last executing test programs: 3m51.908726664s ago: executing program 2 (id=335): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000010c0)="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", 0xff55}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4491263", 0x78}, {&(0x7f0000000dc0)="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", 0x16c}, {&(0x7f0000000d00)="60cd1aa66b785e7173949b3ca0b96d182305dbc8da490593c5616809105f26e7830703675a32d203bfe396dc2abb07117746775ac0a9efc95ae38b96116a1bf7bb288cc9086dba45be3eeec21c1c6d427ebee1c15bff8e9397c806205fea2cd700ecb6a8eb15ed367357b7cd48cc52b99ca9ace5bf3e9c0f70a3aaca7cd4afdad1f9337812468c980394c7b346e0614f310c86ae148600eaf786ceba05cf825a29db1b00237b44861dd88d9202c496537c0d20aef64126178bf3bf351d", 0xbd}], 0x4, 0x8, 0x5) ioctl$TCFLSH(r0, 0x540b, 0x2) 3m51.819327795s ago: executing program 2 (id=337): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5406, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 3m51.556786126s ago: executing program 2 (id=339): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 3m51.495119186s ago: executing program 2 (id=340): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000780)={[{@fat=@tz_utc}, {@fat=@gid={'gid', 0x3d, 0xee01}}, {@nodots}, {@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d8}}, {@dots}, {@dots}, {@nodots}, {}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@usefree}, {@fat=@flush}, {@fat=@sys_immutable}, {@dots}, {@fat=@showexec}, {@nodots}, {@fat=@errors_continue}, {@dots}, {@nodots}]}, 0x1, 0x1fe, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 3m51.252573327s ago: executing program 2 (id=343): syz_usb_connect(0x0, 0x2f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x44, 0x10, 0x4d, 0x40, 0xeb0, 0x9071, 0x18ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x3, 0xb, 0x0, 0x1, [{{0x9, 0x4, 0x6a, 0x7, 0x1, 0xff, 0xff, 0xff, 0x5e, [], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0xe0, 0x80, 0x6, [@generic={0x2, 0xb}]}}]}}]}}]}}, 0x0) 3m50.63280541s ago: executing program 2 (id=355): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, 0x0) 3m50.51301109s ago: executing program 32 (id=355): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, 0x0) 3m27.447202203s ago: executing program 1 (id=648): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000700)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) write(r0, 0x0, 0x0) 3m27.310244614s ago: executing program 1 (id=651): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = syz_io_uring_setup(0x237, &(0x7f0000000200)={0x0, 0x8, 0x10100, 0x3, 0x2c2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f0000000740)=""/59, 0x3b) 3m27.016833576s ago: executing program 1 (id=654): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) ptrace(0x4208, 0x0) 3m26.997113085s ago: executing program 1 (id=655): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2004400, &(0x7f0000001140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c6869643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001f80)="$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") mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r0, 0x83000000) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 3m26.772875086s ago: executing program 1 (id=658): r0 = io_uring_setup(0x901, &(0x7f00000004c0)={0x0, 0x894c, 0x10, 0xfff7ffff, 0x1fc}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1083) 3m26.689104427s ago: executing program 3 (id=662): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x400) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 3m26.580940328s ago: executing program 3 (id=664): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x1, 0x0, 0x0) 3m26.503465518s ago: executing program 3 (id=666): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$packet(r0, 0x0, 0x0, 0x4000040, 0x0, 0x0) 3m26.376889178s ago: executing program 1 (id=667): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3m26.304735859s ago: executing program 33 (id=667): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3m26.298065999s ago: executing program 3 (id=668): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2004400, &(0x7f0000001140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c6869643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001f80)="$eJzs209sm+d9B/Dfw1dyaKdrFbdzkzbLWLQIMqUN5P9KvAH2rApt5iZGZWXzZTBlyQ4RiVIluXC6ofWwAUWAHowC62EDhlx2GLCDd9hlp2CHYcCwwdhhKFa009I1S28sNiCnTcP78qFEyXKsxbElO5+PYX/Jl7+XfP7Q5Es+fAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiPjNL58aOZh2uhUAwP300sTXRw57/weAj5RzPv8DAAAAAAAAAAAAAMBul6KIP40Ur/64ky5U17vqZ1rtK1cnx8a33m1vihS1KKr68m/94KHDR44eOz7ay/ff/8P2RLw8ce5U4/T83MLizNLSzHRjst26OD89s+17uNv9NxuuBqAx99qV6UuXlhqHnju84earQ+888uiBoRPHXzy/v1c7OTY+PtFXMzD4gR/9Frc7w2NPFPHTSFH/7rupGRG1uPuxuMNz517bW3ViuOrE5Nh41ZHZVrO9XN6YarmqFjHUt9PJ3hjdh7m4K42Ia2XzywYPl92bWGguNqdmZxpnm4vLreXWfDvVuq0t+zMUtRhNEQsR0SluvbvBKOLfIsX33uukqYgoeuPwbHVi8J3bU7sHfdyGgbJvRcTNeADmbBd7JIp4I1J8//xIXMzjWg3b0xFfK/OpiG+UuRJxPV9P5RPkyYhfbPF84sEyEEX8Y6SYT5003Zv76nXlzCuNr7YvzffV9l5XHvj3h/tpl7821aOIqeoVv5M++MEOAAAAAAC7TxF/EyluzD2TFqJ/TbHVvtw415ya7X4r3Pvuv5H3Wl1dXR1K3WzkHMl5MufZnBdyLuS8lvN6zjdz3sj5Vs6bOVdydnJGLT9+zkbOkZwnc57NeSHnQs5rOa/nfDPnjZxv5byZcyVnJ2dY9wIAAAAAAABgl9kbRfwoUnz+r79ZnVcc1Xnpnzgx+sxXvtB/zvin73A/Ze1zEXEjtndO7mA+dTjVyj8ffr/YnnoU8e18/t8f7HRjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHVWLIj4dKX7wRidFiohGxIXo5kqx060DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPoh6KuJ0pPj5l+vV9ZsR8ZmI+N/V8k9ErKxustMtBgAAAAAAAABukYoYiRSPPdFJQxFxdeidRx49MHTi+Ivn9xdRRCpL+utfnjh3qnF6fm5hcWZpaWa6MdluXZyfntnuw9XPtNpXrk6Ojd+TztzR3nvc/r310/MLry+2Lr+6vOXt++qnppaWF5sXt7459kYtYqR/y3DV4Mmx8arRs61mu9o11W7TwFpEY7udAQAAAAAAAOChsS8VcTRSvNo6knrrxgPdNf9f6l4r1mr//PfXfwswuyl7+n8/sJ3LabsNHa4W3huTY+PjE32bBwZvLS3blFIRfxUpPvs7j1fr4Sn2bbk2XtbtiRTHvnkk1w19tqw7uaGqPjw5Nt54ab79pVOzs/MXm8vNqdmZxsRC8+K2fzgAAAAAAAAAAPfQvlTEn0WK3x25mXrnnef1/4Hutb71/1+vltAr9bQx11Rr+x+v1va7lz9xYrQx/qu3234v1v/LNqVUxL9Gisd+7/HqfPre+v/Iptqy7r8ixb/8w5O5rranrDvY6073Hi+1ZmdGUh6rzz3bq42q9niu/eR67cGy9nOR4i+e3lg7mms/tV57qKz9o0jxP0e3rv3l9drDZe0fRorfervRq91X1p7JtQfWa5+7OD87fadhLef/byPF2Z9/JfX6fNv57/v9x7VNueaWOX//yx/W/A/1bbuW5/VHef4P3mH+/y5S/PFPnsx13bE/lG9/rPp3ff5/O1L8569srD2Wa/ev1x7cbrd2Wjn/X4wUJ374w7U+5/nPI7s+Q/3z/5mBjbn2LNmh+X+sb9tQbtfh/+dYfBQtvf6t15qzszOLLrjgggtrF3b6lYn7oXz//6dI8cKZWuodx+T3/491r60f/7337fX3/xc25Zodev/f37fthXzUMjgQUV+eWxg8EFFfev1bX2rNNS/PXJ5pjx47euT50WPHnh/c0zu2W7+07aF7KJTzfyZSvPKTf177HLPx+G/r4/99m3LNDs3/J/v7tOG4ZttD8ZFUzv/1SPGdt99d+7z5fsf/vc//z3x+Y679/9uh+f9U37bqN/4fj3i+b9ueiDi13ccCAACAh8y+vE7+J7/292vnvG/8/B9f6NX2f/9zO7vh/H8AAAAAAPio25eK+MtI8d8jX0y9c8i28/vP6U25Zod+/3egb9v0fTqvZduDDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwC6Uo4qlI8eqPO2mlKK931c+02leuTo6Nb73b3hQpalFU9eXf+sFDh48cPXZ8tJfvv/+H7Yl4eeLcqcbp+bmFxZmlpZnpxmS7dXF+embb93C3+282XA1AY+61K9OXLi01Dj13eMPNV4feeeTRA0Mnjr94fn+vdnJsfHyir2Zg8AM/+i3SbbbviSIuRYr6d99N/15E1OLux+IOz517bW/VieGqE5Nj41VHZlvN9nJ5Y6rlqlrEUN9OJ3tjdB/m4q40Iq6VzS8bPFx2b2Khudicmp1pnG0uLreWW/PtVOu2tuzPUNRiNEUsRESnuPXuBqOIqUjxvfc66e0iouiNw7MvTXx95PCd21O7B33st/qdLTcPlH0rIm7GAzBnu9gjUcTHIsX3z4/ET4vuuFbD9nTE18p8KuIbZa5EXM/XU/kEeTLiF1s8n3iwDEQRZyPFfOqk/yjy3FevK2deaXy1fWm+r7b3uvLAvz/cT7v8takeRfysesXvpJ/5/wwAAAAA8BAp4jcixY25Z1K1Pri2pthqX26ca07Ndr/W733338h7ra6urg6lbjZyjuQ8mfNszgs5F3Jey3k955s5b+R8K+fNnCs5Ozmjlh8/ZyPnSM6TOc/mvJBzIee1nNdzvpnzRs63ct7MuZKzkzN8Tw4AAAAAAADsQrUo4vFI8YM3Omm16C7wXohurljnfOj9XwAAAP//dBg+9w==") mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r0, 0x83000000) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 3m26.11555314s ago: executing program 3 (id=671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000200)={0x3a}, 0x8) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x27}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x10, 0x0, "fd46"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_UPDATE_FT_IES(r12, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x190, r13, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1ff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x25}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffc}, @NL80211_ATTR_IE={0x142, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x8, {0x1, 0x80, @val=0x1, @val=0x18, @void}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0x7c, 0x54}}, @preq={0x82, 0x83, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x3, 0x8, 0x2b, @device_a, 0x1, @value=@device_b, 0x9, 0xcbd2, 0x9, [{{0x1, 0x0, 0x1}, @device_b}, {{0x1, 0x0, 0x1}, @broadcast, 0x34}, {{0x0, 0x0, 0x1}, @device_a, 0x2}, {{}, @broadcast, 0x154}, {{0x1, 0x0, 0x1}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_a, 0x46b8}, {{0x1, 0x0, 0x1}, @broadcast, 0x7ff}, {{0x1, 0x0, 0x1}, @device_b}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @measure_req={0x26, 0x9c, {0xa, 0x1, 0x4, "bf48f6e78c3f7d02ec8afed6a20e8b55891b16d3db1ff93f2ac9e7cb58b80ecb6bc7c45755970f228abf7f83010fe12125c22badee08ceb699d93d0730612ff4b463a9ef10d0c9b5f3e9883de22287aedd634931d1bff3d9b45d71ed2821349f90e1c7fc3de195dd14d9409af5db02fe58dca432b60bfd9b39409346ae3ed8c7232ad5f98ee1db312c0232e0ea1a6f59097e0f76aa46859c63"}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x810}, 0x4008010) sendmsg$NL80211_CMD_TDLS_MGMT(r11, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, r14, 0x0) 3m25.852191441s ago: executing program 4 (id=674): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) mount_setattr(r2, &(0x7f0000001980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9200, &(0x7f0000000100)={0x8, 0x1, 0x100000, {r2}}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x13, 0x0, '.\x00'}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) 3m25.728655031s ago: executing program 4 (id=676): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x62, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000240000000000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000004000000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001000"/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000380)='./file0\x00', r6, &(0x7f0000000200)='./bus\x00', 0x0) 3m25.723849772s ago: executing program 3 (id=678): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x408203, 0x12345}) io_uring_enter(r0, 0x54, 0x0, 0x1, 0x0, 0x0) 3m25.457898962s ago: executing program 34 (id=678): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x408203, 0x12345}) io_uring_enter(r0, 0x54, 0x0, 0x1, 0x0, 0x0) 3m25.360319263s ago: executing program 4 (id=679): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 3m24.436778367s ago: executing program 4 (id=682): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2004400, &(0x7f0000001140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c6869643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001f80)="$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") mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r0, 0x83000000) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 3m24.023721959s ago: executing program 4 (id=686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 3m23.272914812s ago: executing program 4 (id=693): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 3m22.970456414s ago: executing program 35 (id=693): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 1m8.664632914s ago: executing program 8 (id=1498): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffff"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1m8.552396974s ago: executing program 8 (id=1501): syz_emit_ethernet(0x209d, &(0x7f0000002700)=ANY=[], 0x0) 1m8.441510565s ago: executing program 8 (id=1504): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b10005", 0x3, 0xa, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 1m8.299396285s ago: executing program 8 (id=1507): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1m7.329573079s ago: executing program 8 (id=1521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x30}}, 0x0) 1m7.18089543s ago: executing program 8 (id=1522): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 51.916196169s ago: executing program 36 (id=1522): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 6.6688797s ago: executing program 9 (id=1889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000d80)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') pread64(r2, &(0x7f0000000480)=""/177, 0xb1, 0x47) 6.628143881s ago: executing program 9 (id=1890): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x3, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) 5.676937525s ago: executing program 9 (id=1895): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) r1 = fsopen(0x0, 0x1) fsmount(r1, 0x1, 0x72) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 5.644758375s ago: executing program 9 (id=1897): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 5.260941607s ago: executing program 7 (id=1904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, 0xffffffffffffffff, 0x0, 0xed}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000700)=@newsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local}, {@in=@remote, 0x0, 0x6c}, @in=@multicast1, {0x0, 0x6}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c}]}, 0x10c}}, 0x0) 4.49289471s ago: executing program 6 (id=1910): r0 = syz_open_dev$vim2m(&(0x7f0000019080), 0x401, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xa, 0x1, 0x3, "adbdeec74e9e4aea00000000000000a902552f08cefca462dda36c7451f8e500"}) 4.4757076s ago: executing program 6 (id=1911): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008003400d500000008000300", @ANYRES32=r6, @ANYBLOB="08003c00020000000800310000000000050037000100000005003500f2000000050033000000000005002e00010000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.304411171s ago: executing program 6 (id=1912): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x140a, 0x603, 0x0, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 4.219693581s ago: executing program 6 (id=1913): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="f25705c1e1399eda45690554e701607259a84d61a5b1ab5dda553fde5d3a", 0x1e, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.080935032s ago: executing program 6 (id=1914): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x8}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 2.953440587s ago: executing program 9 (id=1915): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) 2.634384749s ago: executing program 7 (id=1918): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r1}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.504695509s ago: executing program 7 (id=1920): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0xd2, &(0x7f0000000140)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, &(0x7f0000000140)='grpquota') 2.38573118s ago: executing program 7 (id=1923): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x140a, 0x603, 0x0, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 2.33549067s ago: executing program 7 (id=1925): socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x3f}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 2.16880468s ago: executing program 7 (id=1926): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 1.910236612s ago: executing program 9 (id=1927): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.667429463s ago: executing program 6 (id=1928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, 0xffffffffffffffff, 0x0, 0xed}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000700)=@newsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local}, {@in=@remote, 0x0, 0x6c}, @in=@multicast1, {0x0, 0x6}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c}]}, 0x10c}}, 0x0) 1.516933773s ago: executing program 5 (id=1929): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="d9d178e1c87b", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.350976945s ago: executing program 5 (id=1931): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 1.164843645s ago: executing program 0 (id=1932): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x48080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYBLOB="080004000000020008001500"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.164672615s ago: executing program 5 (id=1933): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r1}, 0x10) sync() 1.012918706s ago: executing program 5 (id=1934): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x48000000, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000006"], 0x14}}, 0x0) 998.706676ms ago: executing program 0 (id=1935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 876.932377ms ago: executing program 5 (id=1936): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x140a, 0x603, 0x0, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 876.651716ms ago: executing program 0 (id=1937): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newpolicy={0xe4, 0x13, 0x309, 0x0, 0x0, {{@in=@empty, @in6=@local, 0x0, 0xfffc, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@user_kmaddress={0x2c, 0x13, {@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x2}}]}, 0xe4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x2) 840.602577ms ago: executing program 5 (id=1938): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x8}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 684.362987ms ago: executing program 0 (id=1939): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 556.982398ms ago: executing program 0 (id=1940): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f00000001c0)="d1d6", 0x2) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r0) 0s ago: executing program 0 (id=1941): socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): a found [ 119.585647][ T6003] device hsr_slave_0 entered promiscuous mode [ 119.618947][ T6003] device hsr_slave_1 entered promiscuous mode [ 119.670201][ T6003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.677501][ T6003] Cannot create hsr debugfs directory [ 119.698176][ T4084] Bluetooth: hci4: command 0x0409 tx timeout [ 120.055572][ T6098] loop0: detected capacity change from 0 to 1024 [ 120.080538][ T6098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.186713][ T4032] UDF-fs: error (device loop0): udf_read_inode: (ino 840) failed !bh [ 120.191203][ T4032] UDF-fs: error (device loop0): udf_read_inode: (ino 840) failed !bh [ 120.388496][ T570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.480405][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.482107][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.484350][ T6040] device bridge_slave_0 entered promiscuous mode [ 120.492444][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.495174][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.497384][ T6040] device bridge_slave_1 entered promiscuous mode [ 120.512362][ T570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.533739][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.547532][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.582159][ T6040] team0: Port device team_slave_0 added [ 120.586386][ T6040] team0: Port device team_slave_1 added [ 120.607807][ T570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.630660][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.632049][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.637099][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.641693][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.643144][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.649204][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.658401][ T4073] Bluetooth: hci0: command 0x041b tx timeout [ 120.664531][ T570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.787830][ T6091] chnl_net:caif_netlink_parms(): no params data found [ 120.841529][ T6040] device hsr_slave_0 entered promiscuous mode [ 120.878401][ T6040] device hsr_slave_1 entered promiscuous mode [ 120.928212][ T6040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.929889][ T6040] Cannot create hsr debugfs directory [ 120.991834][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.993404][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.995657][ T6091] device bridge_slave_0 entered promiscuous mode [ 121.009826][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.011377][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.013685][ T6091] device bridge_slave_1 entered promiscuous mode [ 121.081053][ T6091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.097041][ T570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.106426][ T6091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.124327][ T6091] team0: Port device team_slave_0 added [ 121.127960][ T6091] team0: Port device team_slave_1 added [ 121.152375][ T570] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.157785][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.161498][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.166410][ T6091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.180018][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.181550][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.186696][ T6091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.238462][ T570] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.300381][ T6091] device hsr_slave_0 entered promiscuous mode [ 121.319858][ T6091] device hsr_slave_1 entered promiscuous mode [ 121.368208][ T6091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.369770][ T6091] Cannot create hsr debugfs directory [ 121.382294][ T570] team0: Port device netdevsim0 removed [ 121.385681][ T570] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.602005][ T6003] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.650808][ T6003] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.680098][ T6003] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.710367][ T6003] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.763434][ T6040] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 121.778147][ T4075] Bluetooth: hci4: command 0x041b tx timeout [ 121.867528][ T6040] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 121.937754][ T6091] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 121.939543][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 121.980038][ T6040] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 122.021975][ T6040] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 122.079759][ T6091] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 122.123345][ T6091] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 122.186856][ T6091] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 122.373568][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.437241][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.439374][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.444773][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.467522][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.496680][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.498830][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.500756][ T4143] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.502348][ T4143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.504301][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.515996][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.522033][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.524226][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.526130][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.527629][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.531760][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.533866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.546979][ T6091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.552975][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.555395][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.557562][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.562232][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.563852][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.582628][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.584651][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.605470][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.609910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.612223][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.614414][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.616448][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.617951][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.636094][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.638333][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.640783][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.643111][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.669909][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.683063][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.685070][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.687145][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.694251][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.702237][ T6091] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.704375][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.706778][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.722444][ T6003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.724671][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.729424][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.732682][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.738532][ T4075] Bluetooth: hci0: command 0x040f tx timeout [ 122.754767][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.757543][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.760461][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.763485][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.765441][ T4143] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.766880][ T4143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.779015][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.781165][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.783495][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.790664][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.792765][ T4143] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.794171][ T4143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.837626][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.839859][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.842162][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.872656][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.875167][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.877529][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.886394][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.889309][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.894366][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.943793][ T6091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.945875][ T6091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.954619][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.956929][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.959569][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.966254][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.968880][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.971130][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.024003][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.025610][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.037166][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.196240][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.197975][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.215234][ T6091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.297565][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.300072][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.336445][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.353732][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.356023][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.387032][ T6003] device veth0_vlan entered promiscuous mode [ 123.456150][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.459189][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.462307][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.467130][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.489075][ T6003] device veth1_vlan entered promiscuous mode [ 123.662579][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.664733][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.666746][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.678991][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.737546][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.742779][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.752425][ T6003] device veth0_macvtap entered promiscuous mode [ 123.756884][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.760149][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.766119][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.787607][ T6003] device veth1_macvtap entered promiscuous mode [ 123.847464][ T6040] device veth0_vlan entered promiscuous mode [ 123.858192][ T4073] Bluetooth: hci4: command 0x040f tx timeout [ 123.859829][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.862187][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.864447][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.869576][ T570] device batadv_slave_0 left promiscuous mode [ 123.954354][ T570] device hsr_slave_0 left promiscuous mode [ 123.988534][ T570] device hsr_slave_1 left promiscuous mode [ 124.018368][ T4073] Bluetooth: hci1: command 0x041b tx timeout [ 124.078309][ T570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.079967][ T570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.082338][ T570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.083738][ T570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.085788][ T570] device bridge_slave_1 left promiscuous mode [ 124.087142][ T570] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.139492][ T570] device bridge_slave_0 left promiscuous mode [ 124.141529][ T570] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.194261][ T570] device hsr_slave_0 left promiscuous mode [ 124.229225][ T570] device hsr_slave_1 left promiscuous mode [ 124.318287][ T570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.319800][ T570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.321940][ T570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.323548][ T570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.408414][ T570] device veth1_macvtap left promiscuous mode [ 124.409774][ T570] device veth0_macvtap left promiscuous mode [ 124.411168][ T570] device veth1_vlan left promiscuous mode [ 124.412426][ T570] device veth0_vlan left promiscuous mode [ 124.508504][ T570] device veth1_macvtap left promiscuous mode [ 124.509982][ T570] device veth0_macvtap left promiscuous mode [ 124.511202][ T570] device veth1_vlan left promiscuous mode [ 124.512481][ T570] device veth0_vlan left promiscuous mode [ 124.818687][ T3607] Bluetooth: hci0: command 0x0419 tx timeout [ 124.874120][ T570] team0 (unregistering): Port device team_slave_1 removed [ 124.883930][ T570] team0 (unregistering): Port device team_slave_0 removed [ 124.892213][ T570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.937081][ T570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.075590][ T570] bond0 (unregistering): Released all slaves [ 125.282097][ T570] team0 (unregistering): Port device team_slave_1 removed [ 125.292725][ T570] team0 (unregistering): Port device team_slave_0 removed [ 125.305973][ T570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.376596][ T570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.552080][ T570] bond0 (unregistering): Released all slaves [ 125.572328][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.574493][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.576429][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.579682][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.582265][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.584290][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.590436][ T6040] device veth1_vlan entered promiscuous mode [ 125.608221][ T6091] device veth0_vlan entered promiscuous mode [ 125.644845][ T6040] device veth0_macvtap entered promiscuous mode [ 125.650842][ T6040] device veth1_macvtap entered promiscuous mode [ 125.664961][ T6091] device veth1_vlan entered promiscuous mode [ 125.689473][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.691889][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.694197][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.707810][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.712373][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.714572][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.716718][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.719267][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.721356][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.724721][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.748862][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.750940][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.752783][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.754701][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.756686][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.770648][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.772669][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.774749][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.786824][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.797921][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.800347][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.802711][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.804913][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.807309][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.851057][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.853236][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.855124][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.857070][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.864582][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.866643][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.876984][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.889202][ T6091] device veth0_macvtap entered promiscuous mode [ 125.893313][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.895746][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.897971][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.904697][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.907020][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.917193][ T6040] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.919499][ T6040] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.921330][ T6040] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.923127][ T6040] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.927744][ T6091] device veth1_macvtap entered promiscuous mode [ 125.931453][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.933597][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.935582][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.937644][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.939140][ T4073] Bluetooth: hci4: command 0x0419 tx timeout [ 125.945181][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.947274][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.950773][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.952856][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.957071][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.963561][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.965694][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.967989][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.985059][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.987234][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.990296][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.992340][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.994291][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.996271][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.999420][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.001376][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.003175][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.005143][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.019297][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.030863][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.033383][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.037864][ T6003] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.045647][ T6003] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.047411][ T6003] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.049292][ T6003] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.055112][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.057071][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.069615][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.071702][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.073784][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.075803][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.077911][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.080950][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.082837][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.084944][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.088820][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.098703][ T4073] Bluetooth: hci1: command 0x040f tx timeout [ 126.113873][ T6091] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.115767][ T6091] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.117571][ T6091] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.119881][ T6091] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.122802][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.124949][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.271310][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.273199][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.287130][ T365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.295460][ T365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.301079][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.301104][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.303953][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.304293][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.340233][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.377678][ T4143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.380202][ T4143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.381712][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.383533][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.387416][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.393072][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.451075][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.452907][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.456578][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.667956][ T6239] loop8: detected capacity change from 0 to 2048 [ 126.719025][ T6239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.083581][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.8.706'. [ 127.392723][ T6292] udc-core: couldn't find an available UDC or it's busy [ 127.394350][ T6292] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 127.462389][ T6248] chnl_net:caif_netlink_parms(): no params data found [ 127.767375][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.769840][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.772262][ T6248] device bridge_slave_0 entered promiscuous mode [ 127.775955][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.777572][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.780672][ T6248] device bridge_slave_1 entered promiscuous mode [ 127.827686][ T6302] loop6: detected capacity change from 0 to 4096 [ 127.868188][ T6312] loop5: detected capacity change from 0 to 128 [ 127.876110][ T6302] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 127.883104][ T6302] ntfs3: loop6: Failed to load $Extend. [ 127.911048][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.915225][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.922141][ T6312] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 127.934650][ T6312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.095586][ T6248] team0: Port device team_slave_0 added [ 128.129137][ T6248] team0: Port device team_slave_1 added [ 128.178832][ T4075] Bluetooth: hci1: command 0x0419 tx timeout [ 128.198678][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.205379][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.222425][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.246373][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.247807][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.284032][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.422698][ T6248] device hsr_slave_0 entered promiscuous mode [ 128.462425][ T6352] loop6: detected capacity change from 0 to 512 [ 128.478608][ T6248] device hsr_slave_1 entered promiscuous mode [ 128.641711][ T6352] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.725308][ T6367] loop8: detected capacity change from 0 to 64 [ 128.820220][ T4075] Bluetooth: hci3: command 0x0409 tx timeout [ 128.924651][ T136] attempt to access beyond end of device [ 128.924651][ T136] loop8: rw=1, want=164, limit=64 [ 128.927019][ T136] Buffer I/O error on dev loop8, logical block 163, lost async page write [ 128.931022][ T136] attempt to access beyond end of device [ 128.931022][ T136] loop8: rw=1, want=168, limit=64 [ 128.933201][ T136] Buffer I/O error on dev loop8, logical block 167, lost async page write [ 128.934968][ T136] attempt to access beyond end of device [ 128.934968][ T136] loop8: rw=1, want=170, limit=64 [ 128.988645][ T136] Buffer I/O error on dev loop8, logical block 169, lost async page write [ 128.990485][ T136] attempt to access beyond end of device [ 128.990485][ T136] loop8: rw=1, want=172, limit=64 [ 128.992598][ T136] Buffer I/O error on dev loop8, logical block 171, lost async page write [ 128.994255][ T136] attempt to access beyond end of device [ 128.994255][ T136] loop8: rw=1, want=173, limit=64 [ 128.995515][ T6248] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.996442][ T136] Buffer I/O error on dev loop8, logical block 172, lost async page write [ 128.996510][ T136] attempt to access beyond end of device [ 128.996510][ T136] loop8: rw=1, want=174, limit=64 [ 129.029804][ T136] Buffer I/O error on dev loop8, logical block 173, lost async page write [ 129.031594][ T136] attempt to access beyond end of device [ 129.031594][ T136] loop8: rw=1, want=175, limit=64 [ 129.033623][ T136] Buffer I/O error on dev loop8, logical block 174, lost async page write [ 129.035350][ T136] attempt to access beyond end of device [ 129.035350][ T136] loop8: rw=1, want=176, limit=64 [ 129.065747][ T136] Buffer I/O error on dev loop8, logical block 175, lost async page write [ 129.068542][ T136] attempt to access beyond end of device [ 129.068542][ T136] loop8: rw=1, want=177, limit=64 [ 129.088608][ T136] Buffer I/O error on dev loop8, logical block 176, lost async page write [ 129.090321][ T136] attempt to access beyond end of device [ 129.090321][ T136] loop8: rw=1, want=178, limit=64 [ 129.092381][ T136] Buffer I/O error on dev loop8, logical block 177, lost async page write [ 129.208620][ T6248] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.300735][ T6248] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.483636][ T6248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.549992][ T6406] device veth3 entered promiscuous mode [ 129.655163][ T6421] udc-core: couldn't find an available UDC or it's busy [ 129.656730][ T6421] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.726071][ T6248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.757319][ T6248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.762302][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 129.762314][ T26] audit: type=1326 audit(129.740:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.6.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88be41a8 code=0x7fc00000 [ 129.771350][ T26] audit: type=1326 audit(129.740:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.6.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff88be41a8 code=0x7fc00000 [ 129.807248][ T26] audit: type=1326 audit(129.740:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.6.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88be41a8 code=0x7fc00000 [ 129.814179][ T6248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.838087][ T26] audit: type=1326 audit(129.740:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.6.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88be41a8 code=0x7fc00000 [ 129.842625][ T26] audit: type=1326 audit(129.740:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.6.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88be41a8 code=0x7fc00000 [ 129.846951][ T26] audit: type=1326 audit(129.740:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.6.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88be41a8 code=0x7fc00000 [ 129.862043][ T6248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.865470][ T6434] udc-core: couldn't find an available UDC or it's busy [ 129.866826][ T6434] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.898854][ T26] audit: type=1326 audit(129.740:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.6.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88be41a8 code=0x7fc00000 [ 129.915976][ T26] audit: type=1326 audit(129.740:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.6.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88be41a8 code=0x7fc00000 [ 129.939097][ T26] audit: type=1326 audit(129.740:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.6.