last executing test programs: 33.769147527s ago: executing program 2 (id=433): r0 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x8200) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000000500), 0x0, 0x2c00) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f00000003c0)=""/151, 0x0, 0x800, 0x9ab9, 0x2}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x34565559}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0x5}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20044044) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x2, '\x00', '\x00', '\x00', 0x5, 0x5d05, 0x7, 0xf, "38d4fc00"}) socket$nl_generic(0x10, 0x3, 0x10) 32.003573847s ago: executing program 2 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x800006, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x4, 0x42, 0xd48, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x8000002, 0xa45, 0x1df, 0xffff, 0x0, 0x380000, 0x10000009, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x336, 0x3, 0x2, 0x108, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x4, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x81, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0x10002, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8000, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x4, 0x80000005, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0x2d, 0x400]}, 0x45c) 30.519511759s ago: executing program 2 (id=440): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(0x0, 0x22) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x32) syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000000a40)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0xc, 0x2, 0x9, 0x10, 0x3}, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000400)={&(0x7f0000000140)=[{0x0, 0x8611, 0x45, &(0x7f00000000c0)="253ae1ff09423e082b90f40900000000000000fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3404aa4063169b921fe2c0b93c0e66e21421bd29fcb0c"}, {0x7, 0x0, 0x0, 0x0}], 0x2}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x404c840) 26.715950134s ago: executing program 0 (id=446): connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019300)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mount(0x0, 0x0, 0x0, 0x208000, 0x0) mount$afs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000300), 0x20000, &(0x7f0000000340)={[{@flock_local}, {}, {}, {@flock_local}, {}, {}, {@dyn}], [{@seclabel}, {@subj_role={'subj_role', 0x3d, '\'\'!*)/Z{(}#%&-'}}]}) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) userfaultfd(0x1) userfaultfd(0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) 21.932853991s ago: executing program 0 (id=453): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x20000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 18.511687417s ago: executing program 1 (id=457): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x80, @none, 0x0, 0x3}, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000007c0)=@svm={0x1, 0x1, 0x1080, {0x4000}, {"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"}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_init(0x200, 0x0) 16.964710441s ago: executing program 0 (id=459): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0xff000000, 0xffffff00, 0xffffffff, 0xffffff00], [0xff000000, 0x0, 0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'lo\x00', {0xff}, {}, 0x5c, 0x9, 0x3, 0x10}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000a80), 0x12) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) 16.964481491s ago: executing program 2 (id=460): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x800799c) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) lseek(r2, 0x0, 0x4) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000000880)={{0x10b, 0x2, 0x9, 0xdb, 0x1f7, 0x5, 0x50, 0x1020}, "bcfb6ad7194311c1017afda6909defc2ca215a9168dfcd897ad7504edfbc14cdc65b9cc77681e083ccb2515888958e6d5782fe76ca4ab77ceb13d5507f061c7ccdd432", ['\x00', '\x00', '\x00']}, 0x363) 15.203623161s ago: executing program 4 (id=462): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) sendmsg$netlink(r0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0xffffff00, 'pim6reg0\x00', 'veth0\x00', {0xff}, {}, 0x8, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x0, 0x1, 0x4, 0x1, 0x1], 0x2, 0x7}, {0xffffffffffffffff, [0x0, 0x1, 0x3, 0x0, 0x3], 0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xff, 'veth1_virt_wifi\x00', 'sit0\x00', {0xff}, {0xff}, 0x1, 0x2, 0x2}, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x5, 0x8000}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x254) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e1d, 0x100a86c, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xa0000}, 0x1c) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 14.423924138s ago: executing program 3 (id=463): accept$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0xfffffffffffffd0d) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) 13.263680754s ago: executing program 1 (id=464): connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019300)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mount(0x0, 0x0, 0x0, 0x208000, 0x0) mount$afs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000300), 0x20000, &(0x7f0000000340)={[{@flock_local}, {}, {}, {@flock_local}, {}, {}, {@dyn}], [{@seclabel}, {@subj_role={'subj_role', 0x3d, '\'\'!*)/Z{(}#%&-'}}]}) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) userfaultfd(0x1) userfaultfd(0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) 13.263471694s ago: executing program 3 (id=465): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000240)={&(0x7f0000000140)=""/31, 0x1f}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, 0x0, 0xff2e) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0xfffffffffffffffe}, {0x3, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff82}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 12.53624549s ago: executing program 4 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}}], 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) readv(r3, &(0x7f00000006c0), 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x4) 12.179327128s ago: executing program 2 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8001}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) syz_genetlink_get_family_id$nl80211(0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28000006}) 11.616760411s ago: executing program 1 (id=468): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r5, 0x0, 0x6, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) 9.964369267s ago: executing program 2 (id=469): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x20000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 9.933044318s ago: executing program 3 (id=470): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2ab, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 9.87999446s ago: executing program 4 (id=471): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x24008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r2}, {0x4000000000000000, 0x28c, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x7, 0xfffffffffffffffe, 0x3}, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xdfd33369c4ba71e}, 0x0, @in6=@loopback, 0x2, 0x4, 0x3, 0xb7, 0x1, 0x7dffffe}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000007880)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x5207, 0x0) msgget(0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0xf0f026, 0x100000}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 8.930054121s ago: executing program 1 (id=472): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fanotify_init(0x8, 0x1) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x10, 0x2, 0x4, 0xc66f, 0x20008, r0, 0x8, '\x00', 0x0, r0, 0x0, 0xfffffffd}, 0x50) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000140)={[{@resgid}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x6ac7}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000003c0)={0x6, 0xfffffff8, 0x2}) 8.707712926s ago: executing program 3 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) getpriority(0x1, r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_io_uring_setup(0x5b77, &(0x7f00000005c0)={0x0, 0x7fd4, 0x40, 0x3, 0x21a}, &(0x7f0000000640), &(0x7f0000000740), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) 7.430139044s ago: executing program 0 (id=474): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[0x0]) socket$key(0xf, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x37db}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4) 7.344441546s ago: executing program 1 (id=475): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x101, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x100000003, 0x410200) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) 5.984086396s ago: executing program 4 (id=476): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x32ab60b1caec533c, 0xffffffffffffffff, 0x3000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, 0x0, 0x110) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02bb04071279d2c83012ec0d8d00a92b3077c764f292cd367da5984212ec72b748d40129ad6895295abab8b914784a9249f6b66b20fcb0dd459ca86e58792434c07d2d7b983734028ffe9b3005bd68f4759b0e90700322b8b29259131031f1d03b6095693549a6faeb3a22471a80291df3f0b41b7b254789e1309447bf0000000000000000000000000000ee2cfe8561729d058310434ab8ef9949c2580f502e00b2b8c369b1ea74d56617177f64e38520dbfcb82de75f45452f28790304379f757c0187a10b3777d27145e039b16f1b6835d4aab18cfaff057cad9195da8b2dc23bfd27f52f1fe2b41d2f9c8823630943c2597b87abf9320f715732c4194ae95e20d660cd91b2d99e3cd191bdfb4cd8c66da5774366ad42e942aedc9d2a63a1d2ead50a5320085971e6"], 0x17) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x9) 5.410059799s ago: executing program 0 (id=477): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @multicast2}], 0x10) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x8, 0x700, 0x8, 0x9, {{0x9, 0x4, 0x1, 0x3c, 0x24, 0x67, 0x0, 0x5, 0x49e4cec55e01605d, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0xb, 0xd3, [@broadcast, @remote]}, @ssrr={0x89, 0x3, 0x1f}]}}}}}) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88) close(r4) 5.409133599s ago: executing program 3 (id=478): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x800799c) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) lseek(r2, 0x0, 0x4) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000000880)={{0x10b, 0x2, 0x9, 0xdb, 0x1f7, 0x5, 0x50, 0x1020}, "bcfb6ad7194311c1017afda6909defc2ca215a9168dfcd897ad7504edfbc14cdc65b9cc77681e083ccb2515888958e6d5782fe76ca4ab77ceb13d5507f061c7ccdd432", ['\x00', '\x00', '\x00']}, 0x363) 4.576026358s ago: executing program 4 (id=479): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0xb87) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ustat(0x90000000000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 2.340459298s ago: executing program 4 (id=480): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000240)={&(0x7f0000000140)=""/31, 0x1f}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, 0x0, 0xff2e) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0xfffffffffffffffe}, {0x3, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff82}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.725562961s ago: executing program 0 (id=481): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000009c0)={0x1}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$pppoe(r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) 1.689838842s ago: executing program 3 (id=482): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) epoll_create1(0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1201, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 0s ago: executing program 1 (id=483): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2ab, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 64.942310][ T4257] cgroup: Unknown subsys name 'net' [ 65.044570][ T4257] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.330386][ T4257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.657836][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.666663][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.682089][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.691556][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.709823][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.712511][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.717574][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.726312][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.732185][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.739554][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.746908][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.754010][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.760124][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.767380][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.781235][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.781548][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.788801][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.796992][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.809229][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.810197][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.816680][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.823966][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.830956][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.837831][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.852809][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.853056][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.861009][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.897190][ T4273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.904352][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.915632][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.277425][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 68.367140][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 68.426219][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 68.463168][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 68.473734][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 68.491072][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.498504][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.507046][ T4281] device bridge_slave_0 entered promiscuous mode [ 68.544196][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.551523][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.561970][ T4281] device bridge_slave_1 entered promiscuous mode [ 68.617720][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.625046][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.632914][ T4279] device bridge_slave_0 entered promiscuous mode [ 68.646189][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.666940][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.674206][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.682982][ T4279] device bridge_slave_1 entered promiscuous mode [ 68.704823][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.764800][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.777356][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.784634][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.792805][ T4269] device bridge_slave_0 entered promiscuous mode [ 68.803259][ T4281] team0: Port device team_slave_0 added [ 68.811587][ T4281] team0: Port device team_slave_1 added [ 68.817531][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.825049][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.833514][ T4278] device bridge_slave_0 entered promiscuous mode [ 68.846434][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.858634][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.865749][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.874502][ T4269] device bridge_slave_1 entered promiscuous mode [ 68.888462][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.895584][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.903609][ T4278] device bridge_slave_1 entered promiscuous mode [ 68.917768][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.925033][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.933368][ T4274] device bridge_slave_0 entered promiscuous mode [ 68.973543][ T4279] team0: Port device team_slave_0 added [ 68.979831][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.986946][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.995498][ T4274] device bridge_slave_1 entered promiscuous mode [ 69.009592][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.016573][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.043262][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.056727][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.070001][ T4279] team0: Port device team_slave_1 added [ 69.084873][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.094808][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.103751][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.130006][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.154120][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.171907][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.183304][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.214755][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.235987][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.243437][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.269649][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.306587][ T4278] team0: Port device team_slave_0 added [ 69.313455][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.321801][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.348022][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.361151][ T4269] team0: Port device team_slave_0 added [ 69.378941][ T4274] team0: Port device team_slave_0 added [ 69.386512][ T4278] team0: Port device team_slave_1 added [ 69.405611][ T4269] team0: Port device team_slave_1 added [ 69.414982][ T4281] device hsr_slave_0 entered promiscuous mode [ 69.422385][ T4281] device hsr_slave_1 entered promiscuous mode [ 69.445607][ T4274] team0: Port device team_slave_1 added [ 69.477985][ T4279] device hsr_slave_0 entered promiscuous mode [ 69.485088][ T4279] device hsr_slave_1 entered promiscuous mode [ 69.492581][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.500472][ T4279] Cannot create hsr debugfs directory [ 69.511799][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.518861][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.544872][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.560629][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.567698][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.593973][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.607041][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.614319][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.640416][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.656949][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.664073][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.690032][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.725344][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.732399][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.758728][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.805464][ T4278] device hsr_slave_0 entered promiscuous mode [ 69.812569][ T4278] device hsr_slave_1 entered promiscuous mode [ 69.819847][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.827423][ T4278] Cannot create hsr debugfs directory [ 69.835385][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.842769][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.868935][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.948980][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 69.948989][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 69.949147][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 69.955201][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 69.961416][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 69.984877][ T4269] device hsr_slave_0 entered promiscuous mode [ 69.992278][ T4269] device hsr_slave_1 entered promiscuous mode [ 69.999634][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.007257][ T4269] Cannot create hsr debugfs directory [ 70.056508][ T4274] device hsr_slave_0 entered promiscuous mode [ 70.063362][ T4274] device hsr_slave_1 entered promiscuous mode [ 70.070330][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.077892][ T4274] Cannot create hsr debugfs directory [ 70.315404][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.337350][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.356204][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.365897][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.392589][ T4281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.402808][ T4281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.412788][ T4281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.423593][ T4281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.513118][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.524233][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.538002][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.547546][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.560803][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.633264][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.651879][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.681071][ T4278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.690751][ T4278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.722522][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.736548][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.745598][ T4278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.764065][ T4278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.781940][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.791627][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.800828][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.808111][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.816428][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.836406][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.846613][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.860860][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.867983][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.897758][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.905869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.914782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.926334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.939533][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.950907][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.977289][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.988111][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.001394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.010606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.020342][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.027471][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.035646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.044741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.053788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.062316][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.069436][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.080827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.089827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.098375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.106433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.118071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.132439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.140772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.149056][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.175773][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.184943][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.194946][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.203940][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.224791][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.236711][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.248709][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.268373][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.277044][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.285725][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.295001][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.305157][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.315668][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.316289][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.322502][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.329237][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.344667][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.372132][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.382645][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.392784][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.401646][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.412618][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.419759][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.427488][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.436334][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.444918][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.490809][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.500749][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.511547][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.521440][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.532273][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.547749][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.557471][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.572324][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.601409][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.614756][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.624972][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.634588][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.643543][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.653476][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.662672][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.694604][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.706616][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.723640][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.735532][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.744613][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.761196][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.798551][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.822140][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.837725][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.847477][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.854658][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.871900][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.890207][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.912590][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.925605][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.937153][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.944388][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.961932][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.976068][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.005674][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.026470][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.034170][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 72.041171][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 72.047203][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 72.053686][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 72.053701][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 72.080498][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.088090][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.098741][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.117622][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.158311][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.201547][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.215319][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.224521][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.233849][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.242914][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.252819][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.264847][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.276909][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.287362][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.295500][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.306402][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.339268][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.346774][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.373828][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.402467][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.412149][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.430955][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.438096][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.460847][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.479013][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.487638][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.494845][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.528657][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.581379][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.594130][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.607913][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.618117][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.629201][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.637747][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.646664][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.682295][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.708910][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.735883][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.756220][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.768224][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.777425][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.789706][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.809041][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.837750][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.870117][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.877974][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.899506][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.907038][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.917980][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.932713][ T4281] device veth0_vlan entered promiscuous mode [ 72.984115][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.993896][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.005947][ T4281] device veth1_vlan entered promiscuous mode [ 73.043327][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.052740][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.064677][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.074894][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.089702][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.097182][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.112920][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.125056][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.151094][ T4281] device veth0_macvtap entered promiscuous mode [ 73.164577][ T4281] device veth1_macvtap entered promiscuous mode [ 73.175678][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.193352][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.202533][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.212161][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.222285][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.232065][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.240949][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.249765][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.257478][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.272652][ T4279] device veth0_vlan entered promiscuous mode [ 