last executing test programs: 55.793387781s ago: executing program 1 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x74}}, 0x0) pipe(0x0) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0x90}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026ca7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008a"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 53.99344955s ago: executing program 1 (id=129): socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x8}, &(0x7f0000000480)=0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x20000840) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xf8}}, 0x0) 52.814727199s ago: executing program 1 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r3}, 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0)=0x94c, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000f86dd6100272400403afffc000000000000000000000000000001ff02000000000000000000000000000101"], 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000540)=0x1) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x9) 51.195789503s ago: executing program 1 (id=132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000300)={0x4, 0xfc, "98f310", 0x3, 0x18}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.545932558s ago: executing program 1 (id=135): socket(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='cpuset\x00', 0x820000, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r4, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0) fsopen(0x0, 0x1) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) 46.310648715s ago: executing program 1 (id=138): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 31.179103057s ago: executing program 32 (id=138): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 19.276647422s ago: executing program 0 (id=171): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000000000f4000400000000000000"], 0x1c, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x13, 0x80000001, 0x35b3, 0x2, 0x800, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={r4, 0x58, &(0x7f0000001100)}, 0x10) socket$key(0xf, 0x3, 0x2) chown(&(0x7f0000000240)='./file1\x00', 0xee00, 0x0) 17.938780287s ago: executing program 3 (id=172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x2, &(0x7f000061d000/0x4000)=nil) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x5, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x15, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 17.567668459s ago: executing program 2 (id=174): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x74}}, 0x0) pipe(0x0) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0x90}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 15.743796179s ago: executing program 0 (id=175): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_socket_connect_nvme_tcp() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 14.883358108s ago: executing program 2 (id=176): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2b, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x5}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x7, 0x1, '.(\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000029500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000540)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0x5, &(0x7f0000000580)=""/93) 13.171090394s ago: executing program 3 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r6 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x2, 0x1, 0x1}, &(0x7f00000004c0)=0x0, &(0x7f0000001540), &(0x7f0000000000)) syz_io_uring_submit(r8, r7, 0x0, &(0x7f0000000000)) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x2000, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.032742128s ago: executing program 2 (id=178): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x13, 0x80000001, 0x35b3, 0x2, 0x800, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={r4, 0x58, &(0x7f0000001100)}, 0x10) 12.127838298s ago: executing program 0 (id=179): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 11.858723617s ago: executing program 3 (id=180): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) socket(0xa, 0x3, 0x3a) 11.227960418s ago: executing program 2 (id=181): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) openat(r0, 0x0, 0x0, 0x0) renameat2(r0, 0x0, r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 10.203582782s ago: executing program 0 (id=182): mkdirat(0xffffffffffffff9c, 0x0, 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007f, @dev={0xfe, 0x80, '\x00', 0x20}, 0xc7}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0/file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x200) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 10.194583472s ago: executing program 3 (id=183): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x3ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0xffffffff, 0x6, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @empty}}}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 7.649499977s ago: executing program 0 (id=184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026ca7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008a"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 6.676653669s ago: executing program 3 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x74}}, 0x0) pipe(0x0) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0x90}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026ca7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008a"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 6.63739632s ago: executing program 2 (id=186): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x3, 0x400, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0x20ffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0xc, 0x0, 0x0, 0x28c, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x204, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x31, 0x0, 0x4b7a0856, 0x0, 0x0, 0x0, 0x71]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff}, 0x51) r5 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) r6 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x201) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x28}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f0000000040)={0x0, 0xfffffffe, 0x7f, '\x00', &(0x7f0000000000)=0x5}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045730, &(0x7f0000000080)) landlock_restrict_self(0xffffffffffffffff, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e24, @rand_addr=0xdffefc13}}) 11.341979ms ago: executing program 4 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d0) 9.70431ms ago: executing program 0 (id=194): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x2c, r7, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000000300)=""/102400, 0x19000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8) 7.6746ms ago: executing program 2 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_pidfd_open(0x0, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000080)="000006020200", 0x6, 0xfffffffffffffffb) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) unshare(0x2c020400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000000)="c118", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000000)=""/30, &(0x7f0000000200)=0x1e) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 0s ago: executing program 3 (id=196): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x3, 0x400, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0x20ffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0xc, 0x0, 0x0, 0x28c, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x204, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x31, 0x0, 0x4b7a0856, 0x0, 0x0, 0x0, 0x71]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff}, 0x51) r5 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) r6 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x201) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x28}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f0000000040)={0x0, 0xfffffffe, 