last executing test programs: 10.339560124s ago: executing program 0 (id=110): socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) io_uring_setup(0x7d5, &(0x7f0000000180)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xec, &(0x7f00000004c0)=""/236, 0x40f00, 0x69}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 9.746448671s ago: executing program 0 (id=112): r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000400)="$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") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f00000018c0)=ANY=[@ANYRES32, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e94d802fcf7fb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f248e89447aa3b0ffba27c76545e41126f8c5b59b3e9a839669f2a212105589ad1abd707ddc", @ANYRES32, @ANYRES16, @ANYRESOCT=r1, @ANYRESOCT, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688da94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b577de5f5259bfe19c0efe18aefa4d385e7dd5452291c5c94432521ab2a1898179a25c39edcc9f744f8f686181999f50fdf956ea314ec12febc9b7f21a3a7325eb83536fa097ec4a712ef3a8c734410742b65a943fba12bc91c516e90e1951615892710e9ec5e4b4723824f19091880741e84304c08b958c45db5fd91cbf6f66cc9b4ca5131ad988d907b0266c197f080c3b1f430df5ed5a8d65611ab10734aa04ca786e9336495379bc8bf2d21dfeb002d45734aad93503c", @ANYRESOCT], 0x2, 0x1e3, &(0x7f0000000b40)="$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") lstat(&(0x7f0000006b40)='./file1\x00', 0x0) sendmmsg$unix(r5, &(0x7f0000006c80)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000b40)="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", 0xd65}, {&(0x7f00000007c0)="9a21558128bedca267be37a11c77247ec8826ac1279513654f3f43b4e67fae82dcb5ecc2af0e8bf80c0f64f77b68dccbc35f6666b6b0749a02469a9605d7c4100b1f84518f004df0d41ac387f770c0f4c6e7e4a5c2b98e5a68e7c22aafc05fecf9658785f9764afd54ec9c03a1ea728d1cccb31cbe4fae25d6e21d83a745303d876630f7626d", 0x86}, {0x0}, {&(0x7f0000000280)="d7d2cbf5a3040361c7", 0x9}], 0x5, 0x0, 0x0, 0x4080}}, {{&(0x7f0000002f00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000600)="2cdae62653a85f666a1d56f10e9eaba499db99133ffbaa7cb3b455fd99f4c0588f47ddb9f9c98148559ae857acaadf215e94d9da86720fdf40b8e0c2cdd2f9f056e14633c13ca0a16a266c64d2e15fe04cb33e19ab03fcf9d42a3a63b1e800b28f71f61e9f4bb5", 0x67}, {&(0x7f0000000880)="7eb78e412bbd18508db35c9f08a4d3ee62417e07e1eaaf68691a2838948bae13fa780417e2381e96853c209c43d27dc26119878409b56dd74595afeb6066b78740cff5ae56d19d50324af4bedb0b70ced595f441d6940ba4f194e3", 0x5b}], 0x2, &(0x7f0000003140)=ANY=[], 0x78, 0x30000804}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}}, {{&(0x7f0000006180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000006600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x70, 0x4000001}}, {{&(0x7f00000066c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006a00)=[{&(0x7f0000006740)="71c93d730519ffdaabd57b609088345e8aad2d72b2e544104fb970ec89ee6d0791f09952f4b302f7a2f815da0c79ae235793d854f6de6b9f0e567b23ec07aa820e562d9f7a1e12f3c0824dc3ccf5f0a55b80e0c345bf25c47f92c8e196bcb7aa9565bb08f1d86bb3dab22856c12017ed5bc50f147bb510e6d3663c9647555ad894378b81f4492bf08897b97feb9bb24fb0607ccdcecbf5cd260660a305d30b856e01", 0xa2}, {&(0x7f0000006800)="8e", 0x1}, {&(0x7f0000006900)="dead97e9eb2fba7cafb3a493e3592d39e18e34538b58ad3ff5efdfdbe92287ae00e148e91b3dadd6734cbb504fd26eebdd940cb58fbd50cf17462a703f1f3e5050c30e719b0492b71863a7597b510477838fa08b4b39886d12be3eaeeef26481059155acde54b7b8afc085acdd5a08a63abf1473da88ad5af79312443681b7ff7da8199ab721545ec15608b78891a3c96167506ed87d9a42798961bc06f104f38ebc89a40f42e4162fad999141f550201e025fdce2a7a4a89844fbca4bb6cad7dab5d1ce", 0xc4}], 0x3, &(0x7f0000006c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x60, 0x10}}], 0x6, 0x840) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xbf, 0x0, 0x1, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x6}, 0x8) 8.9904844s ago: executing program 1 (id=115): move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20000010) 7.73622988s ago: executing program 1 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_setup(0x0, 0x0) syz_emit_vhci(0x0, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) 7.702022262s ago: executing program 0 (id=121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.741382278s ago: executing program 1 (id=122): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 5.165840082s ago: executing program 1 (id=130): r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000400)="$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") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f00000018c0)=ANY=[@ANYRES32, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e94d802fcf7fb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f248e89447aa3b0ffba27c76545e41126f8c5b59b3e9a839669f2a212105589ad1abd707ddc", @ANYRES32, @ANYRES16, @ANYRESOCT=r1, @ANYRESOCT, @ANYBLOB="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", @ANYRESOCT], 0x2, 0x1e3, &(0x7f0000000b40)="$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") lstat(&(0x7f0000006b40)='./file1\x00', 0x0) sendmmsg$unix(r5, &(0x7f0000006c80)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000b40)="e5ab5a4b52539923cc89cffd667557a1031c47a4071d9539772e18a90ded1c2600872b75e9c8046334a2fd5d5322e866941f5be6b78a4cd0426e11f2ebb8b0d1e5365f944d52b0bd2acc0b47e50816cb4b7b030357d0a29ec205b710a5046d11d178e5920706dadb6225b573fb5dcd21b84dc48e22c9464108098554fdc5898f4a4da1c0d4a46c29adb500fddddd8c2d406dba66094843f353f0bb915bc15eae1740e8ab38246a460f40678f9b9c5aa93e00f7ac19b1113236d64d15acdd424d67ebe571f5ebd56803da257f328a8420bd09b97988b5dc2db5d4af5e01fb45500dfffd4181f25bbb7f3221a64b6d6b54676b5e69c826d89d9a7c861813576a8508fc02f65efb03206bebd2f31e03b78922068aa38d959f773848f5aff1d31899ede7674088d234632e6702fa7de9ae91261ceae88d0b767094f083691235a78dcb19086e0db2d64dd13b6900543db0af03d7861d1c02cc250b00035504953109959219a5082cca1de55f746830359705a5cfd757ade18bb3f0c2744a466c3657ccc02d3e8f19bee814d5fab41c9507da99f136fe00e8053ce8f8afb32c06c5064389d99790078576efcd230d30586f51b02fc58a0118ddafdd525f3c838b18f7116599ab744785b63df98fb8e837625cf64cecd56361f3cfde511ded266992bb790d3bea90838c4e23535fb2d255eb3df48825e8002e04c32bfcc0f35d6e0a1fa4836da3bcfb9b03e560847ceb259913e1a45a121ef141adf58194bb1282be33f37e1b436a72f53d1d42f0a2923a609fc3a188cba284b73fe17a4798c34c1e2cffe3e800feb698ecea92fdba47d41ead3426f034f304a07c2843f70db4f273955a5e23d870b62598aedafd6acb5c373525dc3721c29e66424bfd0881554c5c978dd145c020b245bf56ed20c76d2ed2ca7627a7e4c9dcea015725c8e56ccc67ed10f8868351b1a62f08f34095bc42d21081468d306733a5477ba7ddc8129e6941c995c2cd90dcf440d592c65b9950add144d5f3bc75bb888dbfc34e8d7d71c6aca9980cc179d08aa185df4efbcab396d32933734432d377e03fdee5ba733104027ddc345e0d6b741404928c5c8fb71749209b2f8655cd2ed2da3376315a2d7301ffc6164ffdf35944871a00c74696a37c3cacf8a4f8479faa11cca0f29dd78b6e9ec0e309befe403672022192062fa085975d4db027d654336870aa1011b25927aa371d4f2ff6250b68fa3616106c7c959ce401b06e0f2e5de1a48aee3ee3f6251c8c1dc0f4f60294aa4df7866a04dd82b477b9d3cc9623d9afd95632fd14bb9de37e96b4979f2abb3cc0261c221d7b6bc59715a3861dd7b2300c49452aed4c67a39beb965d32508aa7f00f0efeaaa40f11a1ec70af1c8fe40249dc0cc7d0a77992721482d633a49d62b9776a22854b609edf970daa7e0c739934937b0190b9d95c02cb034cb84966ae62ec1612e382b43243663576ea1b516763ce0fe7a8ae29aeba46a3cdda846ccb69eb5e68bd896a4dec9c79b1f1c33896a5082730d9521c89779788278596c3fe717f734788157ff6c4a9e438c3c16b3332f67e01114e4408040009acc2da3a93eded9536abc63bcc04493b4070a41a8cfcb64899cfa06f14b7276c22634d4ba0d2461c299e82b9c6a458c044ab36e30ff1e6bbd28930dd669c78b78a64820d6cad939e071cc2f0c4d4b289b8371b52fe34cedb0f96b2d5c9e8708659abb6868c2d7614a162227144dabdae34c4759c88b071655a5a4231e056610c23f4dbe5d222114a3a999a1ea13956de5fc035fbc22a9fe43689735c592563e8bf50ae1467dac94fbed3a13b20ea333337f1ffc50e8b2bffb57c254c4af511f7116a2bf0e42dbe6860947af3ffa176bb5f5567433019f668d02f69320259ad154a3c924818e5a0d2dac7ac7c50fcbcc95c9e65d5a2e32cf3a44c8b935c2b22b64fadd7c6febf8f8636195a6ee0388a56d7da94b46d0a1f48c3a9acc602e254472f99b52c348dc4fddf3c4cdc1c0d5c20b4c20e5f1841c4e3f4b40c2179a9ae16be84e2a9e63084ecea730fc83ab34d9f8dde98eb7e16bda55061436c27e223e280dd42844d354bdf488b2c4ebacb99df968709982a161cb4f798873efe629ab1a536591fea8036dc6a38ddf6a9992a2ea346ce8bbf28550e5ff6377e9c37eeee7d897b71bbe947c201b1f438f36fc8e9069602de20b01ff43d0a3b44d70b809065887ca7b51e9929a9598b36ee3766c014a14f2d39c0398638070e0d6514244cef03f2c9fda78418ed1c8f08129966579456af2c7dab60a16394a0097e1c000882a50514378ffa3fd72701bdd6c36099a06afe3e29cccf762ee542092827dc57305c46601e586988054d13f9b29e5c0639f2d24cd13cb4f4d63159d554b39684a54a860dd098b40c6c093403e6228de7d97ff016dcdcaf85fd39b818cc3bbdf96268182bd96bacf350179c1070711e635224f7ce81047ee4aee8fb4106e237bc42e4d3a96a713346537a514de35622df5cdb1a6811d03c09669b1543932250b49326543a3853c75c2a21e7fc524fc1a62599dc7aa68ac45658b487bd2164f52195bd1c8f0c96c4c1565f7b801f94bab454db2405572683f483ec8b6c8c4f4489b5ef8721504a0b7420d325b047bcf2840c24feb5f49c8cbaa26079e82d768125a8436b160646fb1f7504d0c1f3b14f38fa816a139f638eafbbfc744bb3e8bb7203cb5ae26be8352f0ba9d842aa9ee33bac989f767a15c139b76f7f155360b4a742cc3bea31710f8fbb82adaad2117df2220b1f28f1fd8b5958f79c902f09d8dd94b145eed66b62e59e58a79850569195d3f61c8636f8b36f9dfddd9ff3c5b84dfd08502c5b45015d21fbc4174e6302eb7e5143ebeb2f5527fa609bcaf7926ce0643f84009996bd277c766350f7e0c1de932b11d251f6f818be6e8d0ede75314184671d2ab0f1690ce284034288ba438ba99e5547a5294bbb59dd9e79e2ba455febadfb0e858d03ee2c60e23505b67ee7d0837b464aa6586a6a5851c2e735aa700e8896ba9e3c5e8e6c96996d57f66088bcab228cc7263b3829b148a7cd7342b5c077291f32398c38084732628219a9cf1353f994a3a56e6d371ab73e57cfead33e9f619c1efe2eae56477792afbab849fdf2f8b896921372245c8c2cc6d31aff98281f57b7eb3c62805ab573548fa2794893ef6fbba5e191cae161cfc02cadc2f11a563bdf9f80b9bcb1f68f3e4fcbf140cf5421691039d78f7ad019cae4e7a735045f14849f3bc1312f6382ed85794560545560dc491bbb60358e2f8bb5da2347ac57eb3efdea492f5b7efe80fdd984667c369e2e2ed518f4ddc50a24c077866f7c48bfb9d96f9e35aa2b81d00499a23b05160ddfc1976a8942a47657566b110d24beb4991102838b5254a312a9dcd00aea033d456393b742f454bad14d18f545d83a2e238be89198a531683b87289690e57c8046b52d102494b3bfb2c7a35ebe9a7449dfaf198e405dcafefb4a53f7f83d545639abb8d00fcf2fa50831df608c6909ffff91b18877f41d7fde150b1481023cbfba469af75ef4a5685b0f02a645a3755b57f0d5ed3ba3230b6ea3685a5a9191d150a0d937283cc74af0f3f60ebe7cba869378a0f55a3d24a22a47d60ab2552d50110ff894b8cebf928bc6620df6a6422bcb3f2eba1307cedf861d4bad1a63328de3f26d87460cfa71c4384bd78cb7a892e4308cf613b9f5146d27acf5d8b36833ee0e0169fed17522143ce5fde2bf05b0a39ce814e0ec929c571935fe3c1ff70faa922ac1f11861331943eb60372815b32eae70753c4636dd7514d8c1949a20e0576e47416f371f142281e613448bf4020e4aa45a7107cab97530ae73e13ae0bef0381984e69120b234a6ba61808ef7f39398392566a83c879c68b99c0caef5d0263acadb39c09bebf320cacb8caa226ef8477fa33f9057288104de15f93e371900c65d0d07f2e17bdb5976a7f9bc2dafcf7e4e2f7fa0cf7604a83cf401b6345018a6ebc452e669eb7644466e32d2ace53b4d7179ee6e4214222d3faaa0e616fed1add0f99b74d78e0c33df3dc8719f112d63ab2a393c9c39c18f2a8ba7e1d812a31d071b71e4d3c0f855cee2fa37c8ecd32ad03398625363a78d8245523720e2f9bf5748496e1c1d52313d7caa930a350d95db591c6f17e130f3c851dc6ec644e204c7655302505b9dec9b483ddc5ad9bac70c7cec9ab9ef19bb2421185a98d3c4a5b42d9c167d2110e141bc98a0ee7ad0f2bba5d63b35325b1076c54c83cb3c57264f7c19ba620dd5b45efe7546dd185b0ecb63806b28d7721bb75bb1092a69242657a437f34f09ef24639db06d8817c819559e6ad2f1ddc52e506ee44e13665a884e5dffae46d8a7e409c95d0ab633e2ca2e63b86f6648008159c8716e91672bd545d06d94d69d2324d4854e16416eeea69b0c9cbf804532748e3ace5942efb1069bd46700878c2cb89ee80761676c8a431362599687fd08cf5f81382787d9fbccbe890158f5df290a9b79ec9563ec2128796a50174da23b9ddf58e0dc21ee277a1d216616e1db1a7cca54088500aa746efadb1f4916be824ae273fba61048e7bb310b4e62bdcd2bfeb906e11e0b3b6fadb9951a2fb2d53b45df7edc8faf990cfbb4acbe376f4f754771aeed6137faebc79c8cc25098d822ad75f29995273586a24f3a9a9f7f4a59592efbe7a50c38b4c881c8ab01adc5399e9845d7912c784fe29d3c308a8425838090d0fddc42a6fe94adb5053b36e2406080157853dbdc6daca56823545a5968cb4de67294dd89afab798561c5bd58a2013acdc3863042344cb4a3fe7e3a5b9ea81b88f6", 