73.295556][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.309016][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.317538][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.330400][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.337883][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.346511][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.354514][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.366075][ T4269] device veth0_vlan entered promiscuous mode [ 73.377575][ T4279] device veth1_vlan entered promiscuous mode [ 73.389121][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.414166][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.423118][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.432221][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.441193][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.450356][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.463780][ T4269] device veth1_vlan entered promiscuous mode [ 73.489481][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.497668][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.514608][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.527745][ T4278] device veth0_vlan entered promiscuous mode [ 73.535071][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.546826][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.560632][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.569790][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.596288][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.606027][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.615368][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.625720][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.638053][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.647669][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.663474][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.672502][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.702015][ T4269] device veth0_macvtap entered promiscuous mode [ 73.725415][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.734402][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.744115][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.752849][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.761492][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.775326][ T4279] device veth0_macvtap entered promiscuous mode [ 73.784326][ T4269] device veth1_macvtap entered promiscuous mode [ 73.795030][ T4278] device veth1_vlan entered promiscuous mode [ 73.803871][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.812392][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.822160][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.830827][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.838753][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.862098][ T4274] device veth0_vlan entered promiscuous mode [ 73.874109][ T4279] device veth1_macvtap entered promiscuous mode [ 73.922183][ T4274] device veth1_vlan entered promiscuous mode [ 73.936921][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.951894][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.963211][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.992929][ T4278] device veth0_macvtap entered promiscuous mode [ 74.000420][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.009093][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.017107][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.025578][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.034831][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.043496][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.052441][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.061632][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.071873][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.083206][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.093902][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.104920][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.113135][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 74.115288][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 74.120945][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 74.126848][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 74.132937][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 74.146535][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.154864][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.165672][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.180413][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.199126][ T4278] device veth1_macvtap entered promiscuous mode [ 74.210822][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.221711][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.229777][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.237863][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.246528][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.255238][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.264150][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.274279][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.284021][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.294234][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.310317][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.322472][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.334209][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.345883][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.356803][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.366340][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.375211][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.383956][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.413936][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.422765][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.437505][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.446841][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.456648][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.465478][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.495091][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.513312][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.533292][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.546121][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.556648][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.571538][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.581529][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.592598][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.604239][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.618028][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.628843][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.639078][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.650987][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.661180][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.672251][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.683235][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.696211][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.704579][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.713680][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.723531][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.733015][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.741981][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.752265][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.766876][ T4274] device veth0_macvtap entered promiscuous mode [ 74.802604][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.813756][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.824270][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.835780][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.866485][ T4274] device veth1_macvtap entered promiscuous mode [ 74.939742][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.956974][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.959953][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.988757][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.999355][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.013919][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.024540][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.035775][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.045996][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.057804][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.071026][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.115800][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.147074][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.240473][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.250882][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.253770][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.276191][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.285731][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.294063][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.332941][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.360893][ T4357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.375506][ T4357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.429038][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.478079][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.573918][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.597114][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.930556][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.956403][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.966354][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.983116][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.994406][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.010318][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.040691][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.051422][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.064129][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.071652][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.085547][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.095034][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.167960][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.185447][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.197419][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 76.203699][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 76.203753][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 76.210311][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 76.215837][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 76.242259][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.251742][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.288676][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.296955][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.616946][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.718248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 