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88be41a8 code=0x7fc00000 [ 129.943262][ T26] audit: type=1326 audit(129.740:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.6.758" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88be41a8 code=0x7fc00000 [ 129.957260][ T6439] netlink: 44 bytes leftover after parsing attributes in process `syz.5.764'. [ 130.110871][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.150251][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.152252][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.171177][ T6248] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.183709][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.194158][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.196200][ T4143] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.197734][ T4143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.228725][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.256284][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.261280][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.264777][ T4143] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.266183][ T4143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.298475][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.300843][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.319563][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.323242][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.341104][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.343391][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.352549][ T6457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.771'. [ 130.354522][ T6457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.771'. [ 130.422817][ T6457] device bond0 entered promiscuous mode [ 130.424071][ T6457] device bond_slave_0 entered promiscuous mode [ 130.425658][ T6457] device bond_slave_1 entered promiscuous mode [ 130.468910][ T6457] device gretap0 entered promiscuous mode [ 130.497114][ T6248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.508648][ T6248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.515462][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.517569][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 130.519810][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.522359][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.529424][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.533132][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.539998][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.7.776'. [ 130.567159][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.662261][ T6477] udc-core: couldn't find an available UDC or it's busy [ 130.663622][ T6477] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.674299][ T6484] loop5: detected capacity change from 0 to 256 [ 130.677146][ T6477] udc-core: couldn't find an available UDC or it's busy [ 130.691532][ T6477] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.693996][ T6477] udc-core: couldn't find an available UDC or it's busy [ 130.695447][ T6477] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.733917][ T6484] FAT-fs (loop5): Directory bread(block 64) failed [ 130.738874][ T6484] FAT-fs (loop5): Directory bread(block 65) failed [ 130.740369][ T6484] FAT-fs (loop5): Directory bread(block 66) failed [ 130.741705][ T6484] FAT-fs (loop5): Directory bread(block 67) failed [ 130.743123][ T6484] FAT-fs (loop5): Directory bread(block 68) failed [ 130.744663][ T6484] FAT-fs (loop5): Directory bread(block 69) failed [ 130.766381][ T6484] FAT-fs (loop5): Directory bread(block 70) failed [ 130.767777][ T6484] FAT-fs (loop5): Directory bread(block 71) failed [ 130.776520][ T6484] FAT-fs (loop5): Directory bread(block 72) failed [ 130.777916][ T6484] FAT-fs (loop5): Directory bread(block 73) failed [ 130.865824][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.867830][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.890802][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.914061][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 130.924168][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.927368][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.977102][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.007064][ T6498] device bridge_slave_0 left promiscuous mode [ 131.010137][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.043534][ T6498] device bridge_slave_1 left promiscuous mode [ 131.045140][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.067882][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.069277][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.093535][ T6498] bond0: (slave bond_slave_0): Releasing backup interface [ 131.151088][ T6498] bond0: (slave bond_slave_1): Releasing backup interface [ 131.232293][ T6498] team0: Port device team_slave_0 removed [ 131.263208][ T6498] team0: Port device team_slave_1 removed [ 131.266280][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.270298][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.276088][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.279784][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.362308][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.787'. [ 131.545611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.547777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.606102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.608470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.612311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.629214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.641397][ T6248] device veth0_vlan entered promiscuous mode [ 131.676070][ T6248] device veth1_vlan entered promiscuous mode [ 131.691781][ T6533] netlink: 100 bytes leftover after parsing attributes in process `syz.8.795'. [ 131.779034][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.781290][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.790102][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.804355][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.822609][ T6248] device veth0_macvtap entered promiscuous mode [ 131.843006][ T6248] device veth1_macvtap entered promiscuous mode [ 131.916927][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.928255][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.930133][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.932344][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.942790][ T6546] loop8: detected capacity change from 0 to 1024 [ 131.964048][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.966597][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.978112][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.980089][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.987987][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.992430][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.003477][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.007458][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.009642][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.011695][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.024354][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.035514][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.037681][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.074021][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.076134][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.093840][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.095801][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.107867][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.121186][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.123097][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.125199][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.154110][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.162935][ T6248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.164630][ T6248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.166260][ T6248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.218504][ T6248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.221272][ T4258] hfsplus: b-tree write err: -5, ino 4 [ 132.225569][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.227845][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.386539][ T570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.388660][ T570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.409647][ T6573] loop5: detected capacity change from 0 to 2048 [ 132.414318][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.476230][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.476436][ T6573] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.478299][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.485370][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.506489][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.8.813'. [ 132.515189][ T6578] loop7: detected capacity change from 0 to 2048 [ 132.522274][ T6067] udevd[6067]: incorrect nilfs2 checksum on /dev/loop5 [ 132.554469][ T6580] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 132.556557][ T6580] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.562876][ T6578] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 132.572503][ T6578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.599400][ T6587] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.674496][ T6590] netlink: 64 bytes leftover after parsing attributes in process `syz.6.814'. [ 132.908135][ T6604] loop5: detected capacity change from 0 to 1024 [ 132.978520][ T4141] Bluetooth: hci3: command 0x040f tx timeout [ 132.981232][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.5.819'. [ 133.253691][ T6617] loop5: detected capacity change from 0 to 1024 [ 133.345838][ T4258] hfsplus: b-tree write err: -5, ino 4 [ 133.699294][ T6653] binder: 6652:6653 BC_FREE_BUFFER u0000000000000000 no match [ 133.718431][ T6653] binder: 6652:6653 got transaction to context manager from process owning it [ 133.720209][ T6653] binder: 6652:6653 transaction failed 29201/-22, size 0-0 line 2908 [ 133.740441][ T6185] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.013007][ T6650] ODEBUG: Out of memory. ODEBUG disabled [ 135.028181][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 135.028194][ T26] audit: type=1326 audit(134.950:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b58d1a8 code=0x7ffc0000 [ 135.034757][ T26] audit: type=1326 audit(134.970:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=84 compat=0 ip=0xffff9b58d1a8 code=0x7ffc0000 [ 135.058457][ T4141] Bluetooth: hci3: command 0x0419 tx timeout [ 135.105685][ T26] audit: type=1326 audit(134.970:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b58d1a8 code=0x7ffc0000 [ 135.130865][ T26] audit: type=1326 audit(134.970:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b58d1a8 code=0x7ffc0000 [ 135.286295][ T6739] loop0: detected capacity change from 0 to 512 [ 135.364208][ T6741] loop7: detected capacity change from 0 to 4096 [ 135.504168][ T6739] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.546323][ T6650] syz.5.832 (6650): drop_caches: 2 [ 135.571984][ T6739] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 135.583004][ T6739] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.866: invalid indirect mapped block 2683928664 (level 1) [ 135.625978][ T6739] EXT4-fs (loop0): Remounting filesystem read-only [ 135.638782][ T6739] EXT4-fs (loop0): 1 truncate cleaned up [ 135.646127][ T6739] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 135.672676][ T6741] ntfs: volume version 3.1. [ 135.765689][ T6755] loop5: detected capacity change from 0 to 1024 [ 135.845573][ T6755] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.058766][ T4084] libceph: connect (1)[c::]:6789 error -101 [ 138.060140][ T4084] libceph: mon0 (1)[c::]:6789 connect error [ 138.103009][ T6800] ceph: No mds server is up or the cluster is laggy [ 140.678765][ T6850] loop8: detected capacity change from 0 to 1024 [ 140.919847][ T4253] hfsplus: b-tree write err: -5, ino 4 [ 145.162596][ T6912] loop5: detected capacity change from 0 to 512 [ 145.410766][ T6912] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 145.413426][ T6912] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.426661][ T6912] EXT4-fs (loop5): 1 truncate cleaned up [ 146.427855][ T6912] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.434265][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 146.435560][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 146.642262][ T6921] ceph: No mds server is up or the cluster is laggy [ 147.719509][ T21] libceph: connect (1)[c::]:6789 error -101 [ 147.720820][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 149.068265][ T6953] binder: 6949:6953 ioctl 400c620e 20000040 returned -22 [ 149.455733][ T6959] loop7: detected capacity change from 0 to 1024 [ 149.848128][ T6959] EXT4-fs (loop7): Ignoring removed orlov option [ 149.849418][ T6959] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 150.125808][ T6965] loop0: detected capacity change from 0 to 1024 [ 150.138571][ T6959] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 150.267418][ T6965] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.515056][ T6999] netlink: 'syz.7.926': attribute type 10 has an invalid length. [ 151.388519][ T6998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.477288][ T6999] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.066363][ T7002] loop8: detected capacity change from 0 to 32768 [ 152.225567][ T7002] XFS (loop8): Mounting V5 Filesystem [ 152.339406][ T7002] XFS (loop8): Ending clean mount [ 152.472349][ T6091] XFS (loop8): Unmounting Filesystem [ 152.932277][ T7065] loop0: detected capacity change from 0 to 1024 [ 153.121448][ T7065] EXT4-fs (loop0): Ignoring removed orlov option [ 153.122961][ T7065] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 153.338097][ T7065] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 153.709531][ T7075] loop6: detected capacity change from 0 to 128 [ 153.780749][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 153.789263][ T7075] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 153.910486][ T7089] loop7: detected capacity change from 0 to 1024 [ 154.259331][ T7099] netlink: 277 bytes leftover after parsing attributes in process `syz.5.945'. [ 155.854478][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 155.855928][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 155.960323][ T7107] ceph: No mds server is up or the cluster is laggy [ 156.996853][ T7123] loop5: detected capacity change from 0 to 1024 [ 157.024212][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.043620][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.045252][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.086751][ T7123] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.113981][ T7123] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,dioread_nolock,nogrpid,min_batch_time=0x0000000000000005,,errors=continue. Quota mode: none. [ 157.196033][ T7134] loop0: detected capacity change from 0 to 512 [ 157.250296][ T7134] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.303707][ T7134] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 157.306892][ T7134] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.964: invalid indirect mapped block 2683928664 (level 1) [ 157.650432][ T7140] loop6: detected capacity change from 0 to 1024 [ 157.758145][ T7134] EXT4-fs (loop0): Remounting filesystem read-only [ 157.836299][ T7134] EXT4-fs (loop0): 1 truncate cleaned up [ 157.839311][ T7134] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 158.045276][ T7140] EXT4-fs (loop6): Ignoring removed orlov option [ 158.046784][ T7140] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 158.235031][ T7140] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 159.452452][ T7158] loop6: detected capacity change from 0 to 512 [ 159.486769][ T7158] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 160.568180][ T6968] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 160.573833][ T6968] EXT4-fs (loop0): Remounting filesystem read-only [ 160.655885][ T7170] loop5: detected capacity change from 0 to 512 [ 160.867914][ T7170] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.398299][ T7186] netlink: 277 bytes leftover after parsing attributes in process `syz.7.962'. [ 162.524170][ T7170] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 162.526180][ T7170] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.972: invalid indirect mapped block 2683928664 (level 1) [ 162.531124][ T7170] EXT4-fs (loop5): Remounting filesystem read-only [ 162.538614][ T7170] EXT4-fs (loop5): 1 truncate cleaned up [ 162.550017][ T7170] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 164.866072][ T7193] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 165.388278][ T7193] EXT4-fs (loop5): Remounting filesystem read-only [ 165.433425][ T7141] libceph: connect (1)[c::]:6789 error -101 [ 165.434862][ T7141] libceph: mon0 (1)[c::]:6789 connect error [ 165.438822][ T7141] libceph: connect (1)[c::]:6789 error -101 [ 165.440298][ T7141] libceph: mon0 (1)[c::]:6789 connect error [ 165.536883][ T7227] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 165.905501][ T7235] loop8: detected capacity change from 0 to 1024 [ 166.000821][ T7235] EXT4-fs (loop8): Ignoring removed orlov option [ 166.002425][ T7235] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 166.121264][ T7141] libceph: connect (1)[c::]:6789 error -101 [ 166.142388][ T7141] libceph: mon0 (1)[c::]:6789 connect error [ 166.438264][ T7218] ceph: No mds server is up or the cluster is laggy [ 166.583257][ T7235] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 167.636835][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 167.638202][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 167.783973][ T7251] loop6: detected capacity change from 0 to 1764 [ 168.033210][ T7259] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 168.938977][ T7294] netlink: 277 bytes leftover after parsing attributes in process `syz.8.981'. [ 171.080257][ T7308] udc-core: couldn't find an available UDC or it's busy [ 171.081700][ T7308] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 171.123955][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 171.131404][ T7314] loop6: detected capacity change from 0 to 512 [ 171.209867][ T7314] EXT2-fs (loop6): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 171.232265][ T7314] EXT2-fs (loop6): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 171.247246][ T7320] loop8: detected capacity change from 0 to 512 [ 171.267388][ T7314] handle_bad_sector: 7 callbacks suppressed [ 171.267399][ T7314] attempt to access beyond end of device [ 171.267399][ T7314] loop6: rw=0, want=1022040, limit=512 [ 171.355601][ T7314] attempt to access beyond end of device [ 171.355601][ T7314] loop6: rw=0, want=1022040, limit=512 [ 171.414608][ T7320] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.467192][ T7320] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 171.470142][ T7320] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.987: invalid indirect mapped block 2683928664 (level 1) [ 171.473379][ T7320] EXT4-fs (loop8): Remounting filesystem read-only [ 171.474979][ T7320] EXT4-fs (loop8): 1 truncate cleaned up [ 171.477577][ T7320] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 171.877128][ T7330] netlink: 277 bytes leftover after parsing attributes in process `syz.0.998'. [ 173.060255][ T7328] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 173.097546][ T7328] EXT4-fs (loop8): Remounting filesystem read-only [ 173.846067][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 173.847344][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 173.853710][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 173.857267][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 175.245994][ T7369] loop5: detected capacity change from 0 to 1024 [ 176.051905][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 176.053237][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 176.058723][ T7351] ceph: No mds server is up or the cluster is laggy [ 176.100874][ T7369] EXT4-fs (loop5): Ignoring removed orlov option [ 176.102197][ T7369] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 176.158683][ T7369] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 176.178363][ T7374] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 176.386868][ T4028] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 176.447313][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 176.809865][ T7411] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1002'. [ 177.600315][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 177.655053][ T26] audit: type=1326 audit(177.630:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba4e11a8 code=0x7ffc0000 [ 177.659857][ T26] audit: type=1326 audit(177.630:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffffba4e11a8 code=0x7ffc0000 [ 177.677000][ T7418] loop6: detected capacity change from 0 to 512 [ 177.775985][ T7418] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.802288][ T7418] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 177.804378][ T7418] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1007: invalid indirect mapped block 2683928664 (level 1) [ 177.815546][ T7418] EXT4-fs (loop6): Remounting filesystem read-only [ 177.835844][ T7418] EXT4-fs (loop6): 1 truncate cleaned up [ 177.838298][ T7418] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 177.846972][ T26] audit: type=1326 audit(177.820:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba4e11a8 code=0x7ffc0000 [ 179.749877][ T3607] libceph: connect (1)[c::]:6789 error -101 [ 179.751299][ T3607] libceph: mon0 (1)[c::]:6789 connect error [ 180.008391][ T3607] libceph: connect (1)[c::]:6789 error -101 [ 180.009741][ T3607] libceph: mon0 (1)[c::]:6789 connect error [ 180.130428][ T7458] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1019'. [ 181.022974][ T7431] ceph: No mds server is up or the cluster is laggy [ 181.062011][ T3607] libceph: connect (1)[c::]:6789 error -101 [ 181.063256][ T3607] libceph: mon0 (1)[c::]:6789 connect error [ 181.172557][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1021'. [ 181.658557][ T7501] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1030'. [ 181.739262][ T7508] loop7: detected capacity change from 0 to 512 [ 181.786596][ T7508] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.891002][ T7508] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 181.893580][ T7508] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1032: invalid indirect mapped block 2683928664 (level 1) [ 181.899823][ T7508] EXT4-fs (loop7): Remounting filesystem read-only [ 181.908656][ T7508] EXT4-fs (loop7): 1 truncate cleaned up [ 181.918325][ T7508] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 185.622315][ T7379] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 185.627399][ T7379] EXT4-fs (loop7): Remounting filesystem read-only [ 185.987994][ T7565] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1043'. [ 187.018427][ T7567] fuse: Bad value for 'fd' [ 187.085002][ T7579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 188.168355][ T7596] loop8: detected capacity change from 0 to 512 [ 188.194535][ T7599] udc-core: couldn't find an available UDC or it's busy [ 188.196178][ T7599] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 188.242206][ T7596] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.259092][ T7601] loop0: detected capacity change from 0 to 256 [ 188.272587][ T7596] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 188.274552][ T7596] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1053: invalid indirect mapped block 2683928664 (level 1) [ 188.281023][ T7596] EXT4-fs (loop8): Remounting filesystem read-only [ 188.282853][ T7596] EXT4-fs (loop8): 1 truncate cleaned up [ 188.284154][ T7596] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 188.345007][ T7601] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 189.398452][ T7616] dccp_close: ABORT with 32 bytes unread [ 190.122440][ T7652] loop7: detected capacity change from 0 to 512 [ 191.142167][ T7652] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.171509][ T7652] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 191.173634][ T7652] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1070: invalid indirect mapped block 2683928664 (level 1) [ 191.178354][ T7652] EXT4-fs (loop7): Remounting filesystem read-only [ 191.180011][ T7652] EXT4-fs (loop7): 1 truncate cleaned up [ 191.181291][ T7652] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 191.244756][ T7668] loop8: detected capacity change from 0 to 256 [ 191.769062][ T7668] exfat: Deprecated parameter 'namecase' [ 191.770232][ T7668] exfat: Deprecated parameter 'namecase' [ 191.818457][ T7668] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 192.501884][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.503247][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.409841][ T6091] exFAT-fs (loop8): invalid start cluster (4278190088) [ 195.910995][ T7742] device veth1_macvtap left promiscuous mode [ 195.912263][ T7742] device macsec0 entered promiscuous mode [ 196.318482][ T7755] device wg2 entered promiscuous mode [ 197.474540][ T7775] bridge0: port 1(hsr_slave_0) entered blocking state [ 197.478445][ T7775] bridge0: port 1(hsr_slave_0) entered disabled state [ 201.336073][ T7818] device pim6reg1 entered promiscuous mode [ 202.445679][ T7820] fuse: Bad value for 'fd' [ 206.384230][ T7863] device pim6reg1 entered promiscuous mode [ 206.618366][ T7872] device pim6reg1 entered promiscuous mode [ 206.919378][ T7877] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1139'. [ 209.427265][ T7906] device pim6reg1 entered promiscuous mode [ 209.735900][ T7921] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1152'. [ 209.858586][ T7932] device pim6reg1 entered promiscuous mode [ 209.923294][ T7935] tap0: tun_chr_ioctl cmd 1074025692 [ 211.782899][ T4139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.797281][ T7976] device wg2 entered promiscuous mode [ 211.853960][ T4139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.999109][ T4139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.067068][ T4139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.461091][ T8023] device veth0_vlan left promiscuous mode [ 214.462867][ T8023] device veth0_vlan entered promiscuous mode [ 214.481985][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.485303][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.487429][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.500511][ T4139] tipc: Disabling bearer [ 214.504452][ T4139] tipc: Left network mode [ 217.315159][ T8094] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1210'. [ 218.660486][ T8124] device pim6reg1 entered promiscuous mode [ 219.849824][ T8143] €Â0: renamed from pim6reg1 [ 221.374004][ T8189] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1235'. [ 221.489594][ T8196] device pim6reg1 entered promiscuous mode [ 223.421812][ T8259] device pim6reg1 entered promiscuous mode [ 223.554538][ T4139] device hsr_slave_0 left promiscuous mode [ 223.588423][ T4139] device hsr_slave_1 left promiscuous mode [ 223.949385][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.953350][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.489952][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.493634][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.495882][ T4139] device bridge_slave_1 left promiscuous mode [ 224.497295][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.598297][ T4139] device bridge_slave_0 left promiscuous mode [ 224.599599][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.852110][ T8267] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1260'. [ 225.708565][ T4139] device veth1_macvtap left promiscuous mode [ 225.709978][ T4139] device veth0_macvtap left promiscuous mode [ 225.711305][ T4139] device veth1_vlan left promiscuous mode [ 225.712542][ T4139] device veth0_vlan left promiscuous mode [ 226.147286][ T4139] team0 (unregistering): Port device team_slave_1 removed [ 226.155913][ T4139] team0 (unregistering): Port device team_slave_0 removed [ 226.165585][ T4139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.242499][ T4139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.653832][ T4139] bond0 (unregistering): Released all slaves [ 227.986049][ T8335] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1282'. [ 230.064635][ T4084] libceph: connect (1)[c::]:6789 error -101 [ 230.065953][ T4084] libceph: mon0 (1)[c::]:6789 connect error [ 230.100010][ T8393] device veth1_macvtap left promiscuous mode [ 230.452289][ T4084] libceph: connect (1)[c::]:6789 error -101 [ 230.453575][ T4084] libceph: mon0 (1)[c::]:6789 connect error [ 230.613156][ T8416] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1307'. [ 230.618123][ T8383] ceph: No mds server is up or the cluster is laggy [ 231.729561][ T25] libceph: connect (1)[c::]:6789 error -101 [ 231.730832][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 231.808070][ T8422] udc-core: couldn't find an available UDC or it's busy [ 231.809551][ T8422] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.897957][ T8425] udc-core: couldn't find an available UDC or it's busy [ 231.909790][ T8427] udc-core: couldn't find an available UDC or it's busy [ 231.911206][ T8427] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.915287][ T8425] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.933534][ T8429] udc-core: couldn't find an available UDC or it's busy [ 231.935033][ T8429] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.450248][ T8449] udc-core: couldn't find an available UDC or it's busy [ 232.451786][ T8449] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.480110][ T8449] udc-core: couldn't find an available UDC or it's busy [ 232.481866][ T8449] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.484474][ T8451] udc-core: couldn't find an available UDC or it's busy [ 232.485921][ T8451] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.491736][ T8451] udc-core: couldn't find an available UDC or it's busy [ 232.493152][ T8451] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.495513][ T8451] udc-core: couldn't find an available UDC or it's busy [ 232.496898][ T8451] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.502629][ T8453] udc-core: couldn't find an available UDC or it's busy [ 232.504281][ T8453] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.650584][ T8460] udc-core: couldn't find an available UDC or it's busy [ 232.652277][ T8460] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.668196][ T4074] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 232.866969][ T8460] udc-core: couldn't find an available UDC or it's busy [ 232.869594][ T8460] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.908115][ T4074] usb 1-1: Using ep0 maxpacket: 16 [ 233.028166][ T4074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 233.072081][ T8460] udc-core: couldn't find an available UDC or it's busy [ 233.073544][ T8460] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 233.207671][ T8488] udc-core: couldn't find an available UDC or it's busy [ 233.216016][ T8488] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 233.248378][ T4074] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 233.250363][ T4074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.252539][ T4074] usb 1-1: Product: syz [ 233.253442][ T4074] usb 1-1: Manufacturer: syz [ 233.254312][ T4074] usb 1-1: SerialNumber: syz [ 233.277535][ T4074] usb 1-1: config 0 descriptor?? [ 234.258847][ T4074] hub 1-1:0.0: bad descriptor, ignoring hub [ 234.260120][ T4074] hub: probe of 1-1:0.0 failed with error -5 [ 234.264064][ T4074] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 234.537584][ T8502] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1322'. [ 234.964425][ T4074] libceph: connect (1)[c::]:6789 error -101 [ 234.965902][ T4074] libceph: mon0 (1)[c::]:6789 connect error [ 235.043059][ T8515] udc-core: couldn't find an available UDC or it's busy [ 235.047100][ T8515] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.199505][ T8518] udc-core: couldn't find an available UDC or it's busy [ 235.201121][ T8518] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.218598][ T13] libceph: connect (1)[c::]:6789 error -101 [ 235.219938][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 235.253590][ T8515] udc-core: couldn't find an available UDC or it's busy [ 235.255205][ T8515] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.272678][ T8515] udc-core: couldn't find an available UDC or it's busy [ 235.274036][ T8515] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.363179][ T8506] ceph: No mds server is up or the cluster is laggy [ 235.479357][ T6185] usb 1-1: USB disconnect, device number 4 [ 235.481319][ T8515] udc-core: couldn't find an available UDC or