last executing test programs: 11.639025368s ago: executing program 1 (id=31): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000812b04210000"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="08000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000020000000400000009"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001700)={{r3, 0xffffffffffffffff}, &(0x7f0000001680), &(0x7f00000016c0)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r5) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000380)={0x1, 0xfffffffd, 0x0, 0xebb, 0x9, 0x0, 0x9}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 11.070818332s ago: executing program 1 (id=35): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x78, r2, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lirc_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x4000000}, 0x0) 10.930825426s ago: executing program 2 (id=36): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3e, 0x0, 0x0) 10.901198927s ago: executing program 1 (id=37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) move_pages(0x0, 0x41, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002340), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 9.841049163s ago: executing program 1 (id=39): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000001080)={&(0x7f0000000c40)={{@any, 0x7}, {@host, 0x81}, 0x400, "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"}, 0x418, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) 9.703787627s ago: executing program 2 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0xffffffffffffff1d) syz_io_uring_setup(0x46f9, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x2, 0x30d, 0x0, r0}, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x0) io_uring_setup(0x556e, 0x0) syz_io_uring_setup(0x6283, &(0x7f0000000140)={0x0, 0xa50c, 0x20, 0x0, 0x10365}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x0) mount(&(0x7f0000003100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000003000)='./dir0\x00', &(0x7f0000003200)='ceph\x00', 0x0, 0x0) 8.413554169s ago: executing program 2 (id=43): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a810ff0800459900180067000009329078ac1414aaac1e03010f453e4700000000102683d69ba1905f3516d17f5b14347ef6a199c760c2313f3f67bff151f550b575dd39685d8d1f9cc6efe88675fefb66e03a300c08f330046b86"], 0x2e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x84, @empty, 0x4e1c, 0x3, 'wlc\x00', 0x39, 0x80, 0x2}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x50) close(0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r3) r4 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='wchan\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r1, &(0x7f00000000c0)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000000c0)='1', 0x1) socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000180)={{0xc10a020f6854ab13, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x2008, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 7.319770726s ago: executing program 0 (id=47): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x2202, 0x0) iopl(0x3) syz_clone3(0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r1, &(0x7f0000000000)="64000000420001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002520702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="32d540c7f2102766f2186bf787ff", 0x0, 0x2000005, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.011711394s ago: executing program 4 (id=49): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000001010034002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="fa"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(0xffffffffffffffff, 0x400452c8, &(0x7f0000000000)="00000000000000000000000000000074ef9e7a0a3f") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x102, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00', 0x7f00}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000000)={0x0, 0xb, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0}) 5.867877593s ago: executing program 0 (id=52): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e05cb0720"], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002dbd7000fedbdf25110000000500120001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0xf4, 0x0, 0x0, 0x7, 0xfffe, r3, 0x0}]) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x8000], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$usbfs(0x0, 0xb, 0x101301) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff004) 5.712251557s ago: executing program 4 (id=53): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x81}, 0x1c) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x6) 5.375348645s ago: executing program 2 (id=54): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1, @private2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="b8", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$binfmt_script(r6, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000001b00), 0xfffffd9d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 5.345244206s ago: executing program 1 (id=55): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000020fd07040040000102030109027c00030104808109040000"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000002000010000000000fcdbdf250a0000000000000000000000080017e288c246d36f573dbd225cac1b88c623c72ce3896d9d2530330341ba"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0xfffffffffffffffe, 0x4, 0x0, 0xfffffff5, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x4, 0x0, 0x4, 0xff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000001800)=""/216, 0xd8}, {&(0x7f0000001900)=""/136, 0x88}, {&(0x7f00000019c0)=""/62, 0x3e}], 0x4, &(0x7f0000001a40)=""/189, 0xbd}, 0x1ff}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001b80)=""/106, 0x6a}, {&(0x7f0000001c00)=""/151, 0x97}, {&(0x7f0000001cc0)=""/157, 0x9d}, {&(0x7f0000001d80)=""/69, 0x45}, {0x0}], 0x5, &(0x7f0000001f40)=""/98, 0x62}, 0x2}], 0x2, 0x40010180, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x2, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_usb_connect$uac3(0x5, 0x116, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xdd01556ae31b91e2, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x104, 0x3, 0x1, 0x8c, 0x0, 0x80, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x70, 0xfffffff8}, [@power_domain={0xc, 0x24, 0x10, 0x1, 0x7, 0x2, 0x0, "9c5457"}, @output_terminal={0x13, 0x24, 0x3, 0x5, 0x304, 0x4, 0x1, 0x5, 0xffffffff, 0x4, 0x6, 0x1}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x100, 0x3, 0x3, 0x4, 0xbc, 0x40, 0x6a, 0x7}, @multiply_unit={0xb, 0x24, 0xd, 0x6a, 0x4c, 0x2, 0x9}, @feature_unit={0x15, 0x24, 0x7, 0x6, 0x3, [0x4, 0x2, 0x4, 0xd]}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x303, 0x3, 0x4, 0x50, 0x47, 0x4, 0x7, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x8, 0x8, {0xa, 0x25, 0x25, 0x8, 0x24, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x60, 0x2, 0x3, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x894, 0x0, 0x8, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xff}, @as_header={0x17, 0x24, 0x1, 0x4, 0x140, 0x4, 0x5, 0x5, 0x2, 0xa, 0x6e}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x10, 0x6, 0x5, {0xa, 0x25, 0x25, 0xfffffffa, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000002140)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0x4, 0x2, 0x1, 0xff, 0x19}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x41, 0x4, 0x10000e, 0x9, 0x0, 0x100000000, 0x0, 0x6}, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 5.103712792s ago: executing program 3 (id=58): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.017793914s ago: executing program 3 (id=59): socketpair(0xb, 0x3, 0x8, &(0x7f0000000100)={0xffffffffffffffff}) accept4$x25(r0, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r3, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 4.993928084s ago: executing program 3 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10002, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 4.924147237s ago: executing program 3 (id=61): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100422, &(0x7f0000000200)=ANY=[]) faccessat2(r1, &(0x7f0000000280)='./proc/thread-self/fail-nth/file0\x00', 0x93, 0x2000) 4.814401689s ago: executing program 4 (id=62): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x4d, 0x0, &(0x7f0000000180)) 4.182489585s ago: executing program 0 (id=63): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501000000"], 0x18}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}], 0x5, 0x20, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) io_setup(0x202, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000004680), 0x0, 0x100, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) 4.130931406s ago: executing program 2 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000500)={[{@noblock_validity}, {@noinit_itable}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a2, &(0x7f0000001400)="$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") 4.097739687s ago: executing program 4 (id=65): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 4.071500338s ago: executing program 0 (id=66): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x82802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000780)=ANY=[@ANYBLOB='\v\x00\x00\x00s'], 0x20f) 3.95904387s ago: executing program 3 (id=67): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x56, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r7}, 0x38) 3.911808862s ago: executing program 4 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3f, &(0x7f00000005c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @parameter_prob={0xc, 0x0, 0x0, 0x4, 0x3, 0x0, {0x5, 0x4, 0x3, 0x3b, 0xb, 0x66, 0x2, 0x2, 0x4, 0x7, @broadcast, @remote}, "a8"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x200088, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) timerfd_create(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80, 0xc2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001280)='/sys/power/reserved_size', 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="880000001e00010026bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="020204004a40020024000e0009000000000000000000000000000000feffffffffffffffc407de0700000000080025000400000008001c00", @ANYRES32=r5, @ANYBLOB="1b002400ffbeb930f7310a7a56c3e5a9a9e65972f9ab9170846dd300080020b5000000000804000180ffff08002e00635927b8078f25f21a8ded759d0975c372541e2b792111af3eb41a45e64958fbf30df736936323ae01cd366b6cbded8fec4b97c51babde04cd1858e2256f14e881110b62ce063a349f178d9d9025d7c0d5e60d1d89630259ff99f2d456aae55740a00cac06b879ae072cd7bf1a33e774c7762fa4e8fd6dfdb47b25034b6992df1efb66d536b3c9bff1"], 0x88}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) 3.911481842s ago: executing program 0 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x1, 0x50000, 0x1000, &(0x7f0000b42000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 229.307654ms ago: executing program 1 (id=70): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=ntlmssp,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00') syz_open_dev$dvb_frontend(0x0, 0x9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 84.561787ms ago: executing program 4 (id=71): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x10000000) 84.153667ms ago: executing program 2 (id=72): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0xc) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r0, 0xcd2e8000) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000300)={0x8000000, 0x7, 0x8, 0xffb, 0x10000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a0500230800003c0012800b00010069703667726500002c00028014000700ff0000000000000000000000000000011400060000000000000003000000000000923f3a89119bcc5b9e644278f2c3d10000010800040005000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 83.777618ms ago: executing program 3 (id=73): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) fsmount(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80800, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/211, 0xd3) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) syz_emit_ethernet(0x22, &(0x7f0000001a00)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff08004513001400640000e71995e05bf5407a00000000"], 0x0) 0s ago: executing program 0 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x11, r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 58.539114][ T4175] cgroup: Unknown subsys name 'net' [ 58.676833][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.902517][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.717510][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.763450][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.776494][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.842966][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 61.922479][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.929584][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.938255][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.947460][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.967231][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.974416][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.982764][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.996876][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.004069][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.012379][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.035679][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.042813][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.050554][ T4188] device bridge_slave_1 entered promiscuous mode [ 62.079177][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.086394][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.094652][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.108548][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.115705][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.123779][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.143687][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.150789][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.158739][ T4195] device bridge_slave_0 entered promiscuous mode [ 62.185383][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.194821][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.201998][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.209666][ T4195] device bridge_slave_1 entered promiscuous mode [ 62.221506][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.244452][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.275477][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.299174][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.311867][ T4189] team0: Port device team_slave_0 added [ 62.319395][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.340772][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.348007][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.355860][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.364562][ T4189] team0: Port device team_slave_1 added [ 62.370512][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.377817][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.385610][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.401053][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.412584][ T4188] team0: Port device team_slave_0 added [ 62.438153][ T4190] team0: Port device team_slave_0 added [ 62.445699][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.462991][ T4188] team0: Port device team_slave_1 added [ 62.488647][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.496226][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.522538][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.535489][ T4190] team0: Port device team_slave_1 added [ 62.550267][ T4195] team0: Port device team_slave_0 added [ 62.565105][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.574687][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.581876][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.607978][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.624919][ T4195] team0: Port device team_slave_1 added [ 62.631361][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.638503][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.664510][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.682833][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.689840][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.716042][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.729122][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.762486][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.769458][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.795755][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.807640][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.814919][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.841085][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.879141][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.886172][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.913432][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.934992][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.942021][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.956861][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.964161][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.990109][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.013386][ T4187] team0: Port device team_slave_0 added [ 63.039614][ T4187] team0: Port device team_slave_1 added [ 63.057833][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.064733][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.072395][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.080129][ T4190] Cannot create hsr debugfs directory [ 63.089766][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.096723][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.103761][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.111348][ T4188] Cannot create hsr debugfs directory [ 63.163692][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.170691][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.196877][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.212975][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.219949][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.246046][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.275941][ T4195] device hsr_slave_0 entered promiscuous mode [ 63.282825][ T4195] device hsr_slave_1 entered promiscuous mode [ 63.289742][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.297613][ T4195] Cannot create hsr debugfs directory [ 63.402903][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.410106][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.417158][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.424811][ T4187] Cannot create hsr debugfs directory [ 63.462104][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 63.469389][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 63.471276][ T1326] Bluetooth: hci3: command 0x0409 tx timeout [ 63.485038][ T1326] Bluetooth: hci0: command 0x0409 tx timeout [ 63.491729][ T1326] Bluetooth: hci1: command 0x0409 tx timeout [ 63.627623][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.640500][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.653007][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.665728][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.712250][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.722326][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.731875][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.747221][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.803357][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.829393][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.838550][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.856196][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.902469][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.918932][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.949838][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.976109][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.985899][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.997115][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.011846][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.034632][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.043579][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.053344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.063868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.086804][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.117689][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.127910][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.137581][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.144919][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.154497][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.166544][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.175179][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.182275][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.190355][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.204073][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.230203][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.238955][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.248197][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.259102][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.275300][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.303001][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.315645][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.326116][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.335333][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.345200][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.354510][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.362787][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.374932][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.386781][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.406298][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.415031][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.455693][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.464372][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.475032][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.488894][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.496048][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.504371][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.513401][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.522212][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.529276][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.537048][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.557970][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.568807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.587740][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.613621][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.626110][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.635025][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.644813][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.654657][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.664397][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.673491][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.682630][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.690897][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.703282][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.729286][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.739135][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.748124][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.755273][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.764597][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.773667][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.783366][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.790442][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.798105][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.807332][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.816224][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.825812][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.834485][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.844869][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.857474][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.865824][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.874492][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.886608][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.902961][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.920376][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.935835][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.945581][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.954501][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.965788][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.974491][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.989577][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.998164][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.005263][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.014518][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.023252][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.031624][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.040716][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.049354][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.066949][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.077084][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.091666][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.109716][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.118707][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.134058][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.148119][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.159307][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.166510][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.175805][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.192774][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.207454][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.216292][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.223414][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.232780][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.242901][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.251463][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.258544][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.266876][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.300857][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.337396][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.353686][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.372752][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.397568][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.416952][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.428699][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.437495][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.446422][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.456122][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.465161][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.477048][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.485831][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.500449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.509177][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.527294][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.551790][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 