77.728217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 77.738178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 77.748178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 77.758183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 77.768183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 77.778180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 77.788180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 77.798171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 77.808191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 79.150045][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.157937][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.227658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.259947][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.267932][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.314093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.335201][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.357585][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.382311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.550570][ T4401] 9pnet_fd: Insufficient options for proto=fd [ 79.606128][ T4285] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 82.797932][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 82.953000][ T4417] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.799347][ T129] cfg80211: failed to load regulatory.db [ 87.737896][ T4443] usb usb9: check_ctrlrecip: process 4443 (syz.0.26) requesting ep 01 but needs 81 [ 87.747398][ T4443] usb usb9: usbfs: process 4443 (syz.0.26) did not claim interface 0 before use [ 89.155147][ T4451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.285074][ T4456] loop1: detected capacity change from 0 to 512 [ 89.346641][ T4456] EXT4-fs: Ignoring removed orlov option [ 89.375739][ T4456] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.425918][ T4456] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.471086][ T4465] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 89.510524][ T4456] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.556467][ T4456] EXT4-fs (loop1): 1 truncate cleaned up [ 89.569999][ T4456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.762734][ T129] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.429031][ T129] usb 3-1: Using ep0 maxpacket: 16 [ 93.094583][ T129] usb 3-1: device descriptor read/all, error -71 [ 97.611426][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 98.897069][ T4514] loop4: detected capacity change from 0 to 8192 [ 99.005712][ T4514] loop4: p1 p2 p3 [ 99.048565][ T4514] loop4: partition table partially beyond EOD, truncated [ 100.008163][ C1] sched: RT throttling activated [ 100.095224][ T4514] loop4: p1 start 51379968 is beyond EOD, truncated [ 100.273600][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.360304][ T4514] loop4: p3 size 100663552 extends beyond EOD, truncated [ 100.498330][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 100.515654][ T22] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 100.578257][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.598230][ T22] usb 5-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 100.607319][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.722306][ T22] usb 5-1: config 0 descriptor?? [ 100.748022][ T22] usb 5-1: can't set config #0, error -71 [ 100.798521][ T22] usb 5-1: USB disconnect, device number 2 [ 100.863922][ T4480] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.123758][ T4545] capability: warning: `syz.0.41' uses 32-bit capabilities (legacy support in use) [ 102.014899][ T4542] loop4: detected capacity change from 0 to 256 [ 102.019162][ T4481] udevd[4481]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 102.039443][ T4480] udevd[4480]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 103.332457][ T4542] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 104.145196][ T4552] tipc: Started in network mode [ 104.212989][ T4552] tipc: Node identity 4, cluster identity 4711 [ 104.276648][ T4552] tipc: Node number set to 4 [ 104.994235][ T4573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.068833][ T4584] loop3: detected capacity change from 0 to 512 [ 107.134066][ T4584] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.58: corrupted in-inode xattr [ 107.167291][ T4587] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 107.250545][ T4587] 8021q: VLANs not supported on hsr0 [ 107.288300][ T4584] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.58: couldn't read orphan inode 15 (err -117) [ 107.373460][ T4584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.123920][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 108.137320][ T4603] ======================================================= [ 108.137320][ T4603] WARNING: The mand mount option has been deprecated and [ 108.137320][ T4603] and is ignored by this kernel. Remove the mand [ 108.137320][ T4603] option from the mount to silence this warning. [ 108.137320][ T4603] ======================================================= [ 112.204723][ T4642] netlink: 'syz.1.70': attribute type 11 has an invalid length. [ 112.275457][ T4645] device syzkaller0 entered promiscuous mode [ 112.392122][ T4645] tipc: Started in network mode [ 112.397181][ T4645] tipc: Node identity ba765850b2ff, cluster identity 4711 [ 112.421414][ T4645] tipc: Enabled bearer , priority 0 [ 112.566583][ T4644] tipc: Resetting bearer [ 112.622058][ T4644] tipc: Disabling bearer [ 113.391721][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.411468][ T4648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.439316][ T4650] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 113.471931][ T4642] device wlan0 entered promiscuous mode [ 113.530504][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 114.106237][ T4647] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.115457][ T4647] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.124276][ T4647] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.133039][ T4647] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.316715][ T4656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 114.420484][ T4656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 114.433346][ T4656] Zero length message leads to an empty skb [ 114.684323][ T4669] loop4: detected capacity change from 0 to 32768 [ 114.694902][ T4669] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.77 (4669) [ 114.715604][ T4669] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.725997][ T4669] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 114.734782][ T4669] BTRFS info (device loop4): turning on sync discard [ 114.741690][ T4669] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 114.751271][ T4669] BTRFS info (device loop4): use zstd compression, level 3 [ 114.758545][ T4669] BTRFS info (device loop4): turning on async discard [ 114.765437][ T4669] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.776066][ T4669] BTRFS info (device loop4): trying to use backup root at mount time [ 114.784233][ T4669] BTRFS info (device loop4): enabling auto defrag [ 114.790886][ T4669] BTRFS info (device loop4): using free space tree [ 116.850291][ T4627] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 116.985226][ T4669] BTRFS error (device loop4): failed to load root extent [ 116.992417][ T4669] BTRFS warning (device loop4): try to load backup roots slot 1 [ 117.005931][ T4478] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 117.058389][ T4669] BTRFS warning (device loop4): couldn't read tree root [ 117.065478][ T4669] BTRFS warning (device loop4): try to load backup roots slot 2 [ 117.084390][ T4669] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 117.096017][ T4669] BTRFS warning (device loop4): couldn't read tree root [ 117.103248][ T4669] BTRFS warning (device loop4): try to load backup roots slot 3 [ 117.168325][ T4669] BTRFS info (device loop4): enabling ssd optimizations [ 117.180227][ T4669] BTRFS info (device loop4): rebuilding free space tree [ 117.247960][ T4669] BTRFS info (device loop4): checking UUID tree [ 118.254019][ T4279] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.978840][ T4553] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4553) [ 119.916675][ T4740] device syzkaller0 entered promiscuous mode [ 120.092328][ T4743] loop3: detected capacity change from 0 to 1024 [ 120.320793][ T4743] hfsplus: unable to parse mount options [ 120.763812][ T4748] device syzkaller0 entered promiscuous mode [ 127.257572][ T4803] device syzkaller0 entered promiscuous mode [ 128.557279][ T4807] loop2: detected capacity change from 0 to 512 [ 128.861191][ T4807] EXT4-fs: Ignoring removed i_version option [ 128.869310][ T4807] EXT4-fs: Ignoring removed oldalloc option [ 128.895833][ T4807] ext4: Unknown parameter 'uid<00000000000000000000' [ 129.541867][ T4821] o2cb: This node has not been configured. [ 129.547940][ T4821] o2cb: Cluster check failed. Fix errors before retrying. [ 129.556731][ T4821] (syz.4.110,4821,1):user_dlm_register:674 ERROR: status = -22 [ 129.564383][ T4821] (syz.4.110,4821,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 130.454224][ T4833] loop1: detected capacity change from 0 to 256 [ 130.461825][ T4833] exfat: Deprecated parameter 'utf8' [ 130.467490][ T4833] exfat: Deprecated parameter 'namecase' [ 130.475515][ T4833] exfat: Deprecated parameter 'namecase' [ 130.481570][ T4833] exfat: Deprecated parameter 'namecase' [ 131.674184][ T4833] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 132.756173][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762597][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.718666][ T4891] device syzkaller0 entered promiscuous mode [ 143.427737][ T4905] loop4: detected capacity change from 0 to 2048 [ 145.242255][ T4905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.283181][ T4914] device syzkaller0 entered promiscuous mode [ 145.365879][ T4905] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.750655][ T4925] sctp: failed to load transform for md5: -4 [ 146.525455][ T4936] loop1: detected capacity change from 0 to 2048 [ 146.554679][ T4936] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 146.580514][ T4936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.167960][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 148.572652][ T4948] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.362918][ T4954] Bluetooth: MGMT ver 1.22 [ 151.199754][ T4977] fuse: Bad value for 'fd' [ 154.988649][ T4994] loop0: detected capacity change from 0 to 128 [ 155.067935][ T4994] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 155.126682][ T4994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.168776][ T4994] ext2 