0xd65}, {&(0x7f00000007c0)="9a21558128bedca267be37a11c77247ec8826ac1279513654f3f43b4e67fae82dcb5ecc2af0e8bf80c0f64f77b68dccbc35f6666b6b0749a02469a9605d7c4100b1f84518f004df0d41ac387f770c0f4c6e7e4a5c2b98e5a68e7c22aafc05fecf9658785f9764afd54ec9c03a1ea728d1cccb31cbe4fae25d6e21d83a745303d876630f7626d", 0x86}, {0x0}, {&(0x7f0000000280)="d7d2cbf5a3040361c7", 0x9}], 0x5, 0x0, 0x0, 0x4080}}, {{&(0x7f0000002f00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000600)="2cdae62653a85f666a1d56f10e9eaba499db99133ffbaa7cb3b455fd99f4c0588f47ddb9f9c98148559ae857acaadf215e94d9da86720fdf40b8e0c2cdd2f9f056e14633c13ca0a16a266c64d2e15fe04cb33e19ab03fcf9d42a3a63b1e800b28f71f61e9f4bb5", 0x67}, {&(0x7f0000000880)="7eb78e412bbd18508db35c9f08a4d3ee62417e07e1eaaf68691a2838948bae13fa780417e2381e96853c209c43d27dc26119878409b56dd74595afeb6066b78740cff5ae56d19d50324af4bedb0b70ced595f441d6940ba4f194e3", 0x5b}], 0x2, &(0x7f0000003140)=ANY=[], 0x78, 0x30000804}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}}, {{&(0x7f0000006180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000006600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x70, 0x4000001}}, {{&(0x7f00000066c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006a00)=[{&(0x7f0000006740)="71c93d730519ffdaabd57b609088345e8aad2d72b2e544104fb970ec89ee6d0791f09952f4b302f7a2f815da0c79ae235793d854f6de6b9f0e567b23ec07aa820e562d9f7a1e12f3c0824dc3ccf5f0a55b80e0c345bf25c47f92c8e196bcb7aa9565bb08f1d86bb3dab22856c12017ed5bc50f147bb510e6d3663c9647555ad894378b81f4492bf08897b97feb9bb24fb0607ccdcecbf5cd260660a305d30b856e01", 0xa2}, {&(0x7f0000006800)="8e", 0x1}, {&(0x7f0000006900)="dead97e9eb2fba7cafb3a493e3592d39e18e34538b58ad3ff5efdfdbe92287ae00e148e91b3dadd6734cbb504fd26eebdd940cb58fbd50cf17462a703f1f3e5050c30e719b0492b71863a7597b510477838fa08b4b39886d12be3eaeeef26481059155acde54b7b8afc085acdd5a08a63abf1473da88ad5af79312443681b7ff7da8199ab721545ec15608b78891a3c96167506ed87d9a42798961bc06f104f38ebc89a40f42e4162fad999141f550201e025fdce2a7a4a89844fbca4bb6cad7dab5d1ce", 0xc4}], 0x3, &(0x7f0000006c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x60, 0x10}}], 0x6, 0x840) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xbf, 0x0, 0x1, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x6}, 0x8) 5.158340923s ago: executing program 3 (id=131): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004000)=@newtfilter={0x494, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x464, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_POLICE={0x45c, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x5, 0x10, 0x97, 0x7ff, 0x3, 0x400, 0xabd6, 0x7, 0x3ff, 0x1000, 0x8, 0x1, 0x7, 0xf, 0x7, 0x6, 0x0, 0x6, 0x2, 0x5, 0x2, 0x6d9, 0x5, 0x0, 0x9, 0x6, 0x4, 0x7, 0xe9f5, 0x4, 0x8a8, 0x5, 0xc3b4, 0x0, 0x205e, 0x7f, 0x5, 0xd, 0xdf17, 0x8001, 0x6, 0x9, 0x1, 0x0, 0x2, 0x0, 0x0, 0x5, 0x5, 0x5, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0xf5, 0x8, 0x4, 0x756, 0xa, 0x5, 0x5, 0x64, 0x7, 0xd, 0x0, 0x200, 0x5d, 0xf0, 0x3, 0x9, 0x3, 0x1, 0x9, 0x8, 0x3, 0x5, 0x8, 0x4, 0x400, 0x1, 0x3, 0x10, 0x9, 0x1000, 0x0, 0x921f, 0x2, 0x1000, 0x800, 0x3, 0x2, 0xfffffffb, 0xcec6, 0x80, 0x9, 0x80000000, 0xd, 0x7c, 0x0, 0x4, 0x1, 0x5, 0x3, 0x0, 0x0, 0x2b2a, 0xfffff9d8, 0x29a, 0x0, 0x10000, 0x1, 0xff, 0x0, 0x8, 0xb71e, 0x2, 0x3338, 0x7fff, 0x1, 0x7, 0x0, 0x2, 0x9, 0x8, 0x1, 0xd27, 0x6, 0x1, 0x8, 0xe67, 0x0, 0x3, 0x7, 0x3, 0x3c18, 0x7, 0x1, 0x5, 0x0, 0x2, 0x80, 0x1926, 0x6, 0x3, 0xc8b, 0x8, 0x1, 0x7, 0x9, 0x1ff, 0x5, 0x4, 0x0, 0x0, 0x1, 0xba, 0x9, 0xbe, 0x6, 0x800, 0x4, 0xffffffc0, 0x1, 0x5, 0x0, 0x7, 0x3, 0x0, 0xef01, 0xb, 0xfffffffa, 0xffff, 0x7, 0x8000, 0x2, 0x4, 0x7, 0x4, 0x7, 0x9, 0x100, 0x10, 0x6, 0x1, 0x9, 0x4, 0x101, 0x40, 0x120, 0x8, 0x1, 0x8, 0xd87, 0x800, 0xffffffff, 0x4, 0xff, 0x4, 0x8, 0x6, 0x8d, 0x4, 0x5, 0x3, 0x6, 0x91, 0x400, 0x0, 0x80000001, 0x2, 0x1, 0x9, 0x1, 0x7, 0x8, 0x5, 0x3, 0x1, 0x7394, 0xf, 0x0, 0xf, 0x5, 0x2, 0x3ff, 0x1, 0xa, 0x64b, 0x6, 0x80, 0x9, 0x0, 0x9, 0x81, 0x9, 0x0, 0x7, 0x0, 0x3, 0xfffffffb, 0x463160ff, 0x1, 0x8, 0x26185d01, 0x7, 0x80, 0x0, 0x3, 0x5, 0xe128, 0x3, 0x0, 0x86]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x20000000, 0x8, 0x4, 0x81, {0x2, 0x0, 0xb6a, 0x1aa4, 0x1, 0x1}, {0x6a, 0x2, 0x2f2, 0x9, 0x5, 0x4}, 0x80, 0x3d5ca1c4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}]}}]}, 0x494}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.726643207s ago: executing program 3 (id=133): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000"], 0x28}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) dup(0xffffffffffffffff) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x810) 3.878626064s ago: executing program 2 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="100002000440000074001680700001800c0004000400000000080000100002"], 0xac}}, 0x4) 3.833964927s ago: executing program 0 (id=135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000001380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 3.741097105s ago: executing program 2 (id=136): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x7ff}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x1, 0x3}, 0x20) syz_open_procfs(0x0, &(0x7f0000000480)='net/psched\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e20, 0x0, @private0}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) creat(&(0x7f0000001040)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000006c0)={r7, 0x3, r5, 0x3, 0x80000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="6c57d4ad82c0080836cd3764001e"], 0x2c}}, 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000c0603000000000000000000050000060500010007000b1a0500010007000000050001000700000005000100070000000900020073797a31000000000900020073797a310000000005000100070000000900020073797a3200000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40005) socket$nl_generic(0x10, 0x3, 0x10) 3.704242518s ago: executing program 0 (id=137): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/19, 0x13}], 0x1, 0x5e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.667438349s ago: executing program 3 (id=138): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000840)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000700)={{0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) 2.66682711s ago: executing program 4 (id=139): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0xee01, r6) keyctl$chown(0x4, r5, 0xee01, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000040), 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2.524693171s ago: executing program 3 (id=140): keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4082, 0xff2) 2.477408004s ago: executing program 2 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 1.733805333s ago: executing program 3 (id=142): r0 = gettid() syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYBLOB="3db1bd3c9389ce300f92cc8091d7dfbdcfffeecfbb90e543382e29209562d6483c6fcfdf79d0b465e6bd8ea70762049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f6c51d7c9ced6ab3e8a7aa716d5ebe1e8cb6255366a32ca4bfad14e3b1315ec", @ANYRESHEX, @ANYRESOCT=r0, @ANYRES16, @ANYRES64], 0x1, 0x620f, &(0x7f000000cb40)="$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") chdir(&(0x7f0000000000)='./file0\x00') r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000180)='./file1\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x148452) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002340)='./bus\x00') open(&(0x7f0000007f80)='./bus\x00', 0x141142, 0x0) 1.637855621s ago: executing program 2 (id=143): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000200)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@fat=@nocase}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@fat=@uid}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@shortname_mixed}]}, 0x25, 0x353, &(0x7f0000006280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 1.614807062s ago: executing program 4 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) 1.473001384s ago: executing program 4 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="100002000440000074001680700001800c0004000400000000080000100002"], 0xac}}, 0x4) 1.294976598s ago: executing program 4 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x4, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_delete(0x0) 945.886135ms ago: executing program 4 (id=147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef3, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r4) 308.034036ms ago: executing program 2 (id=148): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) dup3(r2, r0, 0x0) 239.054101ms ago: executing program 0 (id=149): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x0, 0x0) keyctl$chown(0x4, r5, 0xee01, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 202.607744ms ago: executing program 1 (id=150): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000420095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1300000007"], 0xd) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) 54.675126ms ago: executing program 4 (id=151): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x7ff}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x1, 0x3}, 0x20) syz_open_procfs(0x0, &(0x7f0000000480)='net/psched\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e20, 0x0, @private0}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) creat(&(0x7f0000001040)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000006c0)={r7, 0x3, r5, 0x3, 0x80000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="6c57d4ad82c0080836cd3764001e"], 0x2c}}, 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000c0603000000000000000000050000060500010007000b1a0500010007000000050001000700000005000100070000000900020073797a31000000000900020073797a310000000005000100070000000900020073797a3200000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40005) socket$nl_generic(0x10, 0x3, 0x10) 54.242886ms ago: executing program 1 (id=152): keyctl$dh_compute(0x17, &(0x7f0000001340), 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4082, 0xff2) 14.146829ms ago: executing program 2 (id=153): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pread64(r2, &(0x7f0000000680)=""/228, 0xe4, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}, @TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x50}}, 0x0) 0s ago: executing program 3 (id=154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 49.450851][ T3626] cgroup: Unknown subsys name 'net' [ 49.584031][ T3626] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.816443][ T3626] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.979525][ T3637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.988137][ T3637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.996187][ T3637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.004541][ T3637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.012318][ T3637] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.019654][ T3637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.063744][ T3637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.072188][ T3637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.080395][ T3637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.089104][ T3637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.096764][ T3637] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.104383][ T3637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.121985][ T3644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.130132][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.138926][ T3644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.146614][ T3644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.153957][ T3644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.162615][ T3644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.170779][ T3644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.179827][ T3644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.186995][ T3644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.195063][ T3644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.202837][ T3644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.211874][ T3644] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.219312][ T3644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.227909][ T3639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.235143][ T3639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.245296][ T3650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.254731][ T3639] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.262630][ T3650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.438238][ T3636] chnl_net:caif_netlink_parms(): no params data found [ 52.507142][ T3640] chnl_net:caif_netlink_parms(): no params data found [ 52.651186][ T3648] chnl_net:caif_netlink_parms(): no params data found [ 52.684389][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.693894][ T3636] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.705104][ T3636] device bridge_slave_0 entered promiscuous mode [ 52.718063][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.725750][ T3636] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.734560][ T3636] device bridge_slave_1 entered promiscuous mode [ 52.742094][ T3640] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.749218][ T3640] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.756912][ T3640] device bridge_slave_0 entered promiscuous mode [ 52.791159][ T3640] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.798448][ T3640] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.806205][ T3640] device bridge_slave_1 entered promiscuous mode [ 52.849802][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 52.871037][ T3636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.883331][ T3640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.898763][ T3640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.919722][ T3636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.983270][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.990613][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.999971][ T3648] device bridge_slave_0 entered promiscuous mode [ 53.019289][ T3636] team0: Port device team_slave_0 added [ 53.032573][ T3640] team0: Port device team_slave_0 added [ 53.039277][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.046326][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.054824][ T3648] device bridge_slave_1 entered promiscuous mode [ 53.062083][ T3643] chnl_net:caif_netlink_parms(): no params data found [ 53.073720][ T3636] team0: Port device team_slave_1 added [ 53.086566][ T3640] team0: Port device team_slave_1 added [ 53.143546][ T3648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.172791][ T3640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.180009][ T3640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.208434][ T3640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.222327][ T3648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.233110][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.240300][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.266418][ T3636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.277667][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.284966][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.293084][ T3642] device bridge_slave_0 entered promiscuous mode [ 53.303895][ T3640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.310932][ T3640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.337460][ T3640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.362733][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.369922][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.396231][ T3636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.407499][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.414657][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.422515][ T3642] device bridge_slave_1 entered promiscuous mode [ 53.441354][ T3648] team0: Port device team_slave_0 added [ 53.478181][ T3648] team0: Port device team_slave_1 added [ 53.508463][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.523269][ T3648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.530312][ T3648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.556314][ T3648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.585410][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.598524][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.605773][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.616800][ T3643] device bridge_slave_0 entered promiscuous mode [ 53.624547][ T3648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.631768][ T3648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.658046][ T3648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.678247][ T3636] device hsr_slave_0 entered promiscuous mode [ 53.685049][ T3636] device hsr_slave_1 entered promiscuous mode [ 53.699654][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.706920][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.717002][ T3643] device bridge_slave_1 entered promiscuous mode [ 53.737626][ T3640] device hsr_slave_0 entered promiscuous mode [ 53.744829][ T3640] device hsr_slave_1 entered promiscuous mode [ 53.752306][ T3640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.760551][ T3640] Cannot create hsr debugfs directory [ 53.805911][ T3642] team0: Port device team_slave_0 added [ 53.813736][ T3643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.844650][ T3642] team0: Port device team_slave_1 added [ 53.852084][ T3643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.868179][ T3648] device hsr_slave_0 entered promiscuous mode [ 53.875823][ T3648] device hsr_slave_1 entered promiscuous mode [ 53.882679][ T3648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.890350][ T3648] Cannot create hsr debugfs directory [ 53.940701][ T3643] team0: Port device team_slave_0 added [ 53.956122][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.966079][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.992571][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.009126][ T3643] team0: Port device team_slave_1 added [ 54.018995][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.025949][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.052578][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.069163][ T3650] Bluetooth: hci0: command tx timeout [ 54.133688][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.142579][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.169603][ T3643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.199852][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.206813][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.233121][ T3650] Bluetooth: hci1: command tx timeout [ 54.239075][ T3643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.298025][ T3642] device hsr_slave_0 entered promiscuous mode [ 54.305674][ T3642] device hsr_slave_1 entered promiscuous mode [ 54.313342][ T3642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.318190][ T48] Bluetooth: hci4: command tx timeout [ 54.321263][ T3650] Bluetooth: hci3: command tx timeout [ 54.326546][ T3644] Bluetooth: hci2: command tx timeout [ 54.337740][ T3642] Cannot create hsr debugfs directory [ 54.386909][ T3643] device hsr_slave_0 entered promiscuous mode [ 54.394398][ T3643] device hsr_slave_1 entered promiscuous mode [ 54.401838][ T3643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.409837][ T3643] Cannot create hsr debugfs directory [ 54.540445][ T3640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.563251][ T3640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.603735][ T3636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.613695][ T3640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.623884][ T3640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.672015][ T3636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.682183][ T3636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.705197][ T3636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.747616][ T3648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.777913][ T3648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.799618][ T3648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.830429][ T3648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.852502][ T3640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.883457][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.893132][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.903071][ T3642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.914245][ T3642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.924613][ T3642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.934788][ T3642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.945648][ T3640] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.979521][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.988101][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.997162][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.004474][ T3675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.013175][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.022429][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.030917][ T3675] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.037971][ T3675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.045882][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.082529][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.112623][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.126248][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.136994][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.146012][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.169750][ T3643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.197916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.209143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.224555][ T3640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.235401][ T3640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.249578][ T3643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.272994][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.281674][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.290851][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.300216][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.311861][ T3643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.326972][ T3636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.339382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.355011][ T3643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.386090][ T3636] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.407226][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.416091][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.455223][ T3648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.474087][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.484176][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.499094][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.506157][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.517383][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.526453][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.540561][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.547705][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.555729][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.565775][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.605406][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.614670][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.627072][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.635649][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.647059][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.655581][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.664137][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.673160][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.681510][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.693326][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.709775][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.728189][ T3640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.738659][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.746563][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.754968][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.764177][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.772137][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.782966][ T3648] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.803541][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.815941][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.824839][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.848581][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.858013][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.867213][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.874416][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.888494][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.897299][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.906624][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.913792][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.922258][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.957466][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.971429][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.984402][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.996443][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.003632][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.017052][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.026147][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.034907][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.042045][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.049984][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.058866][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.067568][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.076784][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.085900][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.095073][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.103414][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.118455][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.127207][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.148889][ T3644] Bluetooth: hci0: command tx timeout [ 56.169802][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.182747][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.191308][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.202845][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.211575][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.220583][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.229334][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.240661][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.249456][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.258048][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.266673][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.275225][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.283946][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.292390][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.304644][ T3648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.318490][ T3644] Bluetooth: hci1: command tx timeout [ 56.324620][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.336751][ T3640] device veth0_vlan entered promiscuous mode [ 56.350521][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.363342][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.371536][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.383226][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.390697][ T3644] Bluetooth: hci2: command tx timeout [ 56.396119][ T3644] Bluetooth: hci4: command tx timeout [ 56.401797][ T3639] Bluetooth: hci3: command tx timeout [ 56.408045][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.416486][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.424874][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.432749][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.465162][ T3636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.490539][ T3640] device veth1_vlan entered promiscuous mode [ 56.531708][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.569091][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.577167][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.616177][ T3643] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.631410][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.640995][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.650835][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.659231][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.667213][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.676811][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.690078][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.697197][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.711617][ T3636] device veth0_vlan entered promiscuous mode [ 56.740439][ T3640] device veth0_macvtap entered promiscuous mode [ 56.760544][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.769215][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.777584][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.787272][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.796880][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.806105][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.815499][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.824484][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.831634][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.840250][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.856635][ T3640] device veth1_macvtap entered promiscuous mode [ 56.885351][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.905703][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.913910][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.921990][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.930671][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.938969][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.947636][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.957863][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.966603][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.975464][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.984312][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.993362][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.001843][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.010382][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.018977][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.030601][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.050221][ T3640] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.059204][ T3640] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.067899][ T3640] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.077036][ T3640] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.092800][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.103391][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.112352][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.120057][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.132538][ T3648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.141958][ T3636] device veth1_vlan entered promiscuous mode [ 57.152478][ T3643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.164542][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.186207][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.218415][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.226776][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.241102][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.252772][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.264939][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.274370][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.309412][ T3636] device veth0_macvtap entered promiscuous mode [ 57.318051][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.327858][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.345109][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.366593][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.387042][ T3636] device veth1_macvtap entered promiscuous mode [ 57.414846][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.426058][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.458045][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.475507][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.487481][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.507312][ T3648] device veth0_vlan entered promiscuous mode [ 57.538184][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.552981][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.563337][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.576774][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.606701][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.621213][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.633560][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.646266][ T3648] device veth1_vlan entered promiscuous mode [ 57.670088][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.678040][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.686677][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.695715][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.705186][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.729806][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.738998][ T3636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.740127][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.747885][ T3636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.766525][ T3636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.776330][ T3636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.808447][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.816290][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.824083][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.873313][ T3648] device veth0_macvtap entered promiscuous mode [ 57.885596][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.901432][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.910463][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.919603][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.928113][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.947195][ T3648] device veth1_macvtap entered promiscuous mode [ 57.980044][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.983931][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.988239][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.005206][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.005331][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.021713][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.062105][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.072352][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.081555][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.110087][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.121869][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.131962][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.142802][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.160603][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.168108][ T3642] device veth0_vlan entered promiscuous mode [ 58.184660][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.198033][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.206125][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.214998][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.228741][ T3644] Bluetooth: hci0: command tx timeout [ 58.237783][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.250239][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.260198][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.270996][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.283752][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.294877][ T3648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.304590][ T3648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.315330][ T3648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.324261][ T3648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.340012][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.380169][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.388611][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.391889][ T3644] Bluetooth: hci1: command tx timeout [ 58.397499][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.412659][ T3643] device veth0_vlan entered promiscuous mode [ 58.426366][ T3642] device veth1_vlan entered promiscuous mode [ 58.447364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.456304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.467546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.469887][ T3644] Bluetooth: hci4: command tx timeout [ 58.475881][ T48] Bluetooth: hci3: command tx timeout [ 58.480399][ T3639] Bluetooth: hci2: command tx timeout [ 58.520869][ T3643] device veth1_vlan entered promiscuous mode [ 58.552376][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.576277][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.576581][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.586949][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.606685][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.609397][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.614628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 58.630774][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.642842][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.659208][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.673579][ T3642] device veth0_macvtap entered promiscuous mode [ 58.693741][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.711116][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.722185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.732836][ T3642] device veth1_macvtap entered promiscuous mode [ 58.765619][ T3643] device veth0_macvtap entered promiscuous mode [ 58.793389][ T3380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.807634][ T3380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.824138][ T3380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.871185][ T3643] device veth1_macvtap entered promiscuous mode [ 58.912907][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.924995][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.955337][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.996660][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.008225][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.022021][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.033878][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.054405][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.075648][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.114265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.125779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.135998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.146340][ T3720] mmap: syz.1.2 (3720) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.147776][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.173587][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.204300][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.218852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.227764][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.242162][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.263091][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.277359][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.293644][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.306243][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.324179][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.349222][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.383840][ C0] eth0: bad gso: type: 1, size: 1408 [ 59.393720][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.409226][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.438083][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.463325][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.507338][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.519340][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.535864][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.552935][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.565442][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.575162][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.590784][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.601116][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.616099][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.626890][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.643051][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.656135][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.666236][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.677146][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.695110][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.703316][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.719262][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.730763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 59.739369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.751779][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.763562][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.780931][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.796600][ T3642] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.810750][ T3642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.819874][ T3642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.829054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 59.837259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 59.845581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 59.853861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 59.862135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 59.870379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 59.944597][ T3642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.990054][ T3643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.004039][ T3643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.103282][ T3643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.112345][ T3643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.588905][ T48] Bluetooth: hci0: command tx timeout [ 60.594345][ T48] Bluetooth: hci1: command tx timeout [ 60.600283][ T3650] Bluetooth: hci4: command tx timeout [ 60.600361][ T3644] Bluetooth: hci2: command tx timeout [ 60.605665][ T3650] Bluetooth: hci3: command tx timeout [ 60.762422][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.863167][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.872812][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.872873][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.889851][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.898163][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.915669][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.951381][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.993334][ T3734] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 61.000755][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.094651][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.109707][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.139072][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.430078][ T3741] Zero length message leads to an empty skb [ 61.814030][ T3750] loop3: detected capacity change from 0 to 4096 [ 61.857297][ T3750] ======================================================= [ 61.857297][ T3750] WARNING: The mand mount option has been deprecated and [ 61.857297][ T3750] and is ignored by this kernel. Remove the mand [ 61.857297][ T3750] option from the mount to silence this warning. [ 61.857297][ T3750] ======================================================= [ 61.946098][ T3750] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 62.011707][ T3750] ntfs3: loop3: Failed to load $Extend. [ 62.696332][ T3753] loop0: detected capacity change from 0 to 40427 [ 62.706192][ T3754] loop4: detected capacity change from 0 to 40427 [ 62.751881][ T3753] F2FS-fs (loop0): Unrecognized mount option "errors=continue" or missing value [ 62.767993][ T3754] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 62.888466][ T152] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.138435][ T152] usb 4-1: Using ep0 maxpacket: 16 [ 63.191105][ T3760] loop1: detected capacity change from 0 to 32768 [ 63.236446][ T3760] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.18 (3760) [ 63.258692][ T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 63.317695][ T3760] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 63.354817][ T3760] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 63.488683][ T3760] BTRFS info (device loop1): setting nodatacow, compression disabled [ 63.497574][ T3760] BTRFS info (device loop1): setting datacow [ 63.511960][ T152] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 63.648530][ T152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.656965][ T152] usb 4-1: Product: syz [ 63.661398][ T152] usb 4-1: Manufacturer: syz [ 63.666207][ T152] usb 4-1: SerialNumber: syz [ 63.692906][ T152] usb 4-1: config 0 descriptor?? [ 64.208922][ T3760] BTRFS info (device loop1): doing ref verification [ 64.215638][ T3760] BTRFS info (device loop1): force clearing of disk cache [ 64.257978][ T152] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 64.342976][ T3760] BTRFS info (device loop1): turning off barriers [ 64.346174][ T3779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24'. [ 64.421785][ T152] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 64.450662][ T3760] BTRFS info (device loop1): enabling ssd optimizations [ 64.457713][ T3760] BTRFS info (device loop1): using spread ssd allocation scheme [ 64.568458][ T3760] BTRFS info (device loop1): not using ssd optimizations [ 64.575711][ T3760] BTRFS info (device loop1): not using spread ssd allocation scheme [ 64.778418][ T3682] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.354619][ T3775] sched: RT throttling activated [ 65.500808][ T3760] BTRFS info (device loop1): using free space tree [ 65.548578][ T152] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 65.609564][ T3803] loop4: detected capacity change from 0 to 16 [ 65.649674][ T3803] erofs: (device loop4): mounted with root inode @ nid 36. [ 65.653905][ T3760] BTRFS error (device loop1): open_ctree failed [ 65.668517][ T3682] usb 1-1: Using ep0 maxpacket: 8 [ 66.070947][ T3811] syz.4.26: attempt to access beyond end of device [ 66.070947][ T3811] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 66.088768][ T3682] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=94.07 [ 66.105176][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.127178][ T3682] usb 1-1: Product: syz [ 66.225088][ T3682] usb 1-1: Manufacturer: syz [ 66.270285][ T3682] usb 1-1: SerialNumber: syz [ 66.545443][ T3811] syz.4.26: attempt to access beyond end of device [ 66.545443][ T3811] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 66.832278][ T3682] usb 1-1: config 0 descriptor?? [ 66.913729][ T3682] comedi comedi0: Wrong number of endpoints [ 66.948126][ T3682] dt9812 1-1:0.0: driver 'dt9812' failed to auto-configure device. [ 66.980443][ T152] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 66.990311][ T152] em28xx 4-1:0.0: board has no eeprom [ 67.148374][ T152] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 67.156255][ T152] em28xx 4-1:0.0: dvb set to bulk mode. [ 67.168254][ T3714] em28xx 4-1:0.0: Binding DVB extension [ 67.217768][ T152] usb 4-1: USB