65.558908][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.566484][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 65.582023][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 65.593130][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.604415][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 65.610586][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.621588][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 65.630520][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.640390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.650040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.659275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.667739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.675311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.684829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.693533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.737701][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.749821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.763848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.776153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.790607][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.811373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.820128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.863810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.882564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.896316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.911939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.943891][ T4189] device veth0_vlan entered promiscuous mode [ 65.976174][ T4190] device veth0_vlan entered promiscuous mode [ 65.990918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.999396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.009358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.018682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.036414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.045591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.053522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.062340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.072369][ T4189] device veth1_vlan entered promiscuous mode [ 66.087396][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.095343][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.103933][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.113557][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.124529][ T4190] device veth1_vlan entered promiscuous mode [ 66.140918][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.159343][ T4195] device veth0_vlan entered promiscuous mode [ 66.177895][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.186528][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.195996][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.204877][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.213628][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.222719][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.235964][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.254965][ T4195] device veth1_vlan entered promiscuous mode [ 66.267704][ T4190] device veth0_macvtap entered promiscuous mode [ 66.280342][ T4189] device veth0_macvtap entered promiscuous mode [ 66.304028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.312707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.321827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.330365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.338952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.350355][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.359129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.367777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.377003][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.388322][ T4189] device veth1_macvtap entered promiscuous mode [ 66.415849][ T4190] device veth1_macvtap entered promiscuous mode [ 66.424478][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.433597][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.441851][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.449741][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.459142][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.487694][ T4187] device veth0_vlan entered promiscuous mode [ 66.506151][ T4187] device veth1_vlan entered promiscuous mode [ 66.522964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.532261][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.540545][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.550132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.559031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.568860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.577352][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.587932][ T4195] device veth0_macvtap entered promiscuous mode [ 66.600068][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.610013][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.621840][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.634086][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.649363][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.657398][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.666305][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.674750][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.683873][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.693205][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.702876][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.711820][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.720352][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.730533][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.739737][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.753704][ T4195] device veth1_macvtap entered promiscuous mode [ 66.763866][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.775098][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.786280][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.797318][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.806980][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.815983][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.826943][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.838243][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.846765][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.855752][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.863743][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.874714][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.897480][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.908525][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.919069][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.928151][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.939718][ T4188] device veth0_vlan entered promiscuous mode [ 66.954106][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.965832][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.975960][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.987342][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.004141][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.043149][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.052573][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.070953][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.082820][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.103375][ T4188] device veth1_vlan entered promiscuous mode [ 67.111973][ T4187] device veth0_macvtap entered promiscuous mode [ 67.132284][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.146167][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.156408][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.167811][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.179008][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.213279][ T4187] device veth1_macvtap entered promiscuous mode [ 