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.964457][ T5007] device syzkaller0 entered promiscuous mode [ 156.041437][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 156.256383][ T5013] loop0: detected capacity change from 0 to 512 [ 156.343835][ T5013] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.158: iget: bad i_size value: 38620345925642 [ 156.374938][ T5013] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.158: couldn't read orphan inode 15 (err -117) [ 156.423823][ T5013] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 156.511955][ T5019] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.158: bg 0: block 5: invalid block bitmap [ 156.572210][ T5020] EXT4-fs (loop0): shut down requested (1) [ 156.594743][ T5019] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 84 with error 28 [ 156.687127][ T5019] EXT4-fs (loop0): This should not happen!! Data will be lost [ 156.687127][ T5019] [ 156.751402][ T5019] EXT4-fs (loop0): Total free blocks count 0 [ 156.777673][ T5019] EXT4-fs (loop0): Free/Dirty block details [ 156.807164][ T5019] EXT4-fs (loop0): free_blocks=0 [ 156.837515][ T5019] EXT4-fs (loop0): dirty_blocks=88 [ 156.878911][ T5019] EXT4-fs (loop0): Block reservation details [ 156.936807][ T5019] EXT4-fs (loop0): i_reserved_data_blocks=88 [ 157.025983][ T5024] loop3: detected capacity change from 0 to 256 [ 163.097993][ T5049] binder: 5045:5049 ioctl 4018620d 0 returned -22 [ 165.108493][ T5053] loop0: detected capacity change from 0 to 2048 [ 165.139060][ T5053] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 165.155576][ T5053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.932571][ T5068] loop0: detected capacity change from 0 to 256 [ 169.034193][ T5086] loop3: detected capacity change from 0 to 256 [ 169.700478][ T26] audit: type=1800 audit(1784784666.336:2): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.176" name="file1" dev="loop3" ino=1048600 res=0 errno=0 [ 172.864617][ T5123] loop1: detected capacity change from 0 to 32768 [ 173.245675][ T5123] XFS (loop1): Mounting V5 Filesystem [ 174.132575][ T5149] loop3: detected capacity change from 0 to 512 [ 174.163980][ T5149] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.192855][ T5149] EXT4-fs (loop3): 1 truncate cleaned up [ 174.199416][ T5149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 174.214220][ T5123] XFS (loop1): Ending clean mount [ 174.253890][ T5123] XFS (loop1): Quotacheck needed: Please wait. [ 174.442688][ T5123] XFS (loop1): Quotacheck: Done. [ 176.246442][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 176.256013][ T4278] XFS (loop1): Unmounting Filesystem [ 182.166509][ T5202] loop4: detected capacity change from 0 to 2048 [ 182.186817][ T5202] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 182.220428][ T5202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.055683][ T5217] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.827570][ T5223] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 186.170700][ T5223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.185654][ T5226] bond1: (slave vlan2): making interface the new active one [ 187.474501][ T5226] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 187.484364][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 189.331067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.558357][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 191.564480][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 191.570618][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 191.576626][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 191.652647][ T5265] sctp: [Deprecated]: syz.1.217 (pid 5265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.652647][ T5265] Use struct sctp_sack_info instead [ 192.338245][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 192.909934][ T5260] device syzkaller0 entered promiscuous mode [ 192.940281][ T5260] tipc: Started in network mode [ 192.961071][ T5260] tipc: Node identity 6a944c379f6c, cluster identity 4711 [ 193.105088][ T5260] tipc: Enabled bearer , priority 0 [ 193.194954][ T5260] tipc: Resetting bearer [ 194.405536][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.411937][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.432976][ T5259] tipc: Resetting bearer [ 195.428880][ T5259] tipc: Disabling bearer [ 195.464200][ T4725] tipc: Node number set to 4126690359 [ 195.535802][ T5281] device syzkaller0 entered promiscuous mode [ 195.605111][ T5281] tipc: Enabled bearer , priority 0 [ 195.647603][ T5281] tipc: Resetting bearer [ 195.720594][ T5280] tipc: Resetting bearer [ 195.761240][ T5280] tipc: Disabling bearer [ 195.824393][ T5289] loop1: detected capacity change from 0 to 8 [ 196.683470][ T5290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.545232][ T5297] tipc: Enabled bearer , priority 0 [ 197.574640][ T5297] device syzkaller0 entered promiscuous mode [ 197.643898][ T5297] tipc: Resetting bearer [ 197.680519][ T5296] tipc: Resetting bearer [ 197.720930][ T5296] tipc: Disabling bearer [ 201.262549][ T5319] device syzkaller0 entered promiscuous mode [ 203.198248][ T4728] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 203.415885][ T4728] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.491542][ T4728] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.532289][ T4728] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.548441][ T4728] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 203.556933][ T4728] usb 3-1: Product: syz [ 203.561250][ T4728] usb 3-1: Manufacturer: syz [ 203.566063][ T4728] usb 3-1: SerialNumber: syz [ 203.585550][ T4728] usb 3-1: config 0 descriptor?? [ 204.252029][ T5341] virtio-fs: tag not found [ 204.359434][ T5341] "syz.1.238" (5341) uses obsolete ecb(arc4) skcipher [ 205.194273][ T4725] usb 3-1: USB disconnect, device number 4 [ 206.335136][ T5356] lo speed is unknown, defaulting to 1000 [ 206.352926][ T5356] lo speed is unknown, defaulting to 1000 [ 206.370213][ T5356] lo speed is unknown, defaulting to 1000 [ 208.047462][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 209.114424][ T41] lo speed is unknown, defaulting to 1000 [ 209.138946][ T5356] infiniband syz1: set active [ 209.154383][ T5356] infiniband syz1: added lo [ 209.170209][ T5356] rdma_rxe: unable to create cq [ 209.207451][ T5356] infiniband syz1: Couldn't create ib_mad CQ [ 209.238210][ T5356] infiniband syz1: Couldn't open port 1 [ 209.486666][ T5356] RDS/IB: syz1: added [ 210.428884][ T5373] loop0: detected capacity change from 0 to 512 [ 210.651539][ T5356] smc: adding ib device syz1 with port count 1 [ 210.672516][ T5356] smc: ib device syz1 port 1 has pnetid [ 210.688552][ T4318] lo speed is unknown, defaulting to 1000 [ 210.729057][ T5356] lo speed is unknown, defaulting to 1000 [ 211.887251][ T5356] lo speed is unknown, defaulting to 1000 [ 213.191250][ T5373] EXT4-fs: test_dummy_encryption requires encrypt feature [ 213.385408][ T5395] tipc: Started in network mode [ 213.408296][ T5395] tipc: Node identity 76657468115f, cluster identity 4711 [ 213.415999][ T5395] tipc: Enabled bearer , priority 0 [ 213.443908][ T5356] lo speed is unknown, defaulting to 1000 [ 213.582503][ T5398] loop4: detected capacity change from 0 to 2048 [ 213.602311][ T5398] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 213.625313][ T5398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.572418][ T41] tipc: Node number set to 1731884136 [ 215.293565][ T5356] lo speed is unknown, defaulting to 1000 [ 216.677372][ T5409] loop1: detected capacity change from 0 to 8 [ 216.693201][ T5409] squashfs image failed sanity check [ 216.727654][ T5411] loop4: detected capacity change from 0 to 2048 [ 216.821757][ T4961] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.840156][ T5411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.846413][ T5356] lo speed is unknown, defaulting to 1000 [ 216.886481][ T26] audit: type=1800 audit(1784784713.516:3): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.255" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 217.967853][ T5425] loop3: detected capacity change from 0 to 16 [ 218.007764][ T5425] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 219.388778][ T4955] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 220.982645][ T5443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.263'. [ 221.837554][ T5443] device ip6gre1 entered promiscuous mode [ 224.640433][ T5464] netlink: 'syz.0.263': attribute type 6 has an invalid length. [ 224.670269][ T5464] netlink: 72 bytes leftover after parsing attributes in process `syz.0.263'. [ 225.537005][ T5486] device syzkaller0 entered promiscuous mode [ 228.941347][ T5504] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 230.093716][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 234.512815][ T5541] tmpfs: Bad value for 'mpol' [ 236.332914][ T5561] loop1: detected capacity change from 0 to 512 [ 236.488570][ T5561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 236.497657][ T5561] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.493713][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 242.898654][ T5619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.983894][ T5619] loop4: detected capacity change from 0 to 2048 [ 243.078332][ T5619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.638412][ T5636] overlayfs: invalid redirect (./bus) [ 247.029133][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 250.449559][ T5659] IPVS: lc: FWM 3 0x00000003 - no destination available [ 251.286629][ T5668] loop1: detected capacity change from 0 to 2048 [ 251.378116][ T5668] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 251.525972][ T5668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.857610][ T5685] loop4: detected capacity change from 0 to 512 [ 253.915565][ T5688] binfmt_misc: register: failed to install interpreter file ./file0 [ 254.065075][ T5685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 254.398880][ T5685] EXT4-fs (loop4): 1 truncate cleaned up [ 254.429347][ T5685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 255.059492][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 255.638200][ T5704] loop3: detected capacity change from 0 to 512 [ 255.686240][ T5704] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.328905][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.335291][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.390341][ T5703] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 260.968341][ T5733] loop1: detected capacity change from 0 to 4096 [ 261.053048][ T5733] EXT4-fs: inline encryption not supported [ 261.176386][ T5733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.203290][ T5733] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ce018, mo2=0002] [ 261.224064][ T5733] System zones: 0-5 [ 261.256193][ T5733] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 266.263885][ T5777] xt_connbytes: Forcing CT accounting to be