188/0x250 [ 356.293964][ T7789] ? show_regs_print_info+0x20/0x20 [ 356.299163][ T7789] ? load_image+0x410/0x410 [ 356.303697][ T7789] panic+0x2f8/0x850 [ 356.307586][ T7789] ? bpf_jit_dump+0xd0/0xd0 [ 356.312109][ T7789] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 356.318078][ T7789] ? _raw_spin_unlock+0x40/0x40 [ 356.322922][ T7789] ? print_memory_metadata+0x314/0x400 [ 356.328374][ T7789] ? dummy_free_request+0x3b/0x70 [ 356.333385][ T7789] check_panic_on_warn+0x80/0xa0 [ 356.338312][ T7789] ? dummy_free_request+0x3b/0x70 [ 356.343413][ T7789] end_report+0x6d/0xf0 [ 356.347575][ T7789] kasan_report+0x102/0x130 [ 356.352169][ T7789] ? dummy_free_request+0x3b/0x70 [ 356.357191][ T7789] ? rcu_is_watching+0x11/0xa0 [ 356.361953][ T7789] dummy_free_request+0x3b/0x70 [ 356.366790][ T7789] uvc_function_bind+0xe24/0x12d0 [ 356.371812][ T7789] usb_add_function+0x2d9/0x980 [ 356.376650][ T7789] configfs_composite_bind+0xa02/0xf60 [ 356.382213][ T7789] ? os_desc_qw_sign_store+0x130/0x130 [ 356.387668][ T7789] udc_bind_to_driver+0x203/0x5f0 [ 356.392682][ T7789] usb_gadget_probe_driver+0x1fb/0x380 [ 356.398131][ T7789] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 356.403747][ T7789] configfs_write_iter+0x30b/0x400 [ 356.408843][ T7789] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 356.414378][ T7789] vfs_write+0x748/0xd70 [ 356.418609][ T7789] ? file_end_write+0x250/0x250 [ 356.423451][ T7789] ? mutex_lock_nested+0x17/0x20 [ 356.428373][ T7789] ? __fdget_pos+0x2bf/0x370 [ 356.432948][ T7789] ? ksys_write+0x70/0x260 [ 356.437347][ T7789] ksys_write+0x153/0x260 [ 356.441663][ T7789] ? __ia32_sys_read+0x80/0x80 [ 356.446415][ T7789] ? lockdep_hardirqs_on+0x94/0x140 [ 356.451600][ T7789] do_syscall_64+0x4c/0xa0 [ 356.456003][ T7789] ? clear_bhb_loop+0x30/0x80 [ 356.460666][ T7789] ? clear_bhb_loop+0x30/0x80 [ 356.465330][ T7789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.471209][ T7789] RIP: 0033:0x7fde5bd6e0d9 [ 356.475619][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.495218][ T7789] RSP: 002b:00007fde59fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.503714][ T7789] RAX: ffffffffffffffda RBX: 00007fde5bff5fa0 RCX: 00007fde5bd6e0d9 [ 356.511759][ T7789] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000005 [ 356.519714][ T7789] RBP: 00007fde5be05024 R08: 0000000000000000 R09: 0000000000000000 [ 356.527669][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.535626][ T7789] R13: 00007fde5bff6038 R14: 00007fde5bff5fa0 R15: 00007fffc3eb5c98 [ 356.543824][ T7789] [ 356.546945][ T7789] Kernel Offset: disabled [ 356.551277][ T7789] Rebooting in 86400 seconds..