67.227227][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.235566][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.245297][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.254232][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.274181][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.283360][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.292767][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.301996][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.355388][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.366831][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.378043][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.389049][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.398932][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.409549][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.420564][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.428400][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.438159][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.446931][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.458534][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.470009][ T4188] device veth0_macvtap entered promiscuous mode [ 67.497697][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.508461][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.519579][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.530364][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.540482][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.551673][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.563070][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.581145][ T4188] device veth1_macvtap entered promiscuous mode [ 67.588932][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.613048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.620858][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.626951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.636360][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 67.643346][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 67.646714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.649478][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 67.659143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.669065][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 67.673988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.690896][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.702163][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.711072][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.711946][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 67.720250][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.759474][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.771061][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.774234][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.785421][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.798974][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.811200][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.821029][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.832665][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.843268][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.853818][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.865306][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.909444][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.925222][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.935496][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.948499][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.959660][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.969729][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.980588][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.990452][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.001034][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.011307][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.023427][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.035457][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.046788][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.057480][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.066497][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.075515][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.093913][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.103477][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.112046][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.120794][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.135412][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.148435][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.183862][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.215215][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.224149][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.236541][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.247637][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.313250][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.313384][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.321132][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.337010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.392140][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.437127][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.461260][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.472712][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.486907][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.498385][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.506761][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.521691][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.533097][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.550840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.571497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.698688][ T4280] binder: 4278:4280 ioctl c0306201 2000000002c0 returned -14 [ 69.706077][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 69.758696][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 69.779497][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 69.799697][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 69.818073][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 70.751381][ T4317] FAULT_INJECTION: forcing a failure. [ 70.751381][ T4317] name failslab, interval 1, probability 0, space 0, times 1 [ 70.765950][ T4317] CPU: 1 PID: 4317 Comm: syz.1.10 Not tainted syzkaller #0 [ 70.773185][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.783469][ T4317] Call Trace: [ 70.786768][ T4317] [ 70.789731][ T4317] dump_stack_lvl+0x188/0x250 [ 70.794447][ T4317] ? show_regs_print_info+0x20/0x20 [ 70.799674][ T4317] ? load_image+0x410/0x410 [ 70.804208][ T4317] ? __might_sleep+0xf0/0xf0 [ 70.808820][ T4317] ? __lock_acquire+0x7d40/0x7d40 [ 70.813882][ T4317] should_fail+0x383/0x4b0 [ 70.818327][ T4317] should_failslab+0x5/0x20 [ 70.822850][ T4317] slab_pre_alloc_hook+0x51/0xc0 [ 70.827816][ T4317] __kmalloc+0x6b/0x340 [ 70.831985][ T4317] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 70.837907][ T4317] tomoyo_realpath_from_path+0xed/0x5e0 [ 70.843501][ T4317] tomoyo_check_open_permission+0x1eb/0x410 [ 70.849425][ T4317] ? tomoyo_check_path_number_acl+0x280/0x280 [ 70.855550][ T4317] ? __lock_acquire+0x7d40/0x7d40 [ 70.860611][ T4317] ? __rwlock_init+0x140/0x140 [ 70.865405][ T4317] ? memcpy+0x3c/0x60 [ 70.869412][ T4317] ? preempt_count_add+0x8d/0x190 [ 70.874459][ T4317] ? hook_file_open+0xf1/0x230 [ 70.879246][ T4317] ? tomoyo_file_open+0xe9/0x170 [ 70.884220][ T4317] security_file_open+0x5e/0xa0 [ 70.889099][ T4317] do_dentry_open+0x321/0xf90 [ 70.893806][ T4317] ? vfs_open+0x2b/0x80 [ 70.898009][ T4317] path_openat+0x2718/0x2fb0 [ 70.902646][ T4317] ? __kasan_slab_alloc+0xa9/0xc0 [ 70.907704][ T4317] ? do_filp_open+0x400/0x400 [ 70.912569][ T4317] do_filp_open+0x1df/0x400 [ 70.917467][ T4317] ? vfs_tmpfile+0x300/0x300 [ 70.922095][ T4317] ? noop_direct_IO+0x10/0x10 [ 70.926801][ T4317] ? _raw_spin_unlock+0x24/0x40 [ 70.931675][ T4317] ? alloc_fd+0x59e/0x650 [ 70.936046][ T4317] do_sys_openat2+0x14b/0x500 [ 70.940750][ T4317] ? __lock_acquire+0x7d40/0x7d40 [ 70.945899][ T4317] ? do_sys_open+0xe0/0xe0 [ 70.950444][ T4317] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 70.956630][ T4317] ? lock_chain_count+0x20/0x20 [ 70.961517][ T4317] __x64_sys_openat+0x135/0x160 [ 70.966397][ T4317] do_syscall_64+0x4c/0xa0 [ 70.971036][ T4317] ? clear_bhb_loop+0x30/0x80 [ 70.975736][ T4317] ? clear_bhb_loop+0x30/0x80 [ 70.980434][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.986365][ T4317] RIP: 0033:0x7f5f72f74199 [ 70.990806][ T4317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.010435][ T4317] RSP: 002b:00007f5f711cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.018868][ T4317] RAX: ffffffffffffffda RBX: 00007f5f731fbfa0 RCX: 00007f5f72f74199 [ 71.026855][ T4317] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 71.034849][ T4317] RBP: 00007f5f7300b8e0 R08: 0000000000000000 R09: 0000000000000000 [ 71.042822][ T4317] R10: 0000000000000083 R11: 0000000000000246 R12: 0000000000000000 [ 71.050973][ T4317] R13: 00007f5f731fc038 R14: 00007f5f731fbfa0 R15: 00007ffe83b9e6b8 [ 71.059053][ T4317] [ 71.073103][ T4317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 71.304325][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.310926][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.635245][ T1326] Bluetooth: hci3: command 0x0405 tx timeout [ 72.931187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.941202][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.121225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.131230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.927029][ T4339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 74.076384][ T4337] ftl_cs: FTL header not found. [ 74.161935][ T4337] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 75.019021][ T26] audit: type=1800 audit(1791399302.249:2): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19" name="ipv4_address" dev="configfs" ino=33447 res=0 errno=0 [ 75.097577][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 75.115390][ T4360] 9pnet_virtio: no channels available for device syz [ 75.304182][ T26] audit: type=1800 audit(1791399302.479:3): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19" name="ipv4_port" dev="configfs" ino=33453 res=0 errno=0 [ 75.353387][ T4350] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.498595][ T4368] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 75.516450][ T4368] device bridge1 entered promiscuous mode [ 75.521348][ T26] audit: type=1800 audit(1791399302.749:4): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19" name="num" dev="configfs" ino=33473 res=0 errno=0 [ 75.565882][ T26] audit: type=1800 audit(1791399302.779:5): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19" name="local" dev="configfs" ino=33476 res=0 errno=0 [ 75.648552][ T26] audit: type=1800 audit(1791399302.879:6): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.26" name="idVendor" dev="configfs" ino=32630 res=0 errno=0 [ 75.673506][ T4372] using random self ethernet address [ 75.690572][ T4372] using random host ethernet address [ 75.791863][ T4372] usb0: HOST MAC 96:a8:d3:6a:5a:e8 [ 75.797261][ T4372] usb0: MAC ae:91:46:7f:dd:67 [ 75.893802][ T4370] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 76.057412][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 76.202554][ T26] audit: type=1800 audit(1791399303.429:7): pid=4393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.30" name="ipv4_address" dev="configfs" ino=33517 res=0 errno=0 [ 76.224217][ T4262] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.232078][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.315978][ T26] audit: type=1800 audit(1791399303.439:8): pid=4393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.30" name="ipv4_port" dev="configfs" ino=33518 res=0 errno=0 [ 76.341878][ T26] audit: type=1800 audit(1791399303.449:9): pid=4393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.30" name="num" dev="configfs" ino=33519 res=0 errno=0 [ 76.381728][ T26] audit: type=1800 audit(1791399303.449:10): pid=4393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.30" name="local" dev="configfs" ino=33520 res=0 errno=0 [ 76.422383][ T1326] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 76.450779][ T26] audit: type=1800 audit(1791399303.479:11): pid=4393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.30" name="start_block" dev="configfs" ino=32662 res=0 errno=0 [ 76.588732][ T4262] usb 1-1: Dual-Role OTG device on HNP port [ 76.611481][ T4262] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 76.641242][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.681886][ T1108] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.699126][ T1108] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 76.738395][ T1108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 76.780938][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 76.796366][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 76.802269][ T4412] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET) [ 76.826009][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 76.930096][ T4421] TCP: TCP_TX_DELAY enabled [ 76.971559][ T4262] cdc_ncm 1-1:1.0: MAC-Address: 96:a8:d3:6a:5a:e8 [ 77.011905][ T1108] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.076904][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.210355][ T1108] usb 4-1: Product: syz [ 77.248514][ T4262] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 96:a8:d3:6a:5a:e8 [ 77.300170][ T1108] usb 4-1: Manufacturer: syz [ 77.652838][ T1108] cdc_wdm 4-1:1.0: skipping garbage [ 77.786593][ T1108] cdc_wdm 4-1:1.0: skipping garbage [ 77.967838][ T1108] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 77.994348][ T1108] cdc_wdm 4-1:1.0: Unknown control protocol [ 78.072285][ T4231] Bluetooth: hci0: command 0x0401 tx timeout [ 78.142879][ T4381] udc-core: couldn't find an available UDC or it's busy [ 78.156195][ T2305] usb 4-1: USB disconnect, device number 2 [ 78.171343][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 78.178521][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 78.184620][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 78.190063][ T4381] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.408037][ T4239] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 78.437414][ T4239] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 78.451398][ T4381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28'. [ 78.572251][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 78.708277][ T2305] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 79.159422][ T4433] ceph: No mds server is up or the cluster is laggy [ 79.200620][ T4438] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.252056][ T1111] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 79.351320][ T1326] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 79.359042][ T1326] usb 5-1: can't read configurations, error -71 [ 79.469733][ T4438] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.568589][ T4457] IPVS: set_ctl: invalid protocol: 43795 255.255.255.255:20004 [ 79.577828][ T4262] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 79.599910][ T1275] blk_update_request: I/O error, dev sda, sector 63390 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 79.606492][ T4438] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.611710][ T1275] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 7924) [ 79.633952][ T1275] Buffer I/O error on device sda1, logical block 7885 [ 79.641126][ T1275] blk_update_request: I/O error, dev sda, sector 63478 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 79.652522][ T1275] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 7948) [ 79.664147][ T1275] Buffer I/O error on device sda1, logical block 7896 [ 79.670944][ T1275] Buffer I/O error on device sda1, logical block 7897 [ 79.677755][ T1275] Buffer I/O error on device sda1, logical block 7898 [ 79.684578][ T1275] Buffer I/O error on device sda1, logical block 7899 [ 79.691407][ T1275] Buffer I/O error on device sda1, logical block 7900 [ 79.698227][ T1275] Buffer I/O error on device sda1, logical block 7901 [ 79.705119][ T1275] Buffer I/O error on device sda1, logical block 7902 [ 79.711955][ T1275] Buffer I/O error on device sda1, logical block 7903 [ 79.718762][ T1275] Buffer I/O error on device sda1, logical block 7904 [ 79.727020][ T1275] blk_update_request: I/O error, dev sda, sector 63638 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 0 [ 79.738213][ T1275] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 7955) [ 79.749973][ T1275] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 7958) [ 79.761506][ T1275] blk_update_request: I/O error, dev sda, sector 65990 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 79.772675][ T1275] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2031 starting block 8249) [ 79.784207][ T1275] blk_update_request: I/O error, dev sda, sector 520334 op 0x1:(WRITE) flags 0x0 phys_seg 11 prio class 0 [ 79.795552][ T1275] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 65052) [ 79.807215][ T1275] blk_update_request: I/O error, dev sda, sector 684342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 79.818569][ T1275] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2027 starting block 85543) [ 79.830262][ T1275] blk_update_request: I/O error, dev sda, sector 801222 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 79.841522][ T1275] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 100153) [ 79.853344][ T1275] blk_update_request: I/O error, dev sda, sector 1321238 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 79.864693][ T1275] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 165155) [ 79.875172][ T4461] binder: BC_ATTEMPT_ACQUIRE not supported [ 79.876379][ T1275] blk_update_request: I/O error, dev sda, sector 1837030 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 79.893802][ T1275] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 229629) [ 79.899100][ T4461] binder: 4458:4461 ioctl c0306201 200000000000 returned -22 [ 79.905499][ T1275] blk_update_request: I/O error, dev sda, sector 1837502 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 79.927205][ T3522] Aborting journal on device sda1-8. [ 79.934872][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 79.971816][ T4454] Buffer I/O error