0x7f, '\x00', &(0x7f0000000000)=0x5}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045730, &(0x7f0000000080)) landlock_restrict_self(0xffffffffffffffff, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e24, @rand_addr=0xdffefc13}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 72.392660][ T5755] cgroup: Unknown subsys name 'net' [ 72.527721][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.210814][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.802388][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.822416][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.833621][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.841295][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.850991][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.858562][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.858660][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.866484][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.877483][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.881840][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.895276][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.902589][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.909690][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.912497][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.918653][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.924713][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.932005][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.938435][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.945579][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.952531][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.966406][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.966781][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.975985][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.995026][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.467464][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 76.491033][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 76.543223][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 76.612464][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 76.747886][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.755349][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.765362][ T5769] bridge_slave_0: entered allmulticast mode [ 76.772548][ T5769] bridge_slave_0: entered promiscuous mode [ 76.785849][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.793196][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.800476][ T5768] bridge_slave_0: entered allmulticast mode [ 76.807926][ T5768] bridge_slave_0: entered promiscuous mode [ 76.834517][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.841789][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.848925][ T5769] bridge_slave_1: entered allmulticast mode [ 76.856143][ T5769] bridge_slave_1: entered promiscuous mode [ 76.868259][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.875597][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.882995][ T5768] bridge_slave_1: entered allmulticast mode [ 76.889822][ T5768] bridge_slave_1: entered promiscuous mode [ 76.906981][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.914605][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.922242][ T5767] bridge_slave_0: entered allmulticast mode [ 76.929019][ T5767] bridge_slave_0: entered promiscuous mode [ 76.946505][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.953695][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.960950][ T5767] bridge_slave_1: entered allmulticast mode [ 76.968067][ T5767] bridge_slave_1: entered promiscuous mode [ 77.002217][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.033842][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.045684][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.089269][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.101745][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.126731][ T5768] team0: Port device team_slave_0 added [ 77.135260][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.155732][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.165765][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.173152][ T5766] bridge_slave_0: entered allmulticast mode [ 77.179911][ T5766] bridge_slave_0: entered promiscuous mode [ 77.189936][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.197420][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.204861][ T5766] bridge_slave_1: entered allmulticast mode [ 77.213100][ T5766] bridge_slave_1: entered promiscuous mode [ 77.243358][ T5768] team0: Port device team_slave_1 added [ 77.288814][ T5767] team0: Port device team_slave_0 added [ 77.298324][ T5769] team0: Port device team_slave_0 added [ 77.306791][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.333800][ T5767] team0: Port device team_slave_1 added [ 77.341544][ T5769] team0: Port device team_slave_1 added [ 77.349305][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.362088][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.369046][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.396185][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.418119][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.425496][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.451673][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.503762][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.510850][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.538202][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.560398][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.567381][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.596242][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.618265][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.628599][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.654942][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.674060][ T5766] team0: Port device team_slave_0 added [ 77.692080][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.699063][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.725547][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.739833][ T5766] team0: Port device team_slave_1 added [ 77.789771][ T5768] hsr_slave_0: entered promiscuous mode [ 77.796266][ T5768] hsr_slave_1: entered promiscuous mode [ 77.827892][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.835162][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.862156][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.878432][ T5767] hsr_slave_0: entered promiscuous mode [ 77.885225][ T5767] hsr_slave_1: entered promiscuous mode [ 77.891758][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.899458][ T5767] Cannot create hsr debugfs directory [ 77.915686][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.922849][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.949032][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.001071][ T5774] Bluetooth: hci0: command tx timeout [ 78.012137][ T5769] hsr_slave_0: entered promiscuous mode [ 78.021371][ T5769] hsr_slave_1: entered promiscuous mode [ 78.027866][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.036017][ T5769] Cannot create hsr debugfs directory [ 78.080443][ T5774] Bluetooth: hci3: command tx timeout [ 78.080599][ T5771] Bluetooth: hci1: command tx timeout [ 78.086352][ T5774] Bluetooth: hci2: command tx timeout [ 78.143522][ T5766] hsr_slave_0: entered promiscuous mode [ 78.149944][ T5766] hsr_slave_1: entered promiscuous mode [ 78.156545][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.164414][ T5766] Cannot create hsr debugfs directory [ 