it's busy [ 235.483006][ T8515] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.499075][ T8522] udc-core: couldn't find an available UDC or it's busy [ 235.500445][ T8522] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.753889][ T8526] udc-core: couldn't find an available UDC or it's busy [ 235.755307][ T8526] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.776226][ T8526] udc-core: couldn't find an available UDC or it's busy [ 235.777894][ T8526] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.823843][ T6185] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 236.025868][ T8528] udc-core: couldn't find an available UDC or it's busy [ 236.027452][ T8528] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 236.112009][ T8530] udc-core: couldn't find an available UDC or it's busy [ 236.113480][ T8530] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 236.188250][ T6185] usb 1-1: config 0 has an invalid interface number: 201 but max is 0 [ 236.189913][ T6185] usb 1-1: config 0 has no interface number 0 [ 236.367610][ T8535] udc-core: couldn't find an available UDC or it's busy [ 236.375400][ T8535] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 237.339829][ T8539] udc-core: couldn't find an available UDC or it's busy [ 237.341474][ T8539] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 237.364127][ T8541] udc-core: couldn't find an available UDC or it's busy [ 237.365588][ T8541] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 237.379980][ T6185] usb 1-1: New USB device found, idVendor=10b8, idProduct=2384, bcdDevice=41.5f [ 237.382128][ T6185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.383696][ T6185] usb 1-1: Product: syz [ 237.384530][ T6185] usb 1-1: Manufacturer: syz [ 237.385488][ T6185] usb 1-1: SerialNumber: syz [ 237.392277][ T6185] usb 1-1: config 0 descriptor?? [ 237.443217][ T8545] udc-core: couldn't find an available UDC or it's busy [ 237.444701][ T8545] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 237.638289][ T6185] dvb-usb: found a 'DiBcom NIM9090MD reference design' in warm state. [ 237.647320][ T6185] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 237.671034][ T6185] dvbdev: DVB: registering new adapter (DiBcom NIM9090MD reference design) [ 237.673047][ T6185] usb 1-1: media controller created [ 237.676936][ T6185] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.845714][ T8519] udc-core: couldn't find an available UDC or it's busy [ 237.847187][ T8519] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 238.067120][ T8557] udc-core: couldn't find an available UDC or it's busy [ 238.068700][ T8557] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 238.149540][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 238.150955][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 238.273467][ T8557] udc-core: couldn't find an available UDC or it's busy [ 238.275057][ T8557] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 238.315510][ T8555] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1338'. [ 238.736957][ T8556] ceph: No mds server is up or the cluster is laggy [ 238.745789][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 238.747172][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 238.830681][ T6185] usb 1-1: Direct firmware load for dib9090.fw failed with error -2 [ 238.832419][ T6185] usb 1-1: Falling back to sysfs fallback for: dib9090.fw [ 238.912934][ T8567] udc-core: couldn't find an available UDC or it's busy [ 238.914474][ T8567] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 239.092437][ T8571] udc-core: couldn't find an available UDC or it's busy [ 239.093823][ T8571] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.050601][ T8577] udc-core: couldn't find an available UDC or it's busy [ 240.052172][ T8577] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.106968][ T8580] udc-core: couldn't find an available UDC or it's busy [ 240.108631][ T8580] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.300729][ T8582] udc-core: couldn't find an available UDC or it's busy [ 240.302558][ T8582] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.428824][ T8584] udc-core: couldn't find an available UDC or it's busy [ 240.430291][ T8584] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.507777][ T8582] udc-core: couldn't find an available UDC or it's busy [ 240.509617][ T8582] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.625177][ T8587] udc-core: couldn't find an available UDC or it's busy [ 240.626522][ T8587] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.635999][ T8584] udc-core: couldn't find an available UDC or it's busy [ 240.637421][ T8584] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.653473][ T8589] udc-core: couldn't find an available UDC or it's busy [ 240.655029][ T8589] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 240.818256][ T25] Bluetooth: hci4: command 0x0406 tx timeout [ 241.195600][ T8593] udc-core: couldn't find an available UDC or it's busy [ 241.196984][ T8593] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 241.205755][ T8596] udc-core: couldn't find an available UDC or it's busy [ 241.207274][ T8596] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 241.229399][ T8595] udc-core: couldn't find an available UDC or it's busy [ 241.234363][ T8595] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 241.449169][ T8593] udc-core: couldn't find an available UDC or it's busy [ 241.450489][ T8593] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 241.480870][ T25] libceph: connect (1)[c::]:6789 error -101 [ 241.482190][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 241.834322][ T25] libceph: connect (1)[c::]:6789 error -101 [ 241.835844][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 241.838740][ T8604] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1356'. [ 242.024110][ T8611] udc-core: couldn't find an available UDC or it's busy [ 242.025686][ T8611] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 242.061138][ T8612] udc-core: couldn't find an available UDC or it's busy [ 242.071498][ T8612] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 242.086132][ T8600] ceph: No mds server is up or the cluster is laggy [ 242.209649][ T8617] udc-core: couldn't find an available UDC or it's busy [ 242.211085][ T8617] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 242.362935][ T8612] udc-core: couldn't find an available UDC or it's busy [ 242.364517][ T8612] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 242.367582][ T8612] udc-core: couldn't find an available UDC or it's busy [ 242.370586][ T8612] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 242.630081][ T8621] udc-core: couldn't find an available UDC or it's busy [ 242.631762][ T8621] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 242.742654][ T8624] udc-core: couldn't find an available UDC or it's busy [ 242.744133][ T8624] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 242.754126][ T8625] udc-core: couldn't find an available UDC or it's busy [ 242.755545][ T8625] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 243.180861][ T8627] udc-core: couldn't find an available UDC or it's busy [ 243.182530][ T8627] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 243.303491][ T8631] udc-core: couldn't find an available UDC or it's busy [ 243.304937][ T8631] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 243.310841][ T8633] udc-core: couldn't find an available UDC or it's busy [ 243.312363][ T8633] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 243.344295][ T8635] udc-core: couldn't find an available UDC or it's busy [ 243.345809][ T8635] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 243.539971][ T8631] udc-core: couldn't find an available UDC or it's busy [ 243.541454][ T8631] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 243.559823][ T8635] udc-core: couldn't find an available UDC or it's busy [ 243.561382][ T8635] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 243.886821][ T8637] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1370'. [ 243.895390][ T8639] udc-core: couldn't find an available UDC or it's busy [ 243.896752][ T8639] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 244.102172][ T8644] udc-core: couldn't find an available UDC or it's busy [ 244.103718][ T8644] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 244.168251][ T1534] libceph: connect (1)[c::]:6789 error -101 [ 244.169603][ T1534] libceph: mon0 (1)[c::]:6789 connect error [ 244.311588][ T8639] udc-core: couldn't find an available UDC or it's busy [ 244.313116][ T8639] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 244.429214][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 244.430609][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 244.516637][ T8639] udc-core: couldn't find an available UDC or it's busy [ 244.518316][ T8639] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 244.520770][ T8639] udc-core: couldn't find an available UDC or it's busy [ 244.522551][ T8639] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 244.650363][ T8652] udc-core: couldn't find an available UDC or it's busy [ 244.651967][ T8652] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 244.656014][ T8652] udc-core: couldn't find an available UDC or it's busy [ 244.657548][ T8652] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 244.787905][ T8646] ceph: No mds server is up or the cluster is laggy [ 244.895991][ T8652] udc-core: couldn't find an available UDC or it's busy [ 244.897523][ T8652] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 245.048764][ T8669] udc-core: couldn't find an available UDC or it's busy [ 245.050317][ T8669] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 245.600507][ T8684] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1382'. [ 245.778104][ T25] Bluetooth: hci1: command 0x0406 tx timeout [ 246.191114][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 246.192441][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 246.272741][ T4253] device hsr_slave_0 left promiscuous mode [ 246.298384][ T4253] device hsr_slave_1 left promiscuous mode [ 246.358195][ T4253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.359881][ T4253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.383688][ T4253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.385371][ T4253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.403376][ T4253] device bridge_slave_1 left promiscuous mode [ 246.404889][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.429159][ T4253] device bridge_slave_0 left promiscuous mode [ 246.431036][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.448479][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 246.451057][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 246.470454][ T8736] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1397'. [ 246.558840][ T4253] device veth1_macvtap left promiscuous mode [ 246.560293][ T4253] device veth0_macvtap left promiscuous mode [ 246.561758][ T4253] device veth1_vlan left promiscuous mode [ 246.563712][ T4253] device veth0_vlan left promiscuous mode [ 246.620231][ T8713] ceph: No mds server is up or the cluster is laggy [ 246.979677][ T8769] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1408'. [ 247.553157][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 247.554646][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 247.632266][ T4253] team0 (unregistering): Port device team_slave_1 removed [ 247.719101][ T4253] team0 (unregistering): Port device team_slave_0 removed [ 247.767165][ T4253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.818643][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 247.820054][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 247.896191][ T4253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.901075][ T8802] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1421'. [ 247.943861][ T8786] ceph: No mds server is up or the cluster is laggy [ 248.334250][ T4253] bond0 (unregistering): Released all slaves [ 248.550924][ T8834] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1435'. [ 249.501260][ T1534] libceph: connect (1)[c::]:6789 error -101 [ 249.502585][ T1534] libceph: mon0 (1)[c::]:6789 connect error [ 249.593946][ T8865] ceph: No mds server is up or the cluster is laggy [ 250.381904][ T8924] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1458'. [ 251.200836][ T7] libceph: connect (1)[c::]:6789 error -101 [ 251.204514][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 251.458395][ T7] libceph: connect (1)[c::]:6789 error -101 [ 251.459830][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 251.708704][ T8954] ceph: No mds server is up or the cluster is laggy [ 252.842652][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 252.843946][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 253.181756][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 253.183152][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 253.476291][ T9016] ceph: No mds server is up or the cluster is laggy [ 253.943077][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.944513][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.497887][ T25] libceph: connect (1)[c::]:6789 error -101 [ 254.499438][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 254.758392][ T25] libceph: connect (1)[c::]:6789 error -101 [ 254.759709][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 254.912203][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.913750][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.915333][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.917485][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.927136][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.934819][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.936356][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.938013][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.942340][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.943742][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.945236][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.946658][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.958238][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.959931][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.961599][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.964182][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.965621][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.967181][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.978119][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.979736][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.981429][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.982946][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.984429][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.985890][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 254.987334][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.000247][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.001837][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.003334][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.004781][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.006210][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.007766][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.028105][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.042735][ T25] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 255.131841][ T9086] ceph: No mds server is up or the cluster is laggy [ 255.417251][ T9123] xt_hashlimit: size too large, truncated to 1048576 [ 256.999035][ T25] libceph: connect (1)[c::]:6789 error -101 [ 257.000330][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 257.268468][ T25] libceph: connect (1)[c::]:6789 error -101 [ 