disconnect, device number 2 [ 67.259916][ T152] em28xx 4-1:0.0: Disconnecting em28xx [ 67.277921][ T3825] loop3: detected capacity change from 0 to 256 [ 67.316771][ T3824] loop2: detected capacity change from 0 to 1024 [ 67.334597][ T3825] FAT-fs (loop3): Directory bread(block 1285) failed [ 67.406595][ T3714] em28xx 4-1:0.0: Registering input extension [ 67.419861][ T3825] FAT-fs (loop3): Directory bread(block 1285) failed [ 67.427051][ T3825] FAT-fs (loop3): Directory bread(block 1285) failed [ 67.434651][ T26] audit: type=1800 audit(1723508500.277:2): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.31" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 67.459064][ T152] em28xx 4-1:0.0: Closing input extension [ 67.478702][ T3825] FAT-fs (loop3): Directory bread(block 1285) failed [ 67.495780][ T152] em28xx 4-1:0.0: Freeing device [ 67.514729][ T3825] FAT-fs (loop3): Directory bread(block 1285) failed [ 67.526987][ T3825] FAT-fs (loop3): Directory bread(block 1285) failed [ 67.541972][ T3825] FAT-fs (loop3): Directory bread(block 1285) failed [ 67.565323][ T3825] FAT-fs (loop3): Directory bread(block 1285) failed [ 67.580291][ T3825] FAT-fs (loop3): Directory bread(block 1285) failed [ 67.587310][ T3825] FAT-fs (loop3): Directory bread(block 1285) failed [ 68.759675][ T3804] usb 1-1: USB disconnect, device number 2 [ 68.837258][ T3843] loop2: detected capacity change from 0 to 2048 [ 68.885090][ T3843] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.956296][ T26] audit: type=1800 audit(1723508501.807:3): pid=3843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.38" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 69.023099][ T3828] loop1: detected capacity change from 0 to 32768 [ 69.064780][ T3828] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.34 (3828) [ 69.127560][ T3828] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.155059][ T3828] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 69.175382][ T3828] BTRFS info (device loop1): using free space tree [ 69.276429][ T3858] overlayfs: failed to resolve './file1': -2 [ 70.157262][ T3879] loop3: detected capacity change from 0 to 256 [ 70.176457][ T3828] BTRFS info (device loop1): enabling ssd optimizations [ 70.300666][ T3879] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 70.749659][ T3889] syz.3.46: attempt to access beyond end of device [ 70.749659][ T3889] loop3: rw=524288, sector=524408, nr_sectors = 1 limit=256 [ 70.802409][ T3863] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 70.818960][ T3636] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.942009][ T3889] syz.3.46: attempt to access beyond end of device [ 70.942009][ T3889] loop3: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 71.239093][ T26] audit: type=1800 audit(1723508504.097:4): pid=3889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.46" name="file1" dev="loop3" ino=1048596 res=0 errno=0 [ 71.353783][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.360961][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.725374][ T3869] loop4: detected capacity change from 0 to 32768 [ 71.847843][ T3869] [ 71.847843][ T3869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.847843][ T3869] [ 71.919591][ T3880] loop2: detected capacity change from 0 to 32768 [ 71.956276][ T3880] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.47 (3880) [ 71.968059][ T3869] [ 71.968059][ T3869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.968059][ T3869] [ 72.001742][ T3901] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 72.035732][ T3869] [ 72.035732][ T3869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.035732][ T3869] [ 72.053179][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.099471][ T134] [ 72.099471][ T134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.099471][ T134] [ 72.120708][ T3880] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 72.157850][ T3880] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 72.260979][ T3903] find_entry called with index = 0 [ 72.267394][ T3903] read_mapping_page failed! [ 72.272270][ T3903] ERROR: (device loop4): txCommit: [ 72.272270][ T3903] [ 72.486645][ T3880] BTRFS info (device loop2): using free space tree [ 72.499159][ T3906] loop1: detected capacity change from 0 to 16 [ 72.562889][ T3906] erofs: (device loop1): mounted with root inode @ nid 36. [ 72.573488][ T3901] device bridge_slave_1 left promiscuous mode [ 72.596928][ T3863] [ 72.596928][ T3863] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.596928][ T3863] [ 72.602578][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.617197][ T3863] [ 72.617197][ T3863] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.617197][ T3863] [ 72.743772][ T133] [ 72.743772][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.743772][ T133] [ 72.773251][ T3642] [ 72.773251][ T3642] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.773251][ T3642] [ 72.820052][ T3642] [ 72.820052][ T3642] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.820052][ T3642] [ 72.918442][ T3917] syz.1.53: attempt to access beyond end of device [ 72.918442][ T3917] loop1: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 73.025325][ T3917] syz.1.53: attempt to access beyond end of device [ 73.025325][ T3917] loop1: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 73.124050][ T3880] BTRFS error (device loop2): open_ctree failed [ 73.333459][ T3928] Bluetooth: MGMT ver 1.22 [ 74.270119][ T3933] overlayfs: failed to resolve './file1': -2 [ 74.435565][ T3938] loop3: detected capacity change from 0 to 1764 [ 74.504966][ T3942] loop0: detected capacity change from 0 to 512 [ 74.525355][ T3942] journal_path: Lookup failure for './bus' [ 74.549610][ T3628] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.561886][ T3942] EXT4-fs: error: could not find journal device path [ 74.652660][ T3817] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.246664][ T3938] loop3: detected capacity change from 0 to 32768 [ 75.294893][ T3938] [ 75.294893][ T3938] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.294893][ T3938] [ 75.436349][ T3938] [ 75.436349][ T3938] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.436349][ T3938] [ 75.476053][ T3938] [ 75.476053][ T3938] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.476053][ T3938] [ 75.572424][ T3938] [ 75.572424][ T3938] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.572424][ T3938] [ 75.636170][ T3947] loop2: detected capacity change from 0 to 40427 [ 75.646135][ T3938] [ 75.646135][ T3938] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.646135][ T3938] [ 75.678740][ T3947] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 75.686604][ T3947] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.700681][ T133] [ 75.700681][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.700681][ T133] [ 75.715341][ T3962] [ 75.715341][ T3962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.715341][ T3962] [ 75.725958][ T3947] F2FS-fs (loop2): invalid crc value [ 75.734007][ T3962] [ 75.734007][ T3962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.734007][ T3962] [ 75.829580][ T3958] [ 75.829580][ T3958] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.829580][ T3958] [ 75.958026][ T3958] [ 75.958026][ T3958] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.958026][ T3958] [ 76.050746][ T3958] [ 76.050746][ T3958] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.050746][ T3958] [ 76.086186][ T133] [ 76.086186][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.086186][ T133] [ 76.435546][ T3640] [ 76.435546][ T3640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.435546][ T3640] [ 76.457791][ T3947] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.469872][ T14] cfg80211: failed to load regulatory.db [ 76.504337][ T3640] [ 76.504337][ T3640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.504337][ T3640] [ 76.959113][ T3947] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 76.962640][ T3988] loop3: detected capacity change from 0 to 256 [ 76.966395][ T3947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.296962][ T3988] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 79.398226][ T4000] syz.3.66: attempt to access beyond end of device [ 79.398226][ T4000] loop3: rw=524288, sector=524408, nr_sectors = 1 limit=256 [ 79.413238][ T4000] syz.3.66: attempt to access beyond end of device [ 79.413238][ T4000] loop3: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 79.426922][ T26] audit: type=1800 audit(1723508512.287:5): pid=4000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="file1" dev="loop3" ino=1048598 res=0 errno=0 [ 79.449878][ T4000] syz.3.66: attempt to access beyond end of device [ 79.449878][ T4000] loop3: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 79.468931][ T4000] syz.3.66: attempt to access beyond end of device [ 79.468931][ T4000] loop3: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 79.548525][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.692569][ T4019] loop2: detected capacity change from 0 to 16 [ 79.765729][ T4019] erofs: (device loop2): mounted with root inode @ nid 36. [ 80.021059][ T4022] loop1: detected capacity change from 0 to 256 [ 80.618573][ T14] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 80.653614][ T4025] syz.2.74: attempt to access beyond end of device [ 80.653614][ T4025] loop2: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 80.682183][ T14] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 80.704875][ T14] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 80.715166][ T4025] syz.2.74: attempt to access beyond end of device [ 80.715166][ T4025] loop2: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 80.736730][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.759761][ T4008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.282518][ T14] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 81.306554][ T14] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input6 [ 81.382867][ T14] usb 1-1: USB disconnect, device number 3 [ 81.398406][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 81.986231][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 82.027862][ T4049] loop3: detected capacity change from 0 to 256 [ 82.119238][ T26] audit: type=1804 audit(1723508514.947:6): pid=4049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.80" name="/newroot/18/file1/file0" dev="loop3" ino=1048599 res=1 errno=0 [ 83.979713][ T3805] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.258575][ T3805] usb 1-1: Using ep0 maxpacket: 16 [ 84.400410][ T3805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.428664][ T3682] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.491946][ T3805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.656345][ T3805] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 84.764581][ T3639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.774778][ T3639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.784220][ T3639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.795894][ T3805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.805640][ T3639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.828561][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.840280][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.851121][ T3805] usb 1-1: config 0 descriptor?? [ 84.856568][ T3682] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 84.865739][ T3639] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.873590][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.878456][ T3639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.927448][ T3682] usb 3-1: config 0 descriptor?? [ 85.696096][ T3805] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 85.723821][ T3805] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 85.744227][ T3805] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 85.774611][ T3805] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 85.803083][ T3805] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 85.924116][ T4106] loop3: detected capacity change from 0 to 16 [ 85.938771][ T4106] erofs: (device loop3): mounted with root inode @ nid 36. [ 85.959982][ T3682] isku 0003:1E7D:319C.