on dev sda1, logical block 130, lost async page write [ 79.980837][ T4454] Buffer I/O error on dev sda1, logical block 131, lost async page write [ 79.985256][ T4458] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.44: Detected aborted journal [ 79.989510][ T4454] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 80.007379][ T1092] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 80.008710][ T4454] Buffer I/O error on dev sda1, logical block 133, lost async page write [ 80.017741][ T3522] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 80.026458][ T4454] Buffer I/O error on dev sda1, logical block 134, lost async page write [ 80.039202][ T1092] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 80.043518][ T4454] Buffer I/O error on dev sda1, logical block 135, lost async page write [ 80.051816][ T4458] EXT4-fs (sda1): I/O error while writing superblock [ 80.060103][ T4454] Buffer I/O error on dev sda1, logical block 136, lost async page write [ 80.066921][ T4458] EXT4-fs (sda1): Remounting filesystem read-only [ 80.075273][ T4454] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 80.100398][ T4458] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.44: Detected aborted journal [ 80.106893][ T4175] EXT4-fs (sda1): I/O error while writing superblock [ 80.111815][ T4458] EXT4-fs (sda1): previous I/O error to superblock detected [ 80.120977][ T4462] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.45: Detected aborted journal [ 80.126370][ T4458] EXT4-fs (sda1): I/O error while writing superblock [ 80.147214][ T4438] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.149633][ T4458] EXT4-fs (sda1): Remounting filesystem read-only [ 80.160150][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 80.176202][ T4458] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.44: Detected aborted journal [ 80.176974][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 80.203221][ T4462] EXT4-fs (sda1): I/O error while writing superblock [ 80.209971][ T4462] EXT4-fs (sda1): Remounting filesystem read-only [ 80.219086][ T4175] EXT4-fs (sda1): I/O error while writing superblock [ 80.230804][ T4462] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.45: Detected aborted journal [ 80.241873][ T4453] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.43: Detected aborted journal [ 80.247208][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 80.284933][ T4462] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.45: Detected aborted journal [ 80.301475][ T4262] usb 2-1: config 0 has no interfaces? [ 80.363294][ T4463] batman_adv: batadv0: Adding interface: syzkaller0 [ 80.369942][ T4463] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.390948][ T4459] comedi comedi0: Minor 47 could not be opened [ 80.463098][ T4463] batman_adv: batadv0: Interface activated: syzkaller0 [ 80.504348][ T4262] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.513658][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.515888][ T4438] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.521898][ T4262] usb 2-1: Product: syz [ 80.521933][ T4262] usb 2-1: Manufacturer: syz [ 80.521946][ T4262] usb 2-1: SerialNumber: syz [ 80.546979][ T4262] usb 2-1: config 0 descriptor?? [ 80.560267][ T4462] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 80.608087][ T4454] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 80.608138][ T4462] batman_adv: batadv0: Removing interface: syzkaller0 [ 80.645634][ T4438] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.822667][ T4438] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.892268][ T4438] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.863107][ T4239] usb 2-1: USB disconnect, device number 2 [ 81.987754][ T4201] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 82.034132][ T4497] 9pnet_virtio: no channels available for device syz [ 82.043549][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 82.202945][ T4497] serio: Serial port ptm0 [ 82.658266][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 82.658279][ T26] audit: type=1800 audit(1791399309.889:15): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="idVendor" dev="configfs" ino=34923 res=0 errno=0 [ 82.703324][ T26] audit: type=1800 audit(1791399309.899:16): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="qw_sign" dev="configfs" ino=34924 res=0 errno=0 [ 82.745412][ T4524] tipc: Started in network mode [ 82.750693][ T4524] tipc: Node identity ac1414aa, cluster identity 4711 [ 82.758697][ T4524] tipc: New replicast peer: 172.20.20.187 [ 82.764927][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.775743][ T4524] tipc: Enabled bearer , priority 10 [ 82.810639][ T4526] ======================================================= [ 82.810639][ T4526] WARNING: The mand mount option has been deprecated and [ 82.810639][ T4526] and is ignored by this kernel. Remove the mand [ 82.810639][ T4526] option from the mount to silence this warning. [ 82.810639][ T4526] ======================================================= [ 83.211331][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 83.411190][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.441186][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.461189][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.471199][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.501186][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.591216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #388!!! [ 83.807303][ T1111] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.819442][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.099808][ T4547] loop2: detected capacity change from 0 to 512 [ 84.935340][ T4537] sched: RT throttling activated [ 84.941737][ T4262] tipc: Node number set to 2886997162 [ 84.950372][ T3853] EXT4-fs error: 127 callbacks suppressed [ 84.950388][ T3853] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 84.956790][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 85.943756][ T4551] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.69: Detected aborted journal [ 85.968303][ T4551] EXT4-fs: 134 callbacks suppressed [ 85.968320][ T4551] EXT4-fs (sda1): Remounting filesystem read-only [ 85.978073][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 85.985041][ T4551] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.69: Detected aborted journal [ 86.324357][ T4549] FAULT_INJECTION: forcing a failure. [ 86.324357][ T4549] name failslab, interval 1, probability 0, space 0, times 0 [ 86.337230][ T4549] CPU: 0 PID: 4549 Comm: syz.4.68 Not tainted syzkaller #0 [ 86.344556][ T4549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.354713][ T4549] Call Trace: [ 86.358272][ T4549] [ 86.361316][ T4549] dump_stack_lvl+0x188/0x250 [ 86.366011][ T4549] ? show_regs_print_info+0x20/0x20 [ 86.371316][ T4549] ? load_image+0x410/0x410 [ 86.375848][ T4549] ? __might_sleep+0xf0/0xf0 [ 86.380908][ T4549] ? __lock_acquire+0x7d40/0x7d40 [ 86.385968][ T4549] should_fail+0x383/0x4b0 [ 86.390504][ T4549] should_failslab+0x5/0x20 [ 86.395050][ T4549] slab_pre_alloc_hook+0x51/0xc0 [ 86.400003][ T4549] kmem_cache_alloc_trace+0x47/0x290 [ 86.405295][ T4549] ? __se_sys_timerfd_create+0xe1/0x250 [ 86.411140][ T4549] __se_sys_timerfd_create+0xe1/0x250 [ 86.416534][ T4549] do_syscall_64+0x4c/0xa0 [ 86.421063][ T4549] ? clear_bhb_loop+0x30/0x80 [ 86.425838][ T4549] ? clear_bhb_loop+0x30/0x80 [ 86.430531][ T4549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.436445][ T4549] RIP: 0033:0x7fa6a46f5199 [ 86.440875][ T4549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.460839][ T4549] RSP: 002b:00007fa6a290b028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 86.469356][ T4549] RAX: ffffffffffffffda RBX: 00007fa6a497d180 RCX: 00007fa6a46f5199 [ 86.477344][ T4549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.485323][ T4549] RBP: 00007fa6a478c8e0 R08: 0000000000000000 R09: 0000000000000000 [ 86.493304][ T4549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.501282][ T4549] R13: 00007fa6a497d218 R14: 00007fa6a497d180 R15: 00007ffe3c7790b8 [ 86.509311][ T4549] [ 86.519079][ T4543] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.68: Detected aborted journal [ 86.529934][ T4543] EXT4-fs (sda1): Remounting filesystem read-only [ 86.879260][ T7] cfg80211: failed to load regulatory.db [ 86.886258][ T4551] EXT4-fs (sda1): Remounting filesystem read-only [ 86.911430][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 86.933968][ T4547] EXT4-fs: failed to create workqueue [ 86.939394][ T4547] EXT4-fs (loop2): mount failed [ 87.014823][ T4557] ODEBUG: Out of memory. ODEBUG disabled [ 87.536115][ T1111] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 87.545623][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.553864][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 87.566422][ T4562] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.70: Detected aborted journal [ 87.589391][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 87.609393][ T4562] EXT4-fs (sda1): Remounting filesystem read-only [ 87.626106][ T1111] usb 2-1: can't set config #1, error -71 [ 