257.270040][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 257.582300][ T570] nci: nci_ntf_packet: unknown ntf opcode 0x305 [ 257.607577][ T9176] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1538'. [ 257.627242][ T9147] ceph: No mds server is up or the cluster is laggy [ 258.468150][ T9209] udc-core: couldn't find an available UDC or it's busy [ 258.474229][ T9209] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 258.628764][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 258.630321][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 258.889573][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 258.890939][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 259.276410][ T9210] ceph: No mds server is up or the cluster is laggy [ 260.356031][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 260.357593][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 260.618530][ T3607] libceph: connect (1)[c::]:6789 error -101 [ 260.620175][ T3607] libceph: mon0 (1)[c::]:6789 connect error [ 260.762100][ T9260] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1573'. [ 260.939003][ T9268] fuse: blksize only supported for fuseblk [ 260.941840][ T9268] fuseblk: Bad value for 'group_id' [ 261.028530][ T9253] ceph: No mds server is up or the cluster is laggy [ 261.129276][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 261.130639][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 261.368781][ T9282] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1580'. [ 262.241432][ T9295] netlink: 'syz.7.1589': attribute type 10 has an invalid length. [ 262.288246][ T26] audit: type=1326 audit(262.270:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.5.1590" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba4e11a8 code=0x0 [ 262.293867][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.306074][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1588'. [ 262.311185][ T9295] bond0: (slave team0): Enslaving as an active interface with an up link [ 262.329921][ T9299] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:0424:98ff:fe0d:914f error=-28 [ 262.608537][ T9299] infiniband syz1: set active [ 262.613990][ T9299] infiniband syz1: added team_slave_0 [ 262.740838][ T9299] RDS/IB: syz1: added [ 262.746872][ T9299] smc: adding ib device syz1 with port count 1 [ 262.754694][ T9299] smc: ib device syz1 port 1 has pnetid [ 263.366936][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 263.369779][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 263.629582][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 263.631051][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 263.988156][ T9311] ceph: No mds server is up or the cluster is laggy [ 264.390320][ T9327] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1596'. [ 265.054702][ T9348] netlink: 'syz.6.1605': attribute type 10 has an invalid length. [ 265.057562][ T9348] rdma_rxe: rxe_register_device failed with error -23 [ 265.077605][ T9348] rdma_rxe: failed to add team_slave_0 [ 265.526863][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 265.528281][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 265.533194][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 265.534923][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 265.788378][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 265.789700][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 265.831182][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 266.057574][ T9356] ceph: No mds server is up or the cluster is laggy [ 266.490662][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1616'. [ 266.496559][ T9377] netlink: 'syz.5.1617': attribute type 10 has an invalid length. [ 266.533285][ T9377] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.539262][ T9377] device team0 entered promiscuous mode [ 266.540441][ T9377] device team_slave_0 entered promiscuous mode [ 266.541989][ T9377] device team_slave_1 entered promiscuous mode [ 266.544340][ T9377] bond0: (slave team0): Enslaving as an active interface with an up link [ 266.601452][ T9377] rdma_rxe: rxe_register_device failed with error -23 [ 266.602977][ T9377] rdma_rxe: failed to add team_slave_0 [ 266.753008][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1619'. [ 269.819320][ T9418] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1624'. [ 270.716721][ T9427] netlink: 'syz.0.1631': attribute type 10 has an invalid length. [ 270.746626][ T9427] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.764443][ T9427] bond0: (slave team0): Enslaving as an active interface with an up link [ 270.857716][ T9427] rdma_rxe: rxe_register_device failed with error -23 [ 270.859574][ T9427] rdma_rxe: failed to add team_slave_0 [ 271.836274][ T9433] chnl_net:caif_netlink_parms(): no params data found [ 271.979390][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.980751][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.982853][ T9433] device bridge_slave_0 entered promiscuous mode [ 271.985539][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.987071][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.045682][ T9433] device bridge_slave_1 entered promiscuous mode [ 272.118926][ T9433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.122952][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.192172][ T9433] team0: Port device team_slave_0 added [ 272.208760][ T9433] team0: Port device team_slave_1 added [ 272.257129][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.262585][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.267996][ T9433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.291894][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.293302][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.321857][ T9433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.460578][ T9433] device hsr_slave_0 entered promiscuous mode [ 272.498572][ T9433] device hsr_slave_1 entered promiscuous mode [ 272.555524][ T9433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.557086][ T9433] Cannot create hsr debugfs directory [ 272.770739][ T9433] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 272.810923][ T9433] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 272.843576][ T9433] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 272.882113][ T9433] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 273.043400][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.085998][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.087676][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.089982][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.108813][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.110829][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.113134][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.114664][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.116396][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.128621][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.130562][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.131923][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.152348][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.160142][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.162462][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.195948][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.211555][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.220696][ T9456] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1640'. [ 273.225154][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.238491][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.250857][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.253179][ T4084] Bluetooth: hci5: command 0x0409 tx timeout [ 273.255903][ T9454] block nbd6: NBD_DISCONNECT [ 273.257333][ T9454] block nbd6: Send disconnect failed -89 [ 273.266081][ T9448] block nbd6: Disconnected due to user request. [ 273.267462][ T9448] block nbd6: shutting down sockets [ 273.272933][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.302552][ T9433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.306266][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.331204][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.336320][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.338990][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.401696][ T1534] libceph: connect (1)[c::]:6789 error -101 [ 273.403101][ T1534] libceph: mon0 (1)[c::]:6789 connect error [ 273.404664][ T1534] libceph: connect (1)[c::]:6789 error -101 [ 273.405888][ T1534] libceph: mon0 (1)[c::]:6789 connect error [ 273.592477][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1644'. [ 273.652202][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.653856][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.658400][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 273.659742][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 273.809971][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.950291][ T9466] ceph: No mds server is up or the cluster is laggy [ 274.022208][ T9487] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1647'. [ 274.450127][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.452643][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.530851][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.533164][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.535519][ T9433] device veth0_vlan entered promiscuous mode [ 274.540973][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.551342][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.563572][ T9433] device veth1_vlan entered promiscuous mode [ 274.637360][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.639781][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.644579][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.651041][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.659653][ T9433] device veth0_macvtap entered promiscuous mode [ 274.666750][ T9433] device veth1_macvtap entered promiscuous mode [ 274.707843][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.716464][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.727965][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.748125][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.750198][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.752295][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.754305][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.756257][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.777392][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.779655][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.781704][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.783703][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.785997][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.791232][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.793377][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.795373][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.797527][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.820903][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.822992][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.824793][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.826948][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.861036][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.862579][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.864845][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.882439][ T9433] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.884196][ T9433] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.886035][ T9433] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.887800][ T9433] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.076159][ T299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.089626][ T299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.111026][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.136342][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.140130][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.143830][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 275.308552][ T7141] Bluetooth: hci5: command 0x041b tx timeout [ 275.330708][ T4028] Bluetooth: hci6: sending frame failed (-49) [ 277.378597][ T4103] Bluetooth: hci6: command 0xfc11 tx timeout [ 277.379974][ T4041] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 277.384112][ T4103] Bluetooth: hci5: command 0x040f tx timeout [ 277.442426][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1650'. [ 277.484241][ T9504] binder: BINDER_SET_CONTEXT_MGR already set [ 277.486158][ T9504] binder: 9500:9504 ioctl 4018620d 20000040 returned -16 [ 277.500981][ T9504] binder: tried to use weak ref as strong ref [ 277.501005][ T9506] netlink: 'syz.9.1649': attribute type 10 has an invalid length. [ 277.502344][ T9504] binder: 9500:9504 Acquire 1 refcount change on invalid ref 0 ret -22 [ 277.507173][ T9504] binder: 9500:9504 got transaction to invalid handle, 1 [ 277.518185][ T9504] binder: 9500:9504 transaction failed 29201/-22, size 0-0 line 2917 [ 277.521495][ T4084] binder: undelivered TRANSACTION_ERROR: 29201 [ 277.524088][ T9506] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.577117][ T9506] bond0: (slave team0): Enslaving as an active interface with an up link [ 277.606605][ T9506] rdma_rxe: rxe_register_device failed with error -23 [ 277.623242][ T9506] rdma_rxe: failed to add team_slave_0 [ 278.488647][ T7] libceph: connect (1)[c::]:6789 error -101 [ 278.541288][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 278.776817][ T9530] ceph: No mds server is up or the cluster is laggy [ 279.316723][ T9545] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1661'. [ 279.458239][ T4084] Bluetooth: hci5: command 0x0419 tx timeout [ 279.847364][ T9553] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 280.603666][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 280.606004][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 281.044335][ T9565] ceph: No mds server is up or the cluster is laggy [ 281.050305][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 281.051539][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 281.730517][ T9593] xt_hashlimit: size too large, truncated to 1048576 [ 282.784676][ T9601] netlink: 277 bytes leftover after parsing attributes in process `syz.9.1681'. [ 286.207760][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1691'. [ 286.403318][ T9623] usb usb4: usbfs: process 9623 (syz.0.1708) did not claim interface 0 before use [ 287.494547][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 287.495923][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 287.497506][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 287.499775][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 287.540487][ T9639] ceph: No mds server is up or the cluster is laggy [ 287.713464][ T9653] udc-core: couldn't find an available UDC or it's busy [ 287.714864][ T9653] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 287.956608][ T9661] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1701'. [ 290.386663][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 290.396281][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 290.409379][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 290.410782][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 290.678613][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 290.679906][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 290.906313][ T9705] ceph: No mds server is up or the cluster is laggy [ 291.411033][ T9740] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1732'. [ 291.447857][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1742'. [ 291.461167][ T9743] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.493856][ T9743] device bridge_slave_0 left