enabled [ 266.270979][ T5777] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 266.282995][ T5777] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 267.855972][ T5787] loop4: detected capacity change from 0 to 1024 [ 269.099354][ T5787] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 269.108864][ T5787] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (40000) [ 269.708454][ T5792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 269.891352][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 272.750287][ T5812] capability: warning: `syz.0.346' uses deprecated v2 capabilities in a way that may be insecure [ 273.800332][ T5816] mmap: syz.2.348 (5816) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 275.118386][ T5822] loop2: detected capacity change from 0 to 16 [ 275.146821][ T5822] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 276.089271][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 276.108574][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.117226][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.834294][ T4961] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.996086][ T5842] loop2: detected capacity change from 0 to 512 [ 279.106099][ T5842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 279.124847][ T5842] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.970531][ T5857] nfs: Unknown parameter '/dev/cpu/#/msr' [ 280.834140][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 281.078250][ T4729] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 281.879558][ T5865] loop4: detected capacity change from 0 to 4096 [ 281.964482][ T4729] usb 2-1: config 0 has no interfaces? [ 281.994736][ T5865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.003903][ T4729] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.070198][ T4729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.107005][ T5874] loop3: detected capacity change from 0 to 16 [ 282.160019][ T4729] usb 2-1: config 0 descriptor?? [ 282.164465][ T5874] erofs: (device loop3): mounted with root inode @ nid 36. [ 283.012197][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 283.314659][ T26] audit: type=1800 audit(1784784779.716:4): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.359" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 283.497386][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 283.578069][ T5887] process 'syz.1.356' launched './file2' with NULL argv: empty string added [ 283.881959][ T5889] loop2: detected capacity change from 0 to 512 [ 284.670929][ T5889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 284.691807][ T5889] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.890400][ T5900] loop3: detected capacity change from 0 to 512 [ 284.950099][ T5900] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 285.025368][ T5900] EXT4-fs (loop3): 1 truncate cleaned up [ 285.073198][ T5900] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 285.102566][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 285.445416][ T4349] usb 2-1: USB disconnect, device number 2 [ 285.513643][ T4274] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 285.652033][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 287.860551][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 293.495695][ T5950] loop4: detected capacity change from 0 to 512 [ 293.530131][ T5950] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 294.173675][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.380'. [ 294.860727][ T5950] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 294.878579][ T5950] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.090765][ T5962] syz.3.373 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 296.765905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.060863][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 297.440004][ T5970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.518934][ T5970] loop3: detected capacity change from 0 to 2048 [ 298.212942][ T5970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.085945][ T5980] tipc: Started in network mode [ 301.123001][ T5980] tipc: Node identity 2ee977539746, cluster identity 4711 [ 301.181718][ T5980] tipc: Enabled bearer , priority 0 [ 301.363832][ T5986] device syzkaller0 entered promiscuous mode [ 301.398741][ T5986] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 302.059308][ T5997] tipc: Resetting bearer [ 302.163650][ T5978] tipc: Resetting bearer [ 302.339577][ T5978] tipc: Disabling bearer [ 302.371527][ T4350] tipc: Node number set to 3115284307 [ 302.645053][ T6003] ubi0: attaching mtd0 [ 302.658422][ T6003] ubi0: scanning is finished [ 302.663115][ T6003] ubi0: empty MTD device detected [ 303.243483][ T6003] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 303.355990][ T6006] loop2: detected capacity change from 0 to 512 [ 303.385541][ T6006] EXT4-fs (loop2): orphan cleanup on readonly fs [ 303.431469][ T6006] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.389: invalid indirect mapped block 28777 (level 2) [ 303.583309][ T6006] EXT4-fs (loop2): 1 truncate cleaned up [ 303.642570][ T6006] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 304.625897][ T6018] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 309.092909][ T26] audit: type=1326 audit(1784784805.066:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.4.394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d3f9de99 code=0x7ffc0000 [ 309.420973][ T26] audit: type=1326 audit(1784784805.066:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.4.394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d3f9de99 code=0x7ffc0000 [ 309.907058][ T26] audit: type=1326 audit(1784784805.076:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.4.394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff4d3f9de99 code=0x7ffc0000 [ 310.027688][ T26] audit: type=1326 audit(1784784805.076:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.4.394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d3f9de99 code=0x7ffc0000 [ 310.310971][ T26] audit: type=1326 audit(1784784805.076:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.4.394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d3f9de99 code=0x7ffc0000 [ 310.610597][ T26] audit: type=1326 audit(1784784805.076:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.4.394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff4d3f9de99 code=0x7ffc0000 [ 310.918397][ T26] audit: type=1326 audit(1784784805.076:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.4.394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d3f9de99 code=0x7ffc0000 [ 311.085630][ T26] audit: type=1326 audit(1784784805.076:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.4.394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d3f9de99 code=0x7ffc0000 [ 311.172383][ T26] audit: type=1326 audit(1784784805.076:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.4.394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7ff4d3f9de99 code=0x7ffc0000 [ 311.173755][ T6050] loop3: detected capacity change from 0 to 512 [ 311.236483][ T26] audit: type=1326 audit(1784784805.076:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.4.394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d3f9de99 code=0x7ffc0000 [ 311.270143][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 311.282139][ T6050] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 311.775070][ T6050] EXT4-fs (loop3): 1 truncate cleaned up [ 311.814768][ T6050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 313.624027][ T4285] Bluetooth: hci4: command 0x0405 tx timeout [ 314.159269][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 315.692901][ T6083] loop4: detected capacity change from 0 to 512 [ 316.051689][ T6083] EXT4-fs: Ignoring removed orlov option [ 316.128198][ T6083] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.432059][ T6083] EXT4-fs (loop4): Test dummy encryption mode enabled [ 316.462584][ T6083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 316.779633][ T6083] EXT4-fs (loop4): 1 truncate cleaned up [ 316.795624][ T6083] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 316.887426][ T6094] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 316.897455][ T6094] hfsplus: unable to find HFS+ superblock [ 317.418607][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.425027][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.844606][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 318.947461][ T6109] netlink: 96 bytes leftover after parsing attributes in process `syz.0.412'. [ 319.267009][ T6098] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 321.027795][ T6125] loop1: detected capacity change from 0 to 512 [ 321.271311][ T6125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 321.362172][ T6125] EXT4-fs (loop1): 1 truncate cleaned up [ 321.367866][ T6125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 321.562306][ T6122] binfmt_misc: register: failed to install interpreter file ./file0 [ 322.073150][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 329.045934][ T6181] xt_CT: No such helper "snmp_trap" [ 329.516410][ T6188] loop4: detected capacity change from 0 to 32768 [ 329.977422][ T6188] XFS (loop4): Mounting V5 Filesystem [ 330.094995][ T6180] loop3: detected capacity change from 0 to 2048 [ 330.177939][ T6180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 330.250405][ T6188] XFS (loop4): Ending clean mount [ 330.318863][ T6188] XFS (loop4): Quotacheck needed: Please wait. [ 330.471471][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 330.489909][ T6188] XFS (loop4): Quotacheck: Done. [ 330.831548][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 330.831716][ T26] audit: type=1800 audit(1784784827.436:31): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.428" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 331.146415][ T4279] XFS (loop4): Unmounting Filesystem [ 331.247927][ T6206] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 331.257323][ T6206] hfsplus: unable to find HFS+ superblock [ 333.225650][ T6227] smc: net device vlan1 applied user defined pnetid SYZ2 [ 334.750252][ T26] audit: type=1107 audit(1784784831.386:32): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 334.750252][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 334.750252][ T26] Вh0VZ2' [ 335.458576][ T6244] tipc: New replicast peer: 172.30.0.4 [ 335.465728][ T6244] tipc: Enabled bearer , priority 10 [ 336.258899][ T6241] loop4: detected capacity change from 0 to 2048 [ 336.374911][ T6241] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 336.402279][ T6241] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.745435][ T6252] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 336.754928][ T6252] hfsplus: unable to find HFS+ superblock [ 338.542637][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 339.936218][ T6276] loop4: detected capacity change from 0 to 8 [ 341.194425][ T6273] SQUASHFS error: Unable to read inode 0xe3 [ 341.811856][ T6281] overlayfs: missing 'lowerdir' [ 341.845217][ T6281] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 341.853525][ T6281] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 341.862845][ T6281] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 341.870945][ T6281] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 342.115763][ T6279] loop4: detected capacity change from 0 to 2048 [ 342.415719][ T6279] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.709559][ T6279] program syz.4.