78.516955][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.528317][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.542579][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.555802][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.629422][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.642353][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.659590][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.669512][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.782281][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.802759][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.822372][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.834448][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.924272][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.934260][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.948827][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.959633][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.005892][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.063963][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.107971][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.117689][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.144876][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.152372][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.166430][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.173633][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.207473][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.214647][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.233807][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.241021][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.285222][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.324595][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.371640][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.379117][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.388570][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.395820][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.421309][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.505367][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.538132][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.567599][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.603111][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.610443][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.654922][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.662188][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.977809][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.081350][ T5774] Bluetooth: hci0: command tx timeout [ 80.089556][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.160839][ T5774] Bluetooth: hci2: command tx timeout [ 80.168399][ T5768] veth0_vlan: entered promiscuous mode [ 80.175992][ T5774] Bluetooth: hci1: command tx timeout [ 80.176041][ T5771] Bluetooth: hci3: command tx timeout [ 80.196118][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.223221][ T5768] veth1_vlan: entered promiscuous mode [ 80.275647][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.301987][ T5769] veth0_vlan: entered promiscuous mode [ 80.317367][ T5768] veth0_macvtap: entered promiscuous mode [ 80.329577][ T5768] veth1_macvtap: entered promiscuous mode [ 80.353042][ T5769] veth1_vlan: entered promiscuous mode [ 80.376064][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.413322][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.439550][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.451553][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.463192][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.472913][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.486813][ T5767] veth0_vlan: entered promiscuous mode [ 80.531534][ T5767] veth1_vlan: entered promiscuous mode [ 80.549077][ T5766] veth0_vlan: entered promiscuous mode [ 80.583846][ T5766] veth1_vlan: entered promiscuous mode [ 80.606893][ T5769] veth0_macvtap: entered promiscuous mode [ 80.678178][ T5769] veth1_macvtap: entered promiscuous mode [ 80.706386][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.719537][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.754373][ T5766] veth0_macvtap: entered promiscuous mode [ 80.787301][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.788320][ T5767] veth0_macvtap: entered promiscuous mode [ 80.801532][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.809723][ T5766] veth1_macvtap: entered promiscuous mode [ 80.824861][ T5767] veth1_macvtap: entered promiscuous mode [ 80.834698][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.846632][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.858388][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.915178][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.927620][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.942923][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.969656][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.987677][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.997745][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.008588][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.020029][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.032983][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.045443][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.056703][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.067404][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.078118][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.088913][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.104916][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.125707][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.135182][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.146567][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.156133][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.178247][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.195150][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.206478][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.217519][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.242208][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.269153][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.288720][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.303749][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.314588][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.331874][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.346388][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.370658][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.403279][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.417344][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.426288][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.435847][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.459130][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.468472][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.478541][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.487627][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.614520][ T5828] Bluetooth: MGMT ver 1.22 [ 81.657797][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.666708][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.696048][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.696367][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.815680][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.831231][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.957835][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 82.344987][ T5771] Bluetooth: hci0: command tx timeout [ 82.351376][ T5771] Bluetooth: hci1: command tx timeout [ 82.356991][ T5774] Bluetooth: hci2: command tx timeout [ 82.357513][ T5775] Bluetooth: hci3: command tx timeout [ 82.417306][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.612666][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.972171][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.001814][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.068371][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.092113][ T5844] syz.0.7[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.092432][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.454356][ T5844] loop0: detected capacity change from 0 to 32768 [ 84.274688][ T5844] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.410384][ T5084] Bluetooth: hci1: command tx timeout [ 84.411244][ T5771] Bluetooth: hci2: command tx timeout [ 84.416031][ T5084] Bluetooth: hci3: command tx timeout [ 84.421530][ T5774] Bluetooth: hci0: command tx timeout [ 84.442030][ T5856] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 84.469274][ T5844] XFS (loop0): Ending clean mount [ 84.707425][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.135842][ T5868] ======================================================= [ 85.135842][ T5868] WARNING: The mand mount option has been deprecated and [ 85.135842][ T5868] and is ignored by this kernel. Remove the mand [ 85.135842][ T5868] option from the mount to silence this warning. [ 85.135842][ T5868] ======================================================= [ 86.576462][ T5873] loop2: detected capacity change from 0 to 512 [ 87.087985][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.122448][ T5873] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 87.188847][ T788] cfg80211: failed to load regulatory.db [ 87.798793][ T5877] mmap: syz.1.2 (5877) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.478596][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.529920][ T5862] sit0: entered promiscuous mode [ 88.590147][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.631457][ T5882] Zero length message leads to an empty skb [ 88.742073][ T5883] capability: warning: `syz.2.10' uses 32-bit capabilities (legacy support in use) [ 88.988971][ T5888] loop1: detected capacity change from 0 to 512 [ 89.143532][ T5888] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.13: invalid indirect mapped block 256 (level 2) [ 89.270867][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 89.398328][ T5888] EXT4-fs (loop1): 2 truncates cleaned up [ 89.639767][ T5888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.997112][ T5896] loop2: detected capacity change from 0 to 2048 [ 91.866905][ T5890] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 92.258611][ T5896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.290568][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.481407][ T5905] xt_recent: Unsupported userspace flags (000000de) [ 95.166664][ T5902] loop3: detected capacity change from 0 to 4096 [ 95.889309][ T5915] process 'syz.3.20' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 95.895431][ T5917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.459257][ T5921] loop1: detected capacity change from 0 to 1024 [ 99.988790][ T5949] syz.2.23 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.024490][ T5949] ptrace attach of "./syz-executor exec"[5766] was attempted by " [ 100.137447][ T5938] Bluetooth: (null): Too short H5 packet [ 100.682803][ T5938] Bluetooth: (null): Invalid header checksum [ 100.688941][ T5938] Bluetooth: (null): Invalid header checksum [ 100.695788][ T5938] Bluetooth: (null): Invalid header checksum [ 101.212376][ T5951] nvme_fabrics: missing parameter 'transport=%s' [ 101.294548][ T5951] nvme_fabrics: missing parameter 'nqn=%s' [ 102.159827][ T5959] vivid-000: kernel_thread() failed [ 103.287178][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 103.810142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.638299][ T5771] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 108.638397][ T5771] Bluetooth: hci1: Malformed LE Event: 0x02 [ 108.722009][ T5996] netlink: 180 bytes leftover after parsing attributes in process `syz.0.34'. [ 109.781901][ T5988] binder: 5984:5988 ioctl c018620c 200000000900 returned -1 [ 111.792243][ T5770] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.447078][ T5770] usb 3-1: Using ep0 maxpacket: 8 [ 113.587046][ T6009] overlayfs: missing 'lowerdir' [ 113.902803][ T5770] usb 3-1: device descriptor read/all, error -71 [ 113.972168][ T6015] loop3: detected capacity change from 0 to 512 [ 114.079634][ T6015] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.38: corrupted in-inode xattr: e_value out of bounds [ 115.829701][ T6015] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.38: couldn't read orphan inode 15 (err -117) [ 115.840573][ T6028] netlink: 104 bytes leftover after parsing attributes in process `syz.1.41'. [ 115.844150][ T6015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.252036][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.353225][ T6042] netlink: 'syz.3.44': attribute type 7 has an invalid length. [ 118.361288][ T6042] netlink: 'syz.3.44': attribute type 8 has an invalid length. [ 118.925631][ T6051] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.299443][ T6059] syz.1.46 uses old SIOCAX25GETINFO [ 119.307753][ T6057] (null): rxe_set_mtu: Set mtu to 256 [ 119.319265][ T6057] vxcan1 speed is unknown, defaulting to 1000 [ 119.340055][ T6057] vxcan1 speed is unknown, defaulting to 1000 [ 119.605286][ T6057] vxcan1 speed is unknown, defaulting to 1000 [ 119.889596][ T6057] infiniband syz2: set active [ 119.894522][ T6057] infiniband syz2: added vxcan1 [ 119.901553][ T6057] syz2: rxe_create_cq: returned err = -12 [ 119.907539][ T6057] infiniband syz2: Couldn't create ib_mad CQ [ 119.913716][ T6057] infiniband syz2: Couldn't open port 1 [ 119.926591][ T5903] vxcan1 speed is unknown, defaulting to 1000 [ 121.320258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 121.530310][ T27] audit: type=1326 audit(1774877979.346:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4999c819 code=0x7ffc0000 [ 121.577059][ T6057] RDS/IB: syz2: added [ 121.581893][ T6057] smc: adding ib device syz2 with port count 1 [ 121.588261][ T6057] smc: ib device syz2 port 1 has pnetid [ 121.590221][ T27] audit: type=1326 audit(1774877979.356:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4999c819 code=0x7ffc0000 [ 121.598157][ T6057] vxcan1 speed is unknown, defaulting to 1000 [ 121.632047][ T5903] vxcan1 speed is unknown, defaulting to 1000 [ 121.724243][ T27] audit: type=1326 audit(1774877979.356:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5d4999c819 code=0x7ffc0000 [ 121.747344][ T27] audit: type=1326 audit(1774877979.356:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4999c819 code=0x7ffc0000 [ 121.771319][ T27] audit: type=1326 audit(1774877979.356:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4999c819 code=0x7ffc0000 [ 121.796934][ T27] audit: type=1326 audit(1774877979.356:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f5d4999c819 code=0x7ffc0000 [ 121.819492][ T27] audit: type=1326 audit(1774877979.356:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4999c819 code=0x7ffc0000 [ 121.843910][ T27] audit: type=1326 audit(1774877979.356:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4999c819 code=0x7ffc0000 [ 121.866431][ T27] audit: type=1326 audit(1774877979.356:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5d4999c819 code=0x7ffc0000 [ 121.958020][ T27] audit: type=1326 audit(1774877979.356:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4999c819 code=0x7ffc0000 [ 122.084241][ T6057] vxcan1 speed is unknown, defaulting to 1000 [ 122.259574][ T6057] vxcan1 speed is unknown, defaulting to 1000 [ 122.458610][ T6057] vxcan1 speed is unknown, defaulting to 1000 [ 124.120336][ T6079] NILFS (nullb0): couldn't find nilfs on the device [ 124.810110][ C1] sched: RT throttling activated [ 125.041344][ T6083] infiniband syz2: set active [ 125.046514][ T6083] infiniband syz2: set active [ 125.055923][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.066998][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.104295][ T789] vxcan1 speed is unknown, defaulting to 1000 [ 125.120343][ T789] vxcan1 speed is unknown, defaulting to 1000 [ 125.673509][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.542086][ T6105] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 130.619995][ T6105] loop3: detected capacity change from 0 to 512 [ 133.060486][ T6105] fscrypt: Error allocating hmac(sha512): -2 [ 