87.628398][ T4562] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.70: Detected aborted journal [ 87.644944][ T1111] usb 2-1: USB disconnect, device number 3 [ 87.658525][ T4562] EXT4-fs (sda1): Remounting filesystem read-only [ 87.661017][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 87.680806][ T4564] CIFS: Attempting to mount \\127.0.0.1\share [ 87.717679][ T4565] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.72: Detected aborted journal [ 87.723738][ T4566] EXT4-fs (sda1): Remounting filesystem read-only [ 87.745254][ T4567] EXT4-fs (sda1): Remounting filesystem read-only [ 87.764697][ T4564] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.808400][ T4564] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 87.827310][ T4564] ------------[ cut here ]------------ [ 87.833279][ T4564] WARNING: CPU: 1 PID: 4564 at fs/cifs/smb2ops.c:88 smb2_add_credits+0x8df/0x1370 [ 87.842677][ T4564] Modules linked in: [ 87.846620][ T4564] CPU: 1 PID: 4564 Comm: syz.1.70 Not tainted syzkaller #0 [ 87.853992][ T4564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 87.864316][ T4564] RIP: 0010:smb2_add_credits+0x8df/0x1370 [ 87.870070][ T4564] Code: 02 00 00 03 2a 45 89 ef 41 29 ef 48 8b 44 24 38 42 0f b6 04 20 84 c0 0f 85 e1 02 00 00 44 89 3e e9 61 fb ff ff e8 d1 67 02 ff <0f> 0b e9 42 f9 ff ff e8 c5 67 02 ff c6 05 08 b6 00 0b 01 48 c7 c7 [ 87.889746][ T4564] RSP: 0018:ffffc900020573c8 EFLAGS: 00010287 [ 87.895871][ T4564] RAX: ffffffff8276bb8f RBX: ffff8880246e2224 RCX: 0000000000080000 [ 87.903904][ T4564] RDX: ffffc90003d63000 RSI: 0000000000021520 RDI: 0000000000021521 [ 87.911937][ T4564] RBP: 1ffff110048dc445 R08: 0000000000000003 R09: 0000000000000004 [ 87.919927][ T4564] R10: dffffc0000000000 R11: fffff5200040ae68 R12: ffff8880246e222c [ 87.927957][ T4564] R13: 0000000000000200 R14: ffff8880246e2000 R15: 0000000000000000 [ 87.936026][ T4564] FS: 00007f5f711cc6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 87.945011][ T4564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.951656][ T4564] CR2: 00007f5f72fc1880 CR3: 000000007ba37000 CR4: 00000000003506e0 [ 87.959779][ T4564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.967798][ T4564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.975911][ T4564] Call Trace: [ 87.979206][ T4564] [ 87.982206][ T4564] compound_send_recv+0x1054/0x3290 [ 87.987474][ T4564] ? kmem_cache_alloc+0x189/0x280 [ 87.992590][ T4564] ? cifs_pick_channel+0x220/0x220 [ 87.997742][ T4564] ? __lock_acquire+0x7d40/0x7d40 [ 88.002850][ T4564] ? do_raw_spin_lock+0x128/0x2f0 [ 88.007900][ T4564] ? __rwlock_init+0x140/0x140 [ 88.012757][ T4564] cifs_send_recv+0x3c/0x50 [ 88.017292][ T4564] SMB2_negotiate+0x1721/0x4390 [ 88.022322][ T4564] ? smb3_encryption_required+0x1f0/0x1f0 [ 88.028068][ T4564] ? smb2_negotiate+0xd5/0x120 [ 88.032916][ T4564] ? do_raw_spin_lock+0x128/0x2f0 [ 88.038005][ T4564] ? do_raw_spin_unlock+0x11d/0x230 [ 88.043291][ T4564] smb2_negotiate+0xdf/0x120 [ 88.047910][ T4564] cifs_get_smb_ses+0x890/0x2150 [ 88.052934][ T4564] ? trace_smb3_enter+0x1c0/0x1c0 [ 88.058002][ T4564] ? cifs_get_tcp_session+0x117c/0x18f0 [ 88.063650][ T4564] mount_get_conns+0xf8/0xe00 [ 88.068416][ T4564] ? __se_sys_mount+0x2e3/0x3d0 [ 88.073447][ T4564] ? do_syscall_64+0x4c/0xa0 [ 88.078124][ T4564] cifs_mount+0x162/0x1380 [ 88.082641][ T4564] ? cifs_setup_volume_info+0x640/0x640 [ 88.088212][ T4564] ? __lock_acquire+0x7d40/0x7d40 [ 88.093343][ T4564] ? do_raw_spin_unlock+0x11d/0x230 [ 88.098575][ T4564] ? cifs_setup_cifs_sb+0x528/0x830 [ 88.103868][ T4564] cifs_smb3_do_mount+0x366/0x760 [ 88.108919][ T4564] ? cifs_sb_deactive+0x80/0x80 [ 88.113873][ T4564] smb3_get_tree+0x59a/0xa80 [ 88.118579][ T4564] vfs_get_tree+0x88/0x270 [ 88.123174][ T4564] do_new_mount+0x247/0xa40 [ 88.127715][ T4564] __se_sys_mount+0x2e3/0x3d0 [ 88.132484][ T4564] ? __x64_sys_mount+0xc0/0xc0 [ 88.137363][ T4564] ? lockdep_hardirqs_on+0x94/0x140 [ 88.142637][ T4564] ? __x64_sys_mount+0x1c/0xc0 [ 88.148114][ T4564] do_syscall_64+0x4c/0xa0 [ 88.152608][ T4564] ? clear_bhb_loop+0x30/0x80 [ 88.157347][ T4564] ? clear_bhb_loop+0x30/0x80 [ 88.162284][ T4564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.168208][ T4564] RIP: 0033:0x7f5f72f74199 [ 88.172697][ T4564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.192357][ T4564] RSP: 002b:00007f5f711cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.200803][ T4564] RAX: ffffffffffffffda RBX: 00007f5f731fbfa0 RCX: 00007f5f72f74199 [ 88.209049][ T4564] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 88.217333][ T4564] RBP: 00007f5f7300b8e0 R08: 00002000000000c0 R09: 0000000000000000 [ 88.226637][ T4564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.234655][ T4564] R13: 00007f5f731fc038 R14: 00007f5f731fbfa0 R15: 00007ffe83b9e6b8 [ 88.242717][ T4564] [ 88.245905][ T4564] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.253183][ T4564] CPU: 1 PID: 4564 Comm: syz.1.70 Not tainted syzkaller #0 [ 88.260473][ T4564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.270852][ T4564] Call Trace: [ 88.274150][ T4564] [ 88.277084][ T4564] dump_stack_lvl+0x188/0x250 [ 88.281879][ T4564] ? show_regs_print_info+0x20/0x20 [ 88.287119][ T4564] ? load_image+0x410/0x410 [ 88.291720][ T4564] panic+0x2f8/0x850 [ 88.295612][ T4564] ? bpf_jit_dump+0xd0/0xd0 [ 88.300197][ T4564] ? smb2_add_credits+0x8df/0x1370 [ 88.305500][ T4564] __warn+0x248/0x2b0 [ 88.309869][ T4564] ? smb2_add_credits+0x8df/0x1370 [ 88.315073][ T4564] report_bug+0x1b9/0x2e0 [ 88.319449][ T4564] handle_bug+0x3a/0x70 [ 88.324511][ T4564] exc_invalid_op+0x16/0x40 [ 88.331021][ T4564] asm_exc_invalid_op+0x16/0x20 [ 88.336929][ T4564] RIP: 0010:smb2_add_credits+0x8df/0x1370 [ 88.342799][ T4564] Code: 02 00 00 03 2a 45 89 ef 41 29 ef 48 8b 44 24 38 42 0f b6 04 20 84 c0 0f 85 e1 02 00 00 44 89 3e e9 61 fb ff ff e8 d1 67 02 ff <0f> 0b e9 42 f9 ff ff e8 c5 67 02 ff c6 05 08 b6 00 0b 01 48 c7 c7 [ 88.363016][ T4564] RSP: 0018:ffffc900020573c8 EFLAGS: 00010287 [ 88.369185][ T4564] RAX: ffffffff8276bb8f RBX: ffff8880246e2224 RCX: 0000000000080000 [ 88.377151][ T4564] RDX: ffffc90003d63000 RSI: 0000000000021520 RDI: 0000000000021521 [ 88.385469][ T4564] RBP: 1ffff110048dc445 R08: 0000000000000003 R09: 0000000000000004 [ 88.393454][ T4564] R10: dffffc0000000000 R11: fffff5200040ae68 R12: ffff8880246e222c [ 88.401511][ T4564] R13: 0000000000000200 R14: ffff8880246e2000 R15: 0000000000000000 [ 88.410042][ T4564] ? smb2_add_credits+0x8df/0x1370 [ 88.415363][ T4564] ? smb2_add_credits+0x8df/0x1370 [ 88.420478][ T4564] compound_send_recv+0x1054/0x3290 [ 88.425703][ T4564] ? kmem_cache_alloc+0x189/0x280 [ 88.430727][ T4564] ? cifs_pick_channel+0x220/0x220 [ 88.435853][ T4564] ? __lock_acquire+0x7d40/0x7d40 [ 88.440884][ T4564] ? do_raw_spin_lock+0x128/0x2f0 [ 88.445903][ T4564] ? __rwlock_init+0x140/0x140 [ 88.450662][ T4564] cifs_send_recv+0x3c/0x50 [ 88.455170][ T4564] SMB2_negotiate+0x1721/0x4390 [ 88.460164][ T4564] ? smb3_encryption_required+0x1f0/0x1f0 [ 88.465997][ T4564] ? smb2_negotiate+0xd5/0x120 [ 88.470806][ T4564] ? do_raw_spin_lock+0x128/0x2f0 [ 88.475881][ T4564] ? do_raw_spin_unlock+0x11d/0x230 [ 88.481079][ T4564] smb2_negotiate+0xdf/0x120 [ 88.485812][ T4564] cifs_get_smb_ses+0x890/0x2150 [ 88.490813][ T4564] ? trace_smb3_enter+0x1c0/0x1c0 [ 88.495865][ T4564] ? cifs_get_tcp_session+0x117c/0x18f0 [ 88.501455][ T4564] mount_get_conns+0xf8/0xe00 [ 88.506146][ T4564] ? __se_sys_mount+0x2e3/0x3d0 [ 88.511006][ T4564] ? do_syscall_64+0x4c/0xa0 [ 88.515599][ T4564] cifs_mount+0x162/0x1380 [ 88.520046][ T4564] ? cifs_setup_volume_info+0x640/0x640 [ 88.525595][ T4564] ? __lock_acquire+0x7d40/0x7d40 [ 88.530633][ T4564] ? do_raw_spin_unlock+0x11d/0x230 [ 88.535842][ T4564] ? cifs_setup_cifs_sb+0x528/0x830 [ 88.541078][ T4564] cifs_smb3_do_mount+0x366/0x760 [ 88.546115][ T4564] ? cifs_sb_deactive+0x80/0x80 [ 88.551140][ T4564] smb3_get_tree+0x59a/0xa80 [ 88.555758][ T4564] vfs_get_tree+0x88/0x270 [ 88.560304][ T4564] do_new_mount+0x247/0xa40 [ 88.564810][ T4564] __se_sys_mount+0x2e3/0x3d0 [ 88.569525][ T4564] ? __x64_sys_mount+0xc0/0xc0 [ 88.574375][ T4564] ? lockdep_hardirqs_on+0x94/0x140 [ 88.579676][ T4564] ? __x64_sys_mount+0x1c/0xc0 [ 88.584540][ T4564] do_syscall_64+0x4c/0xa0 [ 88.588965][ T4564] ? clear_bhb_loop+0x30/0x80 [ 88.593918][ T4564] ? clear_bhb_loop+0x30/0x80 [ 88.598632][ T4564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.604651][ T4564] RIP: 0033:0x7f5f72f74199 [ 88.609133][ T4564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.629418][ T4564] RSP: 002b:00007f5f711cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.638029][ T4564] RAX: ffffffffffffffda RBX: 00007f5f731fbfa0 RCX: 00007f5f72f74199 [ 88.645996][ T4564] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 88.654177][ T4564] RBP: 00007f5f7300b8e0 R08: 00002000000000c0 R09: 0000000000000000 [ 88.662350][ T4564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.671140][ T4564] R13: 00007f5f731fc038 R14: 00007f5f731fbfa0 R15: 00007ffe83b9e6b8 [ 88.679399][ T4564] [ 88.682961][ T4564] Kernel Offset: disabled [ 88.687812][ T4564] Rebooting in 86400 seconds..