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.618455][ T129] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 347.049851][ T6310] loop3: detected capacity change from 0 to 512 [ 347.074011][ T6310] EXT4-fs: Ignoring removed orlov option [ 347.094102][ T6310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 347.119663][ T6310] EXT4-fs (loop3): Test dummy encryption mode enabled [ 347.126496][ T6310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 347.184076][ T6310] EXT4-fs (loop3): 1 truncate cleaned up [ 347.198483][ T6310] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 348.260923][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 349.045543][ T6323] xt_CT: No such helper "snmp_trap" [ 359.543678][ T6381] loop4: detected capacity change from 0 to 2048 [ 359.789158][ T6381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 360.209746][ T4286] Bluetooth: hci2: ACL packet for unknown connection handle 1211 [ 360.615222][ T4279] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 361.439567][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 364.430055][ T6417] futex_wake_op: syz.1.475 tries to shift op by 144; fix this program [ 365.263589][ T6408] [ 365.265968][ T6408] ====================================================== [ 365.272984][ T6408] WARNING: possible circular locking dependency detected [ 365.280013][ T6408] syzkaller #0 Not tainted [ 365.284426][ T6408] ------------------------------------------------------ [ 365.291445][ T6408] syz.0.481/6408 is trying to acquire lock: [ 365.297335][ T6408] ffffffff9703a1b8 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 365.307357][ T6408] [ 365.307357][ T6408] but task is already holding lock: [ 365.314716][ T6408] ffff88802ec406b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 365.324995][ T6408] [ 365.324995][ T6408] which lock already depends on the new lock. [ 365.324995][ T6408] [ 365.335483][ T6408] [ 365.335483][ T6408] the existing dependency chain (in reverse order) is: [ 365.344496][ T6408] [ 365.344496][ T6408] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 365.352757][ T6408] __mutex_lock+0x12d/0xae0 [ 365.357797][ T6408] nf_tables_dumpreset_obj+0x6e/0x90 [ 365.363627][ T6408] netlink_dump+0x683/0xcd0 [ 365.368661][ T6408] __netlink_dump_start+0x52c/0x6f0 [ 365.374397][ T6408] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 365.380557][ T6408] nf_tables_getobj_reset+0x1cb/0x610 [ 365.386462][ T6408] nfnetlink_rcv_msg+0x898/0x1290 [ 365.392011][ T6408] netlink_rcv_skb+0x1ef/0x440 [ 365.397304][ T6408] nfnetlink_rcv+0x2b0/0x2470 [ 365.402519][ T6408] netlink_unicast+0x7ad/0x920 [ 365.407806][ T6408] netlink_sendmsg+0x8ad/0xbd0 [ 365.413101][ T6408] ____sys_sendmsg+0x5ed/0x9a0 [ 365.418392][ T6408] ___sys_sendmsg+0x2a2/0x360 [ 365.423597][ T6408] __se_sys_sendmsg+0x1c3/0x2b0 [ 365.428972][ T6408] do_syscall_64+0x4c/0xa0 [ 365.433919][ T6408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.440510][ T6408] [ 365.440510][ T6408] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 365.448770][ T6408] __mutex_lock+0x12d/0xae0 [ 365.453799][ T6408] __netlink_dump_start+0x11e/0x6f0 [ 365.459522][ T6408] ip_set_dump+0x152/0x1e0 [ 365.464464][ T6408] nfnetlink_rcv_msg+0xcab/0x1290 [ 365.470016][ T6408] netlink_rcv_skb+0x1ef/0x440 [ 365.475306][ T6408] nfnetlink_rcv+0x2b0/0x2470 [ 365.480507][ T6408] netlink_unicast+0x7ad/0x920 [ 365.485888][ T6408] netlink_sendmsg+0x8ad/0xbd0 [ 365.491180][ T6408] ____sys_sendmsg+0x5ed/0x9a0 [ 365.496471][ T6408] ___sys_sendmsg+0x2a2/0x360 [ 365.501677][ T6408] __se_sys_sendmsg+0x1c3/0x2b0 [ 365.507093][ T6408] do_syscall_64+0x4c/0xa0 [ 365.512040][ T6408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.518462][ T6408] [ 365.518462][ T6408] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 365.526289][ T6408] __lock_acquire+0x2d18/0x7c40 [ 365.531763][ T6408] lock_acquire+0x1bb/0x4a0 [ 365.536793][ T6408] __mutex_lock+0x12d/0xae0 [ 365.541822][ T6408] ip_set_nfnl_get_byindex+0x63/0x230 [ 365.547722][ T6408] set_match_v1_checkentry+0x6d/0x220 [ 365.553616][ T6408] xt_check_match+0x499/0xc50 [ 365.558850][ T6408] __nft_match_init+0x63d/0x860 [ 365.564233][ T6408] nf_tables_newrule+0x170a/0x2810 [ 365.569884][ T6408] nfnetlink_rcv+0x1119/0x2470 [ 365.575175][ T6408] netlink_unicast+0x7ad/0x920 [ 365.580463][ T6408] netlink_sendmsg+0x8ad/0xbd0 [ 365.585750][ T6408] ____sys_sendmsg+0x5ed/0x9a0 [ 365.591039][ T6408] ___sys_sendmsg+0x2a2/0x360 [ 365.596237][ T6408] __se_sys_sendmsg+0x1c3/0x2b0 [ 365.601619][ T6408] do_syscall_64+0x4c/0xa0 [ 365.606574][ T6408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.612994][ T6408] [ 365.612994][ T6408] other info that might help us debug this: [ 365.612994][ T6408] [ 365.623224][ T6408] Chain exists of: [ 365.623224][ T6408] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 365.623224][ T6408] [ 365.637676][ T6408] Possible unsafe locking scenario: [ 365.637676][ T6408] [ 365.645133][ T6408] CPU0 CPU1 [ 365.650499][ T6408] ---- ---- [ 365.655863][ T6408] lock(&nft_net->commit_mutex); [ 365.660912][ T6408] lock(nlk_cb_mutex-NETFILTER); [ 365.668458][ T6408] lock(&nft_net->commit_mutex); [ 365.676018][ T6408] lock(nfnl_subsys_ipset); [ 365.680616][ T6408] [ 365.680616][ T6408] *** DEADLOCK *** [ 365.680616][ T6408] [ 365.688761][ T6408] 1 lock held by syz.0.481/6408: [ 365.693784][ T6408] #0: ffff88802ec406b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 365.704506][ T6408] [ 365.704506][ T6408] stack backtrace: [ 365.710413][ T6408] CPU: 1 PID: 6408 Comm: syz.0.481 Not tainted syzkaller #0 [ 365.717694][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 365.727755][ T6408] Call Trace: [ 365.731035][ T6408] [ 365.733969][ T6408] dump_stack_lvl+0x188/0x24e [ 365.738658][ T6408] ? load_image+0x410/0x410 [ 365.743163][ T6408] ? show_regs_print_info+0x12/0x12 [ 365.748374][ T6408] ? print_circular_bug+0x12b/0x1a0 [ 365.753582][ T6408] check_noncircular+0x296/0x330 [ 365.758527][ T6408] ? add_chain_block+0x9b0/0x9b0 [ 365.763468][ T6408] ? lockdep_lock+0xf1/0x1f0 [ 365.768061][ T6408] ? _find_first_zero_bit+0xd2/0x100 [ 365.773354][ T6408] __lock_acquire+0x2d18/0x7c40 [ 365.778233][ T6408] ? mark_lock+0x94/0x320 [ 365.782592][ T6408] ? verify_lock_unused+0x140/0x140 [ 365.787883][ T6408] ? __lock_acquire+0x138a/0x7c40 [ 365.792930][ T6408] lock_acquire+0x1bb/0x4a0 [ 365.797444][ T6408] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 365.802999][ T6408] ? __might_sleep+0xd0/0xd0 [ 365.807593][ T6408] ? read_lock_is_recursive+0x10/0x10 [ 365.812983][ T6408] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 365.818634][ T6408] ? lockdep_hardirqs_on+0x94/0x140 [ 365.823850][ T6408] __mutex_lock+0x12d/0xae0 [ 365.828365][ T6408] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 365.833924][ T6408] ? ip_set_pernet+0x23/0x230 [ 365.838621][ T6408] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 365.844175][ T6408] ? mutex_lock_nested+0x10/0x10 [ 365.849119][ T6408] ? __flush_work+0x109/0xac0 [ 365.853970][ T6408] ? ip_set_pernet+0x23/0x230 [ 365.858655][ T6408] ? ip_set_pernet+0x23/0x230 [ 365.863339][ T6408] ip_set_nfnl_get_byindex+0x63/0x230 [ 365.868717][ T6408] set_match_v1_checkentry+0x6d/0x220 [ 365.874092][ T6408] xt_check_match+0x499/0xc50 [ 365.878777][ T6408] ? xt_check_proc_name+0x270/0x270 [ 365.883980][ T6408] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 365.889620][ T6408] ? lockdep_hardirqs_on+0x94/0x140 [ 365.894828][ T6408] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 365.900510][ T6408] __nft_match_init+0x63d/0x860 [ 365.905375][ T6408] ? nft_match_large_dump+0x40/0x40 [ 365.910594][ T6408] ? __kmem_cache_alloc_node+0x19d/0x270 [ 365.916230][ T6408] ? nf_tables_newrule+0x14d9/0x2810 [ 365.921518][ T6408] ? rcu_is_watching+0x11/0xa0 [ 365.926286][ T6408] ? nf_tables_newrule+0x14d9/0x2810 [ 365.931573][ T6408] ? __kmalloc+0xe4/0x240 [ 365.935909][ T6408] nf_tables_newrule+0x170a/0x2810 [ 365.941033][ T6408] ? nf_tables_delchain+0xf00/0xf00 [ 365.946494][ T6408] ? __lock_acquire+0x7c40/0x7c40 [ 365.951523][ T6408] ? mutex_unlock+0x10/0x10 [ 365.956046][ T6408] ? __nla_parse+0x3c/0x50 [ 365.960474][ T6408] nfnetlink_rcv+0x1119/0x2470 [ 365.965257][ T6408] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 365.970805][ T6408] ? rcu_preempt_deferred_qs_irqrestore+0x827/0xbd0 [ 365.977413][ T6408] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.982626][ T6408] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 365.988103][ T6408] ? __rcu_read_unlock+0x78/0xd0 [ 365.993044][ T6408] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.998251][ T6408] netlink_unicast+0x7ad/0x920 [ 366.003026][ T6408] netlink_sendmsg+0x8ad/0xbd0 [ 366.007799][ T6408] ? netlink_getsockopt+0x550/0x550 [ 366.013006][ T6408] ? apparmor_socket_sendmsg+0x16c/0x330 [ 366.018642][ T6408] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 366.023927][ T6408] ? security_socket_sendmsg+0x7c/0xa0 [ 366.029397][ T6408] ? netlink_getsockopt+0x550/0x550 [ 366.034609][ T6408] ____sys_sendmsg+0x5ed/0x9a0 [ 366.039372][ T6408] ? __sys_sendmsg_sock+0x30/0x30 [ 366.044416][ T6408] ? __import_iovec+0x306/0x510 [ 366.049291][ T6408] ? import_iovec+0x6f/0xa0 [ 366.053812][ T6408] ___sys_sendmsg+0x2a2/0x360 [ 366.058509][ T6408] ? __sys_sendmsg+0x2a0/0x2a0 [ 366.063301][ T6408] __se_sys_sendmsg+0x1c3/0x2b0 [ 366.068162][ T6408] ? __x64_sys_sendmsg+0x80/0x80 [ 366.073115][ T6408] ? lockdep_hardirqs_on+0x94/0x140 [ 366.078326][ T6408] do_syscall_64+0x4c/0xa0 [ 366.082752][ T6408] ? clear_bhb_loop+0x60/0xb0 [ 366.087441][ T6408] ? clear_bhb_loop+0x60/0xb0 [ 366.092132][ T6408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.098022][ T6408] RIP: 0033:0x7fa54279de99 [ 366.102519][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.122235][ T6408] RSP: 002b:00007fa5435f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.130673][ T6408] RAX: ffffffffffffffda RBX: 00007fa542a26090 RCX: 00007fa54279de99 [ 366.138659][ T6408] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 000000000000000a [ 366.146640][ T6408] RBP: 00007fa542833eaf R08: 0000000000000000 R09: 0000000000000000 [ 366.154977][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.162964][ T6408] R13: 00007fa542a26128 R14: 00007fa542a26090 R15: 00007ffccd328198 [ 366.170963][ T6408] [ 366.213795][ T6408] Cannot find set identified by id 0 to match