133.215245][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.226962][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.241060][ T6115] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 133.247928][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.259048][ T6115] vhci_hcd vhci_hcd.0: Device attached [ 133.391924][ T6120] vhci_hcd: connection closed [ 133.393692][ T4471] vhci_hcd: stop threads [ 133.404868][ T4471] vhci_hcd: release socket [ 133.410540][ T4471] vhci_hcd: disconnect device [ 135.430828][ T23] vhci_hcd: vhci_device speed not set [ 135.767169][ T6129] ax25_connect(): syz.0.58 uses autobind, please contact jreuter@yaina.de [ 136.608120][ T6136] loop3: detected capacity change from 0 to 128 [ 137.665580][ T6136] affs: No valid root block on device loop3 [ 139.251054][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 142.909199][ T6158] tipc: Started in network mode [ 142.914538][ T6158] tipc: Node identity 4, cluster identity 4711 [ 142.920873][ T6158] tipc: Node number set to 4 [ 144.836466][ T6177] netlink: 'syz.3.69': attribute type 10 has an invalid length. [ 144.977729][ T6181] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 144.986239][ T6177] team0: Port device dummy0 added [ 145.025032][ T6180] netlink: 'syz.3.69': attribute type 10 has an invalid length. [ 145.229922][ T6180] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 146.183703][ T6180] team0: Port device dummy0 removed [ 146.222532][ T6180] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.410865][ T6186] warning: `syz.2.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 146.508682][ T6191] syz.0.73 uses obsolete (PF_INET,SOCK_PACKET) [ 148.539658][ T5773] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 148.826652][ T5773] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.845634][ T5773] usb 4-1: config 0 has no interface number 0 [ 149.189068][ T5773] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 149.667962][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.696289][ T5773] usb 4-1: Product: syz [ 149.729472][ T5773] usb 4-1: Manufacturer: syz [ 149.740226][ T5773] usb 4-1: SerialNumber: syz [ 149.775672][ T5773] usb 4-1: config 0 descriptor?? [ 149.859430][ T5773] usb 4-1: selecting invalid altsetting 1 [ 149.891869][ T5773] dvb_ttusb_budget: ttusb_init_controller: error [ 149.898646][ T5773] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 151.260521][ T5773] DVB: Unable to find symbol stv0299_attach() [ 151.560456][ T5773] DVB: Unable to find symbol tda8083_attach() [ 151.576463][ T5773] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 152.242031][ T6224] loop1: detected capacity change from 0 to 1024 [ 152.357632][ T5773] usb 4-1: USB disconnect, device number 2 [ 152.375750][ T6224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.529690][ T6224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.601831][ T6224] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 153.980034][ T6238] loop0: detected capacity change from 0 to 4096 [ 153.992152][ T6237] netlink: set zone limit has 8 unknown bytes [ 154.030883][ T6224] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 154.651744][ T6244] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.877389][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.753074][ T6267] tipc: New replicast peer: 255.255.255.255 [ 159.760652][ T6267] tipc: Enabled bearer , priority 10 [ 159.771252][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 160.372096][ T5773] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 160.674225][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 160.702479][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.086785][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.800963][ T5773] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 161.884753][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.194526][ T5773] usb 4-1: config 0 descriptor?? [ 162.221525][ T5773] usb 4-1: can't set config #0, error -71 [ 162.257586][ T5773] usb 4-1: USB disconnect, device number 3 [ 162.285781][ T6282] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 166.430613][ T6298] 8021q: VLANs not supported on hsr0 [ 167.987754][ T5842] IPVS: starting estimator thread 0... [ 169.070608][ T6319] IPVS: using max 33 ests per chain, 79200 per kthread [ 170.484637][ T6328] loop1: detected capacity change from 0 to 512 [ 170.639814][ T6328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.690583][ T6328] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.907572][ T6333] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 171.924172][ T6333] __quota_error: 10 callbacks suppressed [ 171.924190][ T6333] Quota error (device loop1): write_blk: dquota write failed [ 171.937869][ T6333] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 171.947790][ T6333] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.103: Failed to acquire dquot type 0 [ 172.119154][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.359888][ T6339] tipc: Started in network mode [ 172.365103][ T6339] tipc: Node identity 4, cluster identity 4711 [ 172.371934][ T6339] tipc: Node number set to 4 [ 172.980726][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 173.586227][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.594674][ T9] usb 1-1: config 0 has no interface number 0 [ 174.426905][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 175.852617][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.521101][ T9] usb 1-1: Product: syz [ 176.525588][ T9] usb 1-1: Manufacturer: syz [ 176.530592][ T9] usb 1-1: SerialNumber: syz [ 176.537420][ T9] usb 1-1: config 0 descriptor?? [ 176.650741][ T9] usb 1-1: can't set config #0, error -71 [ 176.685410][ T9] usb 1-1: USB disconnect, device number 2 [ 179.523909][ T6370] loop3: detected capacity change from 0 to 4096 [ 179.683477][ T6381] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.874401][ T6392] loop1: detected capacity change from 0 to 512 [ 182.039331][ T6392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.092208][ T6392] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.735247][ T6398] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 183.751039][ T6398] Quota error (device loop1): write_blk: dquota write failed [ 183.761761][ T6398] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 183.772630][ T6398] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.115: Failed to acquire dquot type 0 [ 185.315323][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.110312][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.300366][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 187.323715][ T23] usb 3-1: no configurations [ 187.343352][ T23] usb 3-1: can't read configurations, error -22 [ 187.593132][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.706260][ T6425] geneve2: entered promiscuous mode [ 187.712210][ T6425] geneve2: entered allmulticast mode [ 188.407152][ T6429] loop0: detected capacity change from 0 to 512 [ 188.416210][ T6429] EXT4-fs: Ignoring removed nobh option [ 188.560745][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 188.596275][ T23] usb 3-1: no configurations [ 188.602339][ T6429] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.123: iget: bad i_size value: 38620345925642 [ 188.615444][ T23] usb 3-1: can't read configurations, error -22 [ 189.261494][ T6433] ufs: You didn't specify the type of your ufs filesystem [ 189.261494][ T6433] [ 189.261494][ T6433] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 189.261494][ T6433] [ 189.261494][ T6433] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 189.292631][ T6433] ufs: ufstype=old is supported read-only [ 189.299590][ T6433] syz.1.122: attempt to access beyond end of device [ 189.299590][ T6433] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 189.790455][ T23] usb usb3-port1: attempt power cycle [ 190.118352][ T6429] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.123: couldn't read orphan inode 15 (err -117) [ 190.153609][ T6429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.447734][ T6439] loop2: detected capacity change from 0 to 512 [ 191.169243][ T6439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.780898][ T6439] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.260433][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.885451][ T6454] tipc: Started in network mode [ 192.890675][ T6454] tipc: Node identity ac14140f, cluster identity 4711 [ 192.898241][ T6454] tipc: New replicast peer: 255.255.255.255 [ 192.907804][ T6454] tipc: Enabled bearer , priority 10 [ 192.936706][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 193.020529][ T6451] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 193.039304][ T6451] Quota error (device loop2): write_blk: dquota write failed [ 193.047962][ T6451] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 193.058233][ T6451] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.125: Failed to acquire dquot type 0 [ 193.605844][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.024852][ T23] tipc: Node number set to 2886997007 [ 194.655517][ T6461] loop0: detected capacity change from 0 to 512 [ 194.744315][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.754711][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.824206][ T6461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.842645][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 194.873461][ T6461] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.890875][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.000923][ T6469] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 196.418714][ T6475] Quota error (device loop0): write_blk: dquota write failed [ 196.427186][ T6475] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 196.437586][ T6475] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.128: Failed to acquire dquot type 0 [ 196.612597][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.658433][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.694070][ T6483] loop0: detected capacity change from 0 to 128 [ 197.797557][ T6483] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.883705][ T6483] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.098273][ T6487] fuse: Bad value for 'fd' [ 200.185014][ T6495] mkiss: ax0: crc mode is auto. [ 200.681132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.268048][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.417936][ T6500] netlink: 36 bytes leftover after parsing attributes in process `syz.3.136'. [ 202.235615][ T6505] loop0: detected capacity change from 0 to 1024 [ 202.321617][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 202.955396][ T6505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.133848][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 203.133982][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 203.141078][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 203.150250][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 203.164164][ T6505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.023746][ T6518] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 205.720940][ T5775] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 205.729744][ T5775] Bluetooth: hci3: Injecting HCI hardware error event [ 205.915636][ T5778] Bluetooth: hci3: hardware error 0x00 [ 205.921882][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.983644][ T6522] loop3: detected capacity change from 0 to 512 [ 207.197614][ T6522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.358300][ T6522] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.156553][ T5778] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 208.655917][ T6535] vivid-000: kernel_thread() failed [ 209.678352][ T6543] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 209.695270][ T6543] Quota error (device loop3): write_blk: dquota write failed [ 209.703374][ T6543] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 209.713857][ T6543] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.143: Failed to acquire dquot type 0 [ 210.019340][ T6545] geneve2: entered promiscuous mode [ 210.025226][ T6545] geneve2: entered allmulticast mode [ 210.563958][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.129625][ T6548] loop0: detected capacity change from 0 to 512 [ 211.281334][ T6548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.410402][ T6548] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.322226][ T6559] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 212.337141][ T6559] Quota error (device loop0): write_blk: dquota write failed [ 212.344893][ T6559] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 212.355808][ T6559] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.147: Failed to acquire dquot type 0 [ 212.671095][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.105062][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.131384][ T6561] bond0: (slave rose0): Enslaving as an active interface with an up link [ 214.177169][ T6576] ip6erspan0: entered promiscuous mode [ 214.414155][ T5773] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 214.650430][ T5773] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.670694][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.678766][ T5773] usb 2-1: Product: syz [ 214.698428][ T5773] usb 2-1: Manufacturer: syz [ 214.704507][ T5773] usb 2-1: SerialNumber: syz [ 214.731582][ T5773] usb 2-1: config 0 descriptor?? [ 215.179464][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 215.404575][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 215.810751][ T5773] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 217.532175][ T5773] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110 [ 217.651843][ T6612] loop3: detected capacity change from 0 to 512 [ 217.910016][ T6612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.006928][ T6612] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.417084][ T6621] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 218.432708][ T6621] Quota error (device loop3): write_blk: dquota write failed [ 218.440319][ T6621] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 218.451287][ T6621] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.158: Failed to acquire dquot type 0 [ 219.271509][ T5771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.283370][ T5771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.291388][ T5771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.301445][ T5771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.312892][ T5771] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.323034][ T5771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.339359][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.884131][ T6631] dns_resolver: Unsupported server list version (6) [ 220.436451][ T6618] vxcan1 speed is unknown, defaulting to 1000 [ 221.651297][ T5778] Bluetooth: hci4: command tx timeout [ 221.910246][ T5773] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 222.646141][ T9] usb 2-1: USB disconnect, device number 2 [ 222.681787][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 222.722669][ T5773] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.805673][ T5773] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.836152][ T5938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.867834][ T5773] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 222.888397][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.957743][ T5773] usb 1-1: config 0 descriptor?? [ 223.054922][ T5938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.089875][ T6647] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 223.233859][ T5938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.709416][ T5778] Bluetooth: hci4: command tx timeout [ 223.886796][ T5938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.995392][ T5842] usb 1-1: USB disconnect, device number 3 [ 224.054113][ T6618] chnl_net:caif_netlink_parms(): no params data found [ 225.313314][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.321503][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.328848][ T6618] bridge_slave_0: entered allmulticast mode [ 225.337193][ T6618] bridge_slave_0: entered promiscuous mode [ 225.887530][ T5778] Bluetooth: hci4: command tx timeout [ 226.051742][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.345424][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.358928][ T6618] bridge_slave_1: entered allmulticast mode [ 226.370993][ T6618] bridge_slave_1: entered promiscuous mode [ 226.395541][ T5807] IPVS: starting estimator thread 0... [ 226.455300][ T6618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.010416][ T6684] IPVS: using max 17 ests per chain, 40800 per kthread [ 227.014252][ T6688] loop0: detected capacity change from 0 to 1024 [ 227.018572][ T6618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.901058][ T6696] (null): rxe_set_mtu: Set mtu to 256 [ 227.908398][ T6696] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 227.934232][ T27] audit: type=1326 audit(1774878087.976:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e5b9c819 code=0x7ffc0000 [ 227.987081][ T27] audit: type=1326 audit(1774878087.986:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e5b9c819 code=0x7ffc0000 [ 228.010997][ T27] audit: type=1326 audit(1774878087.986:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe4e5b9c819 code=0x7ffc0000 [ 228.081973][ T5778] Bluetooth: hci4: command tx timeout [ 228.212422][ T5938] tipc: Disabling bearer [ 228.224884][ T5938] tipc: Left network mode [ 228.307996][ T6618] team0: Port device team_slave_0 added [ 228.310231][ T27] audit: type=1326 audit(1774878087.986:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e5b9c819 code=0x7ffc0000 [ 228.362246][ T41] hfsplus: b-tree write err: -5, ino 25 [ 228.384968][ T27] audit: type=1326 audit(1774878087.986:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e5b9c819 code=0x7ffc0000 [ 228.408679][ T27] audit: type=1326 audit(1774878087.986:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fe4e5b9c819 code=0x7ffc0000 [ 228.437360][ T41] hfsplus: b-tree write err: -5, ino 4 [ 228.528103][ T27] audit: type=1326 audit(1774878087.986:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e5b9c819 code=0x7ffc0000 [ 228.573855][ T27] audit: type=1326 audit(1774878087.986:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e5b9c819 code=0x7ffc0000 [ 228.600970][ T41] hfsplus: b-tree write err: -5, ino 2 [ 228.606866][ T41] hfsplus: b-tree write err: -5, ino 26 [ 228.616260][ T6618] team0: Port device team_slave_1 added [ 229.623385][ T27] audit: type=1326 audit(1774878087.986:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe4e5b9c819 code=0x7ffc0000 [ 229.675156][ T27] audit: type=1326 audit(1774878087.986:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e5b9c819 code=0x7ffc0000 [ 229.723194][ T6707] loop0: detected capacity change from 0 to 512 [ 229.881093][ T6707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.988880][ T6707] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.178945][ T6716] binder: 6708:6716 ioctl c0306201 2000000004c0 returned -14 [ 230.939106][ T6719] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 230.962585][ T6719] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.171: Failed to acquire dquot type 0 [ 231.864749][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.007506][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.020871][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.691446][ T6618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.706121][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.714011][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.787021][ T6618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.250672][ T6732] nft_compat: unsupported protocol 5 [ 234.685838][ T6739] loop2: detected capacity change from 0 to 512 [ 234.781379][ T6739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.794333][ T6739] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.811164][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.831774][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.109460][ T6731] geneve2: left promiscuous mode [ 235.118905][ T6731] ip6erspan0: left promiscuous mode [ 235.862246][ T6751] loop0: detected capacity change from 0 to 512 [ 235.885634][ T6754] loop3: detected capacity change from 0 to 512 [ 235.897455][ T6751] EXT4-fs: Ignoring removed nobh option [ 235.920945][ T6754] EXT4-fs: Ignoring removed nobh option [ 236.070098][ T6754] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.180: iget: bad i_size value: 38620345925642 [ 236.095375][ T6751] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.179: iget: bad i_size value: 38620345925642 [ 236.156327][ T6618] hsr_slave_0: entered promiscuous mode [ 236.180170][ T6751] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.179: couldn't read orphan inode 15 (err -117) [ 236.192914][ T6754] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.180: couldn't read orphan inode 15 (err -117) [ 236.241022][ T6618] hsr_slave_1: entered promiscuous mode [ 236.260469][ T6754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.275025][ T6751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.287779][ T6618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.296895][ T6618] Cannot create hsr debugfs directory [ 236.306986][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.379289][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.399373][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.120292][ T6776] overlayfs: failed to resolve './file0/file0': -2 [ 239.488231][ T6778] overlayfs: failed to resolve './file1': -2 [ 239.799104][ T6770] xt_hashlimit: size too large, truncated to 1048576 [ 241.022554][ T6784] tipc: Started in network mode [ 241.040270][ T6784] tipc: Node identity ac14140f, cluster identity 4711 [ 241.047883][ T6784] tipc: New replicast peer: 255.255.255.255 [ 241.090944][ T6784] tipc: Enabled bearer , priority 10 [ 241.319465][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 242.256104][ T5903] tipc: Node number set to 2886997007 [ 242.556151][ T6618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.706516][ T6618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.744887][ T6618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.804833][ T6618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.158196][ T5938] hsr_slave_0: left promiscuous mode [ 243.261510][ T5938] hsr_slave_1: left promiscuous mode [ 243.275371][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.428765][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.545162][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.635393][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.781184][ T5938] bridge_slave_1: left allmulticast mode [ 243.801078][ T5938] bridge_slave_1: left promiscuous mode [ 243.808527][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.836257][ T5938] bridge_slave_0: left allmulticast mode [ 243.843040][ T5938] bridge_slave_0: left promiscuous mode [ 243.848852][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.891989][ T5938] veth1_macvtap: left promiscuous mode [ 243.898955][ T5938] veth0_macvtap: left promiscuous mode [ 243.905679][ T5938] veth1_vlan: left promiscuous mode [ 243.911545][ T5938] veth0_vlan: left promiscuous mode [ 244.066729][ T5938] infiniband syz2: set down [ 244.617754][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 244.665166][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 244.714964][ T5938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.765137][ T5938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.993714][ T140] smc: removing ib device syz2 [ 245.258874][ T5938] bond0 (unregistering): Released all slaves [ 245.440658][ T6810] tipc: New replicast peer: 255.255.255.255 [ 245.447280][ T6810] tipc: Enabled bearer , priority 10 [ 245.455174][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 245.597406][ T788] vxcan1 speed is unknown, defaulting to 1000 [ 245.839557][ T6618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.909028][ T6618] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.968543][ T4471] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.975809][ T4471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.010568][ T4471] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.017777][ T4471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.537803][ T6618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.958214][ T6618] veth0_vlan: entered promiscuous mode [ 246.995361][ T6618] veth1_vlan: entered promiscuous mode [ 247.032004][ T6618] veth0_macvtap: entered promiscuous mode [ 247.044862][ T6618] veth1_macvtap: entered promiscuous mode [ 247.077568][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.096617][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.107295][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.123496][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.141349][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.157613][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.168725][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.187039][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.198724][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.211779][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.238088][ T6618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.247779][ T6618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.265138][ T6618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.275983][ T6618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.416320][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.439534][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.485165][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.495503][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.715773][ T6873] geneve2: entered promiscuous mode [ 248.721133][ T6873] geneve2: entered allmulticast mode [ 249.326683][ T6877] dns_resolver: Unsupported server list version (6) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 250.447362][ T6891] loop3: detected capacity change from 0 to 512 [ 250.457177][ T6891] EXT4-fs: Ignoring removed nobh option [ 250.558897][ T6891] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.189: iget: bad i_size value: 38620345925642 [ 250.587643][ T6895] loop2: detected capacity change from 0 to 512 [ 250.638167][ T6891] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.189: couldn't read orphan inode 15 (err -117) [ 250.786436][ T6891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.174704][ T6891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.645791][ T5938] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.843612][ T5938] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.012413][ T5938] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.213796][ T5938] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.490344][ T5938] tipc: Disabling bearer [ 252.522978][ T5938] tipc: Left network mode [ 253.598447][ T5938] hsr_slave_0: left promiscuous mode [ 253.605501][ T5938] hsr_slave_1: left promiscuous mode [ 253.615091][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.624774][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.634657][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.642601][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.654378][ T5938] bridge_slave_1: left allmulticast mode [ 253.660405][ T5938] bridge_slave_1: left promiscuous mode [ 253.666210][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.676177][ T5938] bridge_slave_0: left allmulticast mode [ 253.682473][ T5938] bridge_slave_0: left promiscuous mode [ 253.688347][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.718850][ T5938] veth1_macvtap: left promiscuous mode [ 253.726962][ T5938] veth0_macvtap: left promiscuous mode [ 253.733530][ T5938] veth1_vlan: left promiscuous mode [ 253.738902][ T5938] veth0_vlan: left promiscuous mode [ 254.404937][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 254.457102][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 254.506119][ T5938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.558840][ T5938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.947277][ T5938] bond0 (unregistering): Released all slaves [ 255.377251][ T5938] IPVS: stop unused estimator thread 0... [ 255.510864][ T5938] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.622715][ T5938] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.687472][ T5938] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.785871][ T5938] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.051261][ T5938] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.085481][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.092050][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.151309][ T5938] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.212957][ T5938] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.297899][ T5938] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.555247][ T5938] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.638613][ T5938] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.745598][ T5938] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.814896][ T5938] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.008209][ T5938] tipc: Disabling bearer [ 257.014994][ T5938] tipc: Left network mode [ 257.029641][ T5938] tipc: Disabling bearer [ 257.035191][ T5938] tipc: Left network mode [ 259.189368][ T5938] hsr_slave_0: left promiscuous mode [ 259.196236][ T5938] hsr_slave_1: left promiscuous mode [ 259.203164][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.216951][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.225527][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.236678][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.245824][ T5938] bridge_slave_1: left allmulticast mode [ 259.257082][ T5938] bridge_slave_1: left promiscuous mode [ 259.263842][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.287669][ T5938] bridge_slave_0: left allmulticast mode [ 259.298492][ T5938] bridge_slave_0: left promiscuous mode [ 259.304983][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.326608][ T5938] hsr_slave_0: left promiscuous mode [ 259.338500][ T5938] hsr_slave_1: left promiscuous mode [ 259.347148][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.358617][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.367973][ T5938] bridge_slave_1: left allmulticast mode [ 259.377670][ T5938] bridge_slave_1: left promiscuous mode [ 259.384902][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.402060][ T5938] bridge_slave_0: left allmulticast mode [ 259.407781][ T5938] bridge_slave_0: left promiscuous mode [ 259.419611][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.442106][ T5938] hsr_slave_0: left promiscuous mode [ 259.448367][ T5938] hsr_slave_1: left promiscuous mode [ 259.461257][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.468714][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.480966][ T5938] bridge_slave_1: left allmulticast mode [ 259.486680][ T5938] bridge_slave_1: left promiscuous mode [ 259.496786][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.508544][ T5938] bridge_slave_0: left allmulticast mode [ 259.518418][ T5938] bridge_slave_0: left promiscuous mode [ 259.524865][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.606692][ T5938] veth1_macvtap: left promiscuous mode [ 259.613182][ T5938] veth0_macvtap: left promiscuous mode [ 259.618815][ T5938] veth1_vlan: left promiscuous mode [ 259.624278][ T5938] veth0_vlan: left promiscuous mode [ 259.632452][ T5938] veth1_macvtap: left promiscuous mode [ 259.638024][ T5938] veth0_macvtap: left promiscuous mode [ 259.643925][ T5938] veth1_vlan: left promiscuous mode [ 259.650608][ T5938] veth0_vlan: left promiscuous mode [ 259.657249][ T5938] veth1_macvtap: left promiscuous mode [ 259.663414][ T5938] veth0_macvtap: left promiscuous mode [ 259.669157][ T5938] veth1_vlan: left promiscuous mode [ 259.674949][ T5938] veth0_vlan: left promiscuous mode