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 85.966710][ T4087] chnl_net:caif_netlink_parms(): no params data found [ 85.978580][ T3805] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 86.148677][ T3805] cp2112 0003:10C4:EA90.0001: error requesting version [ 86.195347][ T3805] cp2112: probe of 0003:10C4:EA90.0001 failed with error -5 [ 86.297676][ T4113] syz.3.94: attempt to access beyond end of device [ 86.297676][ T4113] loop3: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 86.354087][ T3805] usb 1-1: USB disconnect, device number 4 [ 86.411039][ T3682] usb 3-1: USB disconnect, device number 2 [ 86.441961][ T4087] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.448547][ T4113] syz.3.94: attempt to access beyond end of device [ 86.448547][ T4113] loop3: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 86.451104][ T4087] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.506657][ T4087] device bridge_slave_0 entered promiscuous mode [ 86.532556][ T4087] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.556592][ T4087] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.571045][ T4087] device bridge_slave_1 entered promiscuous mode [ 86.641438][ T4118] loop1: detected capacity change from 0 to 256 [ 86.686680][ T4087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.698911][ T4118] FAT-fs (loop1): Directory bread(block 64) failed [ 86.705553][ T4118] FAT-fs (loop1): Directory bread(block 65) failed [ 86.719818][ T4087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.733066][ T4118] FAT-fs (loop1): Directory bread(block 66) failed [ 86.745613][ T4118] FAT-fs (loop1): Directory bread(block 67) failed [ 86.778512][ T4118] FAT-fs (loop1): Directory bread(block 68) failed [ 86.786409][ T4118] FAT-fs (loop1): Directory bread(block 69) failed [ 86.793544][ T4118] FAT-fs (loop1): Directory bread(block 70) failed [ 86.800329][ T4118] FAT-fs (loop1): Directory bread(block 71) failed [ 86.806068][ T4087] team0: Port device team_slave_0 added [ 86.806921][ T4118] FAT-fs (loop1): Directory bread(block 72) failed [ 86.826924][ T4118] FAT-fs (loop1): Directory bread(block 73) failed [ 86.835738][ T4087] team0: Port device team_slave_1 added [ 86.887687][ T4087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.904511][ T4087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.958438][ T3639] Bluetooth: hci5: command tx timeout [ 87.077272][ T4087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.162565][ T4087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.853380][ T4087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.958924][ T4087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.970585][ T4123] tipc: Started in network mode [ 88.975492][ T4123] tipc: Node identity ac1414aa, cluster identity 4711 [ 88.983728][ T4123] tipc: New replicast peer: 100.1.1.1 [ 88.989640][ T4123] tipc: Enabled bearer , priority 10 [ 89.028502][ T3639] Bluetooth: hci5: command tx timeout [ 89.088841][ T46] kworker/u4:3: attempt to access beyond end of device [ 89.088841][ T46] loop1: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 89.211843][ T46] kworker/u4:3: attempt to access beyond end of device [ 89.211843][ T46] loop1: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 89.238642][ T4087] device hsr_slave_0 entered promiscuous mode [ 89.255676][ T4087] device hsr_slave_1 entered promiscuous mode [ 89.276438][ T4087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.302029][ T4087] Cannot create hsr debugfs directory [ 89.312398][ T46] kworker/u4:3: attempt to access beyond end of device [ 89.312398][ T46] loop1: rw=1, sector=1960, nr_sectors = 12544 limit=256 [ 89.413261][ T46] kworker/u4:3: attempt to access beyond end of device [ 89.413261][ T46] loop1: rw=1, sector=14504, nr_sectors = 3640 limit=256 [ 89.505650][ T46] kworker/u4:3: attempt to access beyond end of device [ 89.505650][ T46] loop1: rw=1, sector=18144, nr_sectors = 15656 limit=256 [ 89.802153][ T4136] loop3: detected capacity change from 0 to 256 [ 90.141816][ T4087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.202286][ T3700] tipc: Node number set to 2886997162 [ 90.505872][ T4087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.539475][ T4130] loop2: detected capacity change from 0 to 32768 [ 90.597990][ T4130] [ 90.597990][ T4130] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.597990][ T4130] [ 90.651717][ T4130] read_mapping_page failed! [ 90.702073][ T4130] ERROR: (device loop2): txCommit: [ 90.702073][ T4130] [ 90.723929][ T4087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.942102][ T4143] find_entry called with index = 0 [ 90.951606][ T4087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.969423][ T4143] read_mapping_page failed! [ 90.974088][ T4143] ERROR: (device loop2): txCommit: [ 90.974088][ T4143] [ 91.086770][ T4143] jfs_create: dtSearch returned -17 [ 91.122656][ T3644] Bluetooth: hci5: command tx timeout [ 91.486720][ T3996] [ 91.486720][ T3996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.486720][ T3996] [ 91.516800][ T3996] [ 91.516800][ T3996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.516800][ T3996] [ 91.546632][ T4087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.561423][ T133] [ 91.561423][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.561423][ T133] [ 91.587219][ T4087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.599962][ T3643] [ 91.599962][ T3643] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.599962][ T3643] [ 91.614512][ T4087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.626096][ T3643] [ 91.626096][ T3643] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.626096][ T3643] [ 91.660706][ T4087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.919049][ T4087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.964035][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.990390][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.006958][ T4163] loop0: detected capacity change from 0 to 16 [ 92.010162][ T4087] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.041360][ T4157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 92.058247][ T4163] erofs: (device loop0): mounted with root inode @ nid 36. [ 92.084120][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.095379][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.106318][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.114042][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.122320][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.142047][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.176521][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.183744][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.274223][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.449001][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.458057][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.465056][ T4172] syz.0.112: attempt to access beyond end of device [ 92.465056][ T4172] loop0: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 92.497247][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.533975][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.580334][ T4172] syz.0.112: attempt to access beyond end of device [ 92.580334][ T4172] loop0: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 92.580818][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.664671][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.695044][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.717565][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.742997][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.808021][ T4087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.836991][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.863681][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.883173][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.188617][ T3644] Bluetooth: hci5: command tx timeout [ 93.478014][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.497298][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.526753][ T4087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.018482][ T3682] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.126338][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.146178][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.200821][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.223600][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.240820][ T4087] device veth0_vlan entered promiscuous mode [ 95.349004][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.356738][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.387452][ T4087] device veth1_vlan entered promiscuous mode [ 95.644272][ T4087] device veth0_macvtap entered promiscuous mode [ 95.698612][ T4087] device veth1_macvtap entered promiscuous mode [ 95.795909][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.824697][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.855058][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.894877][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.928190][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.984655][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.021094][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.094680][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.140068][ T4215] 9pnet: Could not find request transport: 0xffffffffffffffff [ 96.180766][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.223924][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.276848][ T4087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.338452][ T3682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.352837][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.358349][ T3682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.371590][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.388655][ T3682] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 96.404714][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.419386][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.435328][ T3682] usb 1-1: config 0 descriptor?? [ 96.437899][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.457790][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.467224][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.496027][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.522361][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.548849][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.559411][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.571617][ T4228] loop1: detected capacity change from 0 to 16 [ 96.585010][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.594061][ T4228] erofs: (device loop1): mounted with root inode @ nid 36. [ 96.596993][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.620532][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.631047][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.643152][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.653373][ T4087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.664382][ T4087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.680043][ T4087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.691360][ T4087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.700851][ T4087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.718509][ T4087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.764594][ T4087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.804224][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.813441][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.823323][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.039873][ T4235] syz.1.130: attempt to access beyond end of device [ 97.039873][ T4235] loop1: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 97.636984][ T4235] syz.1.130: attempt to access beyond end of device [ 97.636984][ T4235] loop1: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 97.652281][ T3682] usbhid 1-1:0.0: can't add hid device: -71 [ 97.662715][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.663148][ T3682] usbhid: probe of 1-1:0.0 failed with error -71 [ 97.679638][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.702290][ T3682] usb 1-1: USB disconnect, device number 5 [ 97.755104][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.810680][ T4051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.841116][ T4051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.871079][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.104153][ T4277] loop2: detected capacity change from 0 to 256 [ 100.228689][ T4277] FAT-fs (loop2): Directory bread(block 64) failed [ 100.239799][ T4277] FAT-fs (loop2): Directory bread(block 65) failed [ 100.247125][ T4277] FAT-fs (loop2): Directory bread(block 66) failed [ 100.289421][ T4277] FAT-fs (loop2): Directory bread(block 67) failed [ 100.334871][ T4277] FAT-fs (loop2): Directory bread(block 68) failed [ 100.384611][ T4277] FAT-fs (loop2): Directory bread(block 69) failed [ 100.398795][ T4277] FAT-fs (loop2): Directory bread(block 70) failed [ 100.405458][ T4277] FAT-fs (loop2): Directory bread(block 71) failed [ 100.428509][ T4277] FAT-fs (loop2): Directory bread(block 72) failed [ 100.435181][ T4277] FAT-fs (loop2): Directory bread(block 73) failed [ 100.456660][ T26] audit: type=1326 audit(1723508533.307:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4280 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc71799f9 code=0x7ffc0000 [ 100.537339][ T26] audit: type=1326 audit(1723508533.337:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4280 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc71799f9 code=0x7ffc0000 [ 100.710174][ T26] audit: type=1326 audit(1723508533.337:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4280 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fcbc71799f9 code=0x7ffc0000 [ 100.733199][ T26] audit: type=1326 audit(1723508533.337:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4280 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc71799f9 code=0x7ffc0000 [ 101.055480][ T26] audit: type=1326 audit(1723508533.337:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4280 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc71799f9 code=0x7ffc0000 [ 101.115855][ T4273] loop3: detected capacity change from 0 to 32768 [ 101.190658][ T4273] [ 101.190658][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.190658][ T4273] [ 101.242666][ T4285] device pim6reg1 entered promiscuous mode [ 101.337109][ T4273] read_mapping_page failed! [ 101.396352][ T4273] ERROR: (device loop3): txCommit: [ 101.396352][ T4273] [ 101.472854][ T4273] find_entry called with index = 0 [ 101.478169][ T4273] read_mapping_page failed! [ 101.507918][ T4273] ERROR: (device loop3): txCommit: [ 101.507918][ T4273] [ 101.540715][ T4273] jfs_create: dtSearch returned -17 [ 101.655541][ T4051] [ 101.655541][ T4051] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.655541][ T4051] [ 101.670321][ T4051] [ 101.670321][ T4051] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.670321][ T4051] [ 101.687421][ T3640] [ 101.687421][ T3640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.687421][ T3640] [ 101.705423][ T3640] [ 101.705423][ T3640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.705423][ T3640] [ 101.725978][ T133] [ 101.725978][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.725978][ T133] [ 101.753605][ T133] ================================================================== [ 101.761797][ T133] BUG: KASAN: use-after-free in txEnd+0x350/0x560 [ 101.768230][ T133] Write of size 8 at addr ffff88807cfec040 by task jfsCommit/133 [ 101.775966][ T133] [ 101.778308][ T133] CPU: 0 PID: 133 Comm: jfsCommit Not tainted 6.1.104-syzkaller #0 [ 101.786212][ T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 101.796283][ T133] Call Trace: [ 101.799581][ T133] [ 101.802514][ T133] dump_stack_lvl+0x1e3/0x2cb [ 101.807215][ T133] ? nf_tcp_handle_invalid+0x642/0x642 [ 101.812778][ T133] ? panic+0x764/0x764 [ 101.816853][ T133] ? _printk+0xd1/0x111 [ 101.821112][ T133] ? __virt_addr_valid+0x17f/0x530 [ 101.826254][ T133] ? __virt_addr_valid+0x17f/0x530 [ 101.831377][ T133] print_report+0x15f/0x4f0 [ 101.835886][ T133] ? __virt_addr_valid+0x17f/0x530 [ 101.841018][ T133] ? __virt_addr_valid+0x17f/0x530 [ 101.846144][ T133] ? __virt_addr_valid+0x45b/0x530 [ 101.851279][ T133] ? __phys_addr+0xb6/0x170 [ 101.855786][ T133] ? txEnd+0x350/0x560 [ 101.859915][ T133] kasan_report+0x136/0x160 [ 101.864410][ T133] ? txEnd+0x350/0x560 [ 101.868555][ T133] kasan_check_range+0x27f/0x290 [ 101.873477][ T133] txEnd+0x350/0x560 [ 101.877359][ T133] jfs_lazycommit+0x610/0xb60 [ 101.882191][ T133] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 101.888070][ T133] ? lockdep_hardirqs_on+0x94/0x130 [ 101.893251][ T133] ? txFreelock+0x580/0x580 [ 101.897734][ T133] ? do_task_dead+0xd0/0xd0 [ 101.902223][ T133] ? _raw_spin_unlock+0x40/0x40 [ 101.907065][ T133] ? __kthread_parkme+0x168/0x1c0 [ 101.912082][ T133] kthread+0x28d/0x320 [ 101.916259][ T133] ? txFreelock+0x580/0x580 [ 101.920766][ T133] ? kthread_blkcg+0xd0/0xd0 [ 101.925449][ T133] ret_from_fork+0x1f/0x30 [ 101.929874][ T133] [ 101.932885][ T133] [ 101.935196][ T133] Allocated by task 4273: [ 101.939505][ T133] kasan_set_track+0x4b/0x70 [ 101.944083][ T133] __kasan_kmalloc+0x97/0xb0 [ 101.948654][ T133] lmLogOpen+0x314/0x1030 [ 101.953029][ T133] jfs_mount_rw+0xe3/0x640 [ 101.957452][ T133] jfs_fill_super+0x67d/0xc40 [ 101.962124][ T133] mount_bdev+0x2c9/0x3f0 [ 101.966465][ T133] legacy_get_tree+0xeb/0x180 [ 101.971142][ T133] vfs_get_tree+0x88/0x270 [ 101.975551][ T133] do_new_mount+0x2ba/0xb40 [ 101.980076][ T133] __se_sys_mount+0x2d5/0x3c0 [ 101.984753][ T133] do_syscall_64+0x3b/0xb0 [ 101.989164][ T133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.995136][ T133] [ 101.997441][ T133] Freed by task 3640: [ 102.001399][ T133] kasan_set_track+0x4b/0x70 [ 102.005978][ T133] kasan_save_free_info+0x27/0x40 [ 102.010986][ T133] ____kasan_slab_free+0xd6/0x120 [ 102.015992][ T133] __kmem_cache_free+0x25c/0x3c0 [ 102.021009][ T133] lmLogClose+0x29d/0x530 [ 102.025412][ T133] jfs_umount+0x298/0x370 [ 102.029903][ T133] jfs_put_super+0x86/0x180 [ 102.034391][ T133] generic_shutdown_super+0x130/0x340 [ 102.039746][ T133] kill_block_super+0x7a/0xe0 [ 102.044495][ T133] deactivate_locked_super+0xa0/0x110 [ 102.049870][ T133] cleanup_mnt+0x490/0x520 [ 102.054271][ T133] task_work_run+0x246/0x300 [ 102.058849][ T133] exit_to_user_mode_loop+0xde/0x100 [ 102.064126][ T133] exit_to_user_mode_prepare+0xb1/0x140 [ 102.069756][ T133] syscall_exit_to_user_mode+0x60/0x270 [ 102.075293][ T133] do_syscall_64+0x47/0xb0 [ 102.079701][ T133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.085681][ T133] [ 102.088092][ T133] The buggy address belongs to the object at ffff88807cfec000 [ 102.088092][ T133] which belongs to the cache kmalloc-1k of size 1024 [ 102.102243][ T133] The buggy address is located 64 bytes inside of [ 102.102243][ T133] 1024-byte region [ffff88807cfec000, ffff88807cfec400) [ 102.116019][ T133] [ 102.118456][ T133] The buggy address belongs to the physical page: [ 102.124962][ T133] page:ffffea0001f3fa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cfe8 [ 102.135096][ T133] head:ffffea0001f3fa00 order:3 compound_mapcount:0 compound_pincount:0 [ 102.143399][ T133] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 102.151377][ T133] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888012841dc0 [ 102.160038][ T133] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 102.168755][ T133] page dumped because: kasan: bad access detected [ 102.175250][ T133] page_owner tracks the page as allocated [ 102.180949][ T133] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4051, tgid 4051 (kworker/u4:14), ts 101122675905, free_ts 101019182692 [ 102.201947][ T133] post_alloc_hook+0x18d/0x1b0 [ 102.206784][ T133] get_page_from_freelist+0x322e/0x33b0 [ 102.212322][ T133] __alloc_pages+0x28d/0x770 [ 102.216892][ T133] alloc_slab_page+0x6a/0x150 [ 102.221560][ T133] new_slab+0x84/0x2d0 [ 102.225647][ T133] ___slab_alloc+0xc20/0x1270 [ 102.230309][ T133] __kmem_cache_alloc_node+0x19f/0x260 [ 102.235755][ T133] __kmalloc+0xa1/0x230 [ 102.239895][ T133] ieee802_11_parse_elems_full+0xc4/0x1380 [ 102.245783][ T133] ieee80211_bss_info_update+0x99f/0xf00 [ 102.251401][ T133] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2dd0 [ 102.257563][ T133] ieee80211_iface_work+0x7aa/0xce0 [ 102.262901][ T133] process_one_work+0x8a9/0x11d0 [ 102.268002][ T133] worker_thread+0xa47/0x1200 [ 102.272665][ T133] kthread+0x28d/0x320 [ 102.276735][ T133] ret_from_fork+0x1f/0x30 [ 102.281168][ T133] page last free stack trace: [ 102.285838][ T133] free_unref_page_prepare+0xf63/0x1120 [ 102.291480][ T133] free_unref_page+0x33/0x3e0 [ 102.296150][ T133] __unfreeze_partials+0x1b7/0x210 [ 102.301268][ T133] put_cpu_partial+0x17b/0x250 [ 102.306037][ T133] qlist_free_all+0x76/0xe0 [ 102.310625][ T133] kasan_quarantine_reduce+0x156/0x170 [ 102.316074][ T133] __kasan_slab_alloc+0x1f/0x70 [ 102.320909][ T133] slab_post_alloc_hook+0x52/0x3a0 [ 102.326040][ T133] kmem_cache_alloc_lru+0x10c/0x2d0 [ 102.331234][ T133] sock_alloc_inode+0x24/0xc0 [ 102.335896][ T133] new_inode_pseudo+0x61/0x1d0 [ 102.340654][ T133] __sock_create+0x11f/0x910 [ 102.345229][ T133] __sys_socket+0x136/0x3a0 [ 102.349718][ T133] __x64_sys_socket+0x76/0x80 [ 102.354380][ T133] do_syscall_64+0x3b/0xb0 [ 102.358781][ T133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.364666][ T133] [ 102.366972][ T133] Memory state around the buggy address: [ 102.372618][ T133] ffff88807cfebf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.380656][ T133] ffff88807cfebf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.388868][ T133] >ffff88807cfec000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.396906][ T133] ^ [ 102.403035][ T133] ffff88807cfec080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.411092][ T133] ffff88807cfec100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.419135][ T133] ================================================================== [ 102.491410][ T133] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.498638][ T133] CPU: 0 PID: 133 Comm: jfsCommit Not tainted 6.1.104-syzkaller #0 [ 102.506545][ T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 102.516619][ T133] Call Trace: [ 102.519910][ T133] [ 102.522844][ T133] dump_stack_lvl+0x1e3/0x2cb [ 102.527540][ T133] ? nf_tcp_handle_invalid+0x642/0x642 [ 102.533113][ T133] ? panic+0x764/0x764 [ 102.537231][ T133] ? vscnprintf+0x59/0x80 [ 102.541616][ T133] panic+0x318/0x764 [ 102.545524][ T133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 102.551779][ T133] ? check_panic_on_warn+0x1d/0xa0 [ 102.556902][ T133] ? memcpy_page_flushcache+0xfc/0xfc [ 102.562288][ T133] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 102.568281][ T133] ? _raw_spin_unlock+0x40/0x40 [ 102.573144][ T133] check_panic_on_warn+0x7e/0xa0 [ 102.578190][ T133] ? txEnd+0x350/0x560 [ 102.582288][ T133] end_report+0x66/0x110 [ 102.586548][ T133] kasan_report+0x143/0x160 [ 102.591070][ T133] ? txEnd+0x350/0x560 [ 102.595150][ T133] kasan_check_range+0x27f/0x290 [ 102.600282][ T133] txEnd+0x350/0x560 [ 102.604192][ T133] jfs_lazycommit+0x610/0xb60 [ 102.608877][ T133] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 102.614786][ T133] ? lockdep_hardirqs_on+0x94/0x130 [ 102.620087][ T133] ? txFreelock+0x580/0x580 [ 102.624601][ T133] ? do_task_dead+0xd0/0xd0 [ 102.629139][ T133] ? _raw_spin_unlock+0x40/0x40 [ 102.634004][ T133] ? __kthread_parkme+0x168/0x1c0 [ 102.639065][ T133] kthread+0x28d/0x320 [ 102.643145][ T133] ? txFreelock+0x580/0x580 [ 102.647656][ T133] ? kthread_blkcg+0xd0/0xd0 [ 102.652255][ T133] ret_from_fork+0x1f/0x30 [ 102.656690][ T133] [ 102.660069][ T133] Kernel Offset: disabled [ 102.664389][ T133] Rebooting in 86400 seconds..