promiscuous mode [ 291.495499][ T9743] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.665019][ T9746] udc-core: couldn't find an available UDC or it's busy [ 291.666518][ T9746] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 292.659165][ T9759] tipc: Started in network mode [ 292.666824][ T9759] tipc: Node identity 5eb47e663cf363c8, cluster identity 4711 [ 292.673124][ T9759] tipc: Enabling of bearer rejected, failed to enable media [ 293.009713][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 293.213136][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1756'. [ 293.639534][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 293.640894][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 293.645770][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 293.647239][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 293.791973][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 293.918634][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 293.920111][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 294.120746][ T9790] ceph: No mds server is up or the cluster is laggy [ 294.840517][ T9828] netlink: 277 bytes leftover after parsing attributes in process `syz.9.1765'. [ 295.624399][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 295.626075][ T9830] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1778'. [ 295.636127][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1778'. [ 296.544532][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 296.545860][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 296.550719][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 296.552260][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 296.820431][ T4141] libceph: connect (1)[c::]:6789 error -101 [ 296.821866][ T4141] libceph: mon0 (1)[c::]:6789 connect error [ 296.984149][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 297.108477][ T9857] ceph: No mds server is up or the cluster is laggy [ 297.524626][ T9879] binder: 9878:9879 tried to acquire reference to desc 0, got 1 instead [ 297.557497][ T9879] binder: 9878:9879 got transaction with invalid data ptr [ 297.559024][ T9879] binder: 9878:9879 transaction failed 29201/-14, size 0-4088 line 3186 [ 297.579893][ T4103] binder: undelivered TRANSACTION_COMPLETE [ 297.581079][ T4103] binder: undelivered TRANSACTION_ERROR: 29201 [ 297.631907][ T4103] binder: undelivered transaction 26, process died. [ 298.500526][ T9891] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1801'. [ 298.996757][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 299.370044][ T9902] binder: 9901:9902 tried to acquire reference to desc 0, got 1 instead [ 299.373794][ T9904] udc-core: couldn't find an available UDC or it's busy [ 299.375317][ T9904] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 299.390713][ T3606] binder: undelivered TRANSACTION_COMPLETE [ 299.391861][ T3606] binder: undelivered TRANSACTION_COMPLETE [ 299.409793][ T3606] binder: undelivered transaction 33, process died. [ 299.411206][ T3606] binder: undelivered transaction 32, process died. [ 300.019482][ T6185] dvb-usb: no frontend was attached by 'DiBcom NIM9090MD reference design' [ 300.021586][ T6185] Registered IR keymap rc-dib0700-rc5 [ 300.038158][ T6185] dib0700: ir protocol setup failed [ 300.039671][ T6185] dvb-usb: could not initialize remote control. [ 300.040937][ T6185] dvb-usb: DiBcom NIM9090MD reference design successfully initialized and connected. [ 300.069786][ T6185] usb 1-1: USB disconnect, device number 5 [ 300.119761][ T6185] dvb-usb: DiBcom NIM9090MD reference design successfully deinitialized and disconnected. [ 300.251805][ T9899] syz.7.1807 (9899): drop_caches: 1 [ 300.316438][ T9933] xt_hashlimit: size too large, truncated to 1048576 [ 300.495473][ T9942] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.1824' resets device [ 301.099000][ T3606] libceph: connect (1)[c::]:6789 error -101 [ 301.100473][ T3606] libceph: mon0 (1)[c::]:6789 connect error [ 301.116820][ T9954] ceph: No mds server is up or the cluster is laggy [ 301.249454][ T9958] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1828'. [ 301.986695][ T7] libceph: connect (1)[c::]:6789 error -101 [ 301.988201][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 302.717507][ T9966] udc-core: couldn't find an available UDC or it's busy [ 302.736018][ T9966] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 303.452729][ T9973] tipc: Started in network mode [ 303.453745][ T9973] tipc: Node identity fd07000000000000000000000000008, cluster identity 4711 [ 303.453753][ T9975] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1833'. [ 303.619889][ T9968] syz.5.1831 (9968): drop_caches: 1 [ 303.886992][ T9985] sp0: Synchronizing with TNC [ 304.013432][ T9990] netlink: 277 bytes leftover after parsing attributes in process `syz.9.1839'. [ 305.227269][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1848'. [ 305.575788][ T7] libceph: connect (1)[c::]:6789 error -101 [ 305.577202][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 305.585583][ T7] libceph: connect (1)[c::]:6789 error -101 [ 305.586879][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 305.742258][T10021] ceph: No mds server is up or the cluster is laggy [ 305.850353][ T7] libceph: connect (1)[c::]:6789 error -101 [ 305.851705][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 306.883254][T10033] syz.6.1851 (10033): drop_caches: 1 [ 307.002793][T10044] netlink: 277 bytes leftover after parsing attributes in process `syz.9.1854'. [ 307.964143][T10054] dccp_close: ABORT with 32 bytes unread [ 308.111362][T10068] device vlan2 entered promiscuous mode [ 308.722949][T10078] netlink: 'syz.5.1869': attribute type 4 has an invalid length. [ 309.013645][ T7] libceph: connect (1)[c::]:6789 error -101 [ 309.014926][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 309.016281][ T7] libceph: connect (1)[c::]:6789 error -101 [ 309.017547][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 309.126102][T10081] ceph: No mds server is up or the cluster is laggy [ 309.986523][T10090] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1871'. [ 310.709040][T10087] syz.0.1870 (10087): drop_caches: 1 [ 314.397249][T10104] delete_channel: no stack [ 314.515801][T10112] netlink: 'syz.9.1880': attribute type 4 has an invalid length. [ 314.880382][ T25] libceph: connect (1)[c::]:6789 error -101 [ 314.881736][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 314.883768][ T25] libceph: connect (1)[c::]:6789 error -101 [ 314.885154][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 314.972671][T10126] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1884'. [ 315.381284][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.382855][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.636091][T10121] ceph: No mds server is up or the cluster is laggy [ 315.723041][ T4103] libceph: connect (1)[c::]:6789 error -101 [ 315.724357][ T4103] libceph: mon0 (1)[c::]:6789 connect error [ 315.818864][T10133] device geneve2 entered promiscuous mode [ 316.309943][T10144] udc-core: couldn't find an available UDC or it's busy [ 316.311374][T10144] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 316.809958][T10144] udc-core: couldn't find an available UDC or it's busy [ 316.811560][T10144] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 316.904365][ T149] block nbd5: Attempted send on invalid socket [ 316.906106][ T149] blk_update_request: I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.909371][T10146] REISERFS warning (device nbd5): sh-2006 read_super_block: bread failed (dev nbd5, block 2, size 4096) [ 316.926877][ T149] block nbd5: Attempted send on invalid socket [ 316.928236][ T149] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.938506][T10146] REISERFS warning (device nbd5): sh-2006 read_super_block: bread failed (dev nbd5, block 16, size 4096) [ 316.940958][T10146] REISERFS warning (device nbd5): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd5 [ 317.014520][T10153] netlink: 'syz.0.1896': attribute type 4 has an invalid length. [ 317.545065][T10177] netlink: 277 bytes leftover after parsing attributes in process `syz.9.1897'. [ 317.665437][ T4084] libceph: connect (1)[c::]:6789 error -101 [ 317.667018][ T4084] libceph: mon0 (1)[c::]:6789 connect error [ 317.669419][ T4084] libceph: connect (1)[c::]:6789 error -101 [ 317.670609][ T4084] libceph: mon0 (1)[c::]:6789 connect error [ 317.728517][ T226] block nbd6: Attempted send on invalid socket [ 317.729865][ T226] blk_update_request: I/O error, dev nbd6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 317.732174][T10185] REISERFS warning (device nbd6): sh-2006 read_super_block: bread failed (dev nbd6, block 2, size 4096) [ 317.734504][ T226] block nbd6: Attempted send on invalid socket [ 317.735804][ T226] blk_update_request: I/O error, dev nbd6, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 317.738335][T10185] REISERFS warning (device nbd6): sh-2006 read_super_block: bread failed (dev nbd6, block 16, size 4096) [ 317.740495][T10185] REISERFS warning (device nbd6): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd6 [ 317.938593][ T25] libceph: connect (1)[c::]:6789 error -101 [ 317.939904][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 317.982082][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1909'. [ 318.168230][T10192] netlink: 'syz.6.1911': attribute type 4 has an invalid length. [ 318.183982][T10181] ceph: No mds server is up or the cluster is laggy [ 320.079480][ T149] block nbd7: Attempted send on invalid socket [ 320.079541][ T149] blk_update_request: I/O error, dev nbd7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.079620][T10212] REISERFS warning (device nbd7): sh-2006 read_super_block: bread failed (dev nbd7, block 2, size 4096) [ 320.079775][ T149] block nbd7: Attempted send on invalid socket [ 320.079798][ T149] blk_update_request: I/O error, dev nbd7, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.079848][T10212] REISERFS warning (device nbd7): sh-2006 read_super_block: bread failed (dev nbd7, block 16, size 4096) [ 320.079867][T10212] REISERFS warning (device nbd7): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd7 [ 320.081432][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1921'. [ 320.102213][T10214] batman_adv: Cannot find parent device [ 320.111074][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1921'. [ 320.175129][T10217] 9pnet_virtio: no channels available for device syz [ 320.305749][T10224] device vlan0 entered promiscuous mode [ 320.334041][T10224] team0: Port device vlan0 added [ 320.856445][T10231] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1926'. [ 320.969163][ T4084] libceph: connect (1)[c::]:6789 error -101 [ 320.970643][ T4084] libceph: mon0 (1)[c::]:6789 connect error [ 320.972269][ T4084] libceph: connect (1)[c::]:6789 error -101 [ 320.973869][ T4084] libceph: mon0 (1)[c::]:6789 connect error [ 321.238383][ T4084] libceph: connect (1)[c::]:6789 error -101 [ 321.239753][ T4084] libceph: mon0 (1)[c::]:6789 connect error [ 321.299147][T10246] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1931'. [ 321.434178][T10248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1932'. [ 321.463506][T10248] batman_adv: Cannot find parent device [ 321.522145][T10248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1932'. [ 321.537325][T10235] ceph: No mds server is up or the cluster is laggy [ 321.755870][T10258] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1937'. [ 321.791078][T10258] device vlan2 entered promiscuous mode [ 322.588117][ T4084] Bluetooth: hci3: command 0x0406 tx timeout [ 322.621311][ T4028] ================================================================== [ 322.623271][ T4028] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xdd0/0x31c0 [ 322.624783][ T4028] Read of size 1 at addr ffff0000c8e8440a by task kworker/u5:2/4028 [ 322.626429][ T4028] [ 322.626897][ T4028] CPU: 1 PID: 4028 Comm: kworker/u5:2 Not tainted 5.15.171-syzkaller #0 [ 322.628625][ T4028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 322.630668][ T4028] Workqueue: hci3 hci_rx_work [ 322.631697][ T4028] Call trace: [ 322.632411][ T4028] dump_backtrace+0x0/0x530 [ 322.633289][ T4028] show_stack+0x2c/0x3c [ 322.634112][ T4028] dump_stack_lvl+0x108/0x170 [ 322.635124][ T4028] print_address_description+0x7c/0x3f0 [ 322.636283][ T4028] kasan_report+0x174/0x1e4 [ 322.637118][ T4028] __asan_report_load1_noabort+0x44/0x50 [ 322.638229][ T4028] hci_le_meta_evt+0xdd0/0x31c0 [ 322.639213][ T4028] hci_event_packet+0xd34/0x12b4 [ 322.640252][ T4028] hci_rx_work+0x1c0/0x7c4 [ 322.641190][ T4028] process_one_work+0x790/0x11b8 [ 322.642190][ T4028] worker_thread+0x910/0x1034 [ 322.643150][ T4028] kthread+0x37c/0x45c [ 322.643988][ T4028] ret_from_fork+0x10/0x20 [ 322.645050][ T4028] [ 322.645501][ T4028] Allocated by task 10268: [ 322.646543][ T4028] ____kasan_kmalloc+0xbc/0xfc [ 322.647482][ T4028] __kasan_kmalloc+0x10/0x1c [ 322.648411][ T4028] __kmalloc_node_track_caller+0x234/0x448 [ 322.649542][ T4028] kmalloc_reserve+0xe8/0x270 [ 322.650476][ T4028] __alloc_skb+0x1a4/0x584 [ 322.651371][ T4028] vhci_write+0xb8/0x3b8 [ 322.652240][ T4028] vfs_write+0x884/0xb44 [ 322.653109][ T4028] ksys_write+0x15c/0x26c [ 322.653951][ T4028] __arm64_sys_write+0x7c/0x90 [ 322.654957][ T4028] invoke_syscall+0x98/0x2b8 [ 322.655881][ T4028] el0_svc_common+0x138/0x258 [ 322.656742][ T4028] do_el0_svc+0x58/0x14c [ 322.657623][ T4028] el0_svc+0x7c/0x1f0 [ 322.658574][ T4028] el0t_64_sync_handler+0x84/0xe4 [ 322.659645][ T4028] el0t_64_sync+0x1a0/0x1a4 [ 322.660544][ T4028] [ 322.661032][ T4028] Last potentially related work creation: [ 322.662230][ T4028] kasan_save_stack+0x38/0x68 [ 322.663178][ T4028] kasan_record_aux_stack+0xd4/0x11c [ 322.664288][ T4028] call_rcu+0x118/0xb40 [ 322.665286][ T4028] qdisc_destroy+0x280/0x4c0 [ 322.666312][ T4028] dev_shutdown+0x368/0x494 [ 322.667254][ T4028] unregister_netdevice_many+0x9c4/0x189c [ 322.668446][ T4028] default_device_exit_batch+0x4c0/0x520 [ 322.669588][ T4028] cleanup_net+0x5e0/0x9bc [ 322.670433][ T4028] process_one_work+0x790/0x11b8 [ 322.671378][ T4028] worker_thread+0x910/0x1034 [ 322.672332][ T4028] kthread+0x37c/0x45c [ 322.673209][ T4028] ret_from_fork+0x10/0x20 [ 322.674108][ T4028] [ 322.674579][ T4028] The buggy address belongs to the object at ffff0000c8e84000 [ 322.674579][ T4028] which belongs to the cache kmalloc-1k of size 1024 [ 322.677604][ T4028] The buggy address is located 10 bytes to the right of [ 322.677604][ T4028] 1024-byte region [ffff0000c8e84000, ffff0000c8e84400) [ 322.680462][ T4028] The buggy address belongs to the page: [ 322.681505][ T4028] page:0000000085032391 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108e80 [ 322.683682][ T4028] head:0000000085032391 order:3 compound_mapcount:0 compound_pincount:0 [ 322.685431][ T4028] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 322.687087][ T4028] raw: 05ffc00000010200 fffffc00033d4c00 0000000200000002 ffff0000c0002780 [ 322.688912][ T4028] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 322.690705][ T4028] page dumped because: kasan: bad access detected [ 322.692081][ T4028] [ 322.692548][ T4028] Memory state around the buggy address: [ 322.693780][ T4028] ffff0000c8e84300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.695372][ T4028] ffff0000c8e84380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.697152][ T4028] >ffff0000c8e84400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 322.698770][ T4028] ^ [ 322.699561][ T4028] ffff0000c8e84480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 322.701508][ T4028] ffff0000c8e84500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 322.703296][ T4028] ================================================================== [ 322.704842][ T4028] Disabling lock debugging due to kernel taint