last executing test programs: 2m43.776273179s ago: executing program 3 (id=83): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 2m43.410516302s ago: executing program 3 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20020080, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 2m42.266830555s ago: executing program 3 (id=88): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x29, 0xa, 0x1) fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000280)=""/102, 0x66) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000003c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 2m38.421218932s ago: executing program 3 (id=95): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@i_version}, {@minixdf}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x68) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', 0x101c08a, &(0x7f00000003c0)=ANY=[@ANYBLOB="757466383d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c696f63686172ff65743d63703836362c756e695f78542c77c38be98299d5bb6c34f5136c6174653d302c696f636861727365743d637034080000006f6469722c726f6469722c747a3d5554432c73686f72746e616d653d77696e39352c756e695f786c6174653d312c6e66733d6e6f7374616c655f726f2c726f6469722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c89"], 0x6, 0x2e8, &(0x7f0000001480)="$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") fchmod(r0, 0x3129a07dc7cad350) 2m36.215544971s ago: executing program 3 (id=102): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000010801030000176000002c00000000"], 0x14}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 2m29.112305312s ago: executing program 3 (id=108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0xffbd, 0x0}, 0x2060) 2m28.401754947s ago: executing program 32 (id=108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0xffbd, 0x0}, 0x2060) 1m49.867641254s ago: executing program 1 (id=170): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580), 0x4) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000180)=0x10000, 0x4) sendto$inet6(r0, &(0x7f0000000040)="800037bbd79ba1ce", 0x8, 0x4800, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8953, &(0x7f0000000280)) keyctl$update(0x2, r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x2000006, 0x28011, r5, 0x0) 1m48.340015752s ago: executing program 1 (id=172): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m43.356461342s ago: executing program 1 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 1m41.979662666s ago: executing program 1 (id=184): syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000300000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) 1m39.83360727s ago: executing program 1 (id=192): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000010c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb2ad, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000500)=0x58) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) fanotify_init(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 1m38.901201154s ago: executing program 1 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)=r1}, 0x20) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) 1m23.396508763s ago: executing program 33 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)=r1}, 0x20) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) 18.564848274s ago: executing program 6 (id=362): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001401) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) close(r0) 18.088117367s ago: executing program 6 (id=364): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b59507cbd2247ffa70fecd9562370e831c4a38a98fdb", 0x16, 0x6008880, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$cgroup(0x0, 0x0, 0x0, 0x100802d, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffb) capset(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x800, &(0x7f0000000700)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a", @ANYRESHEX=0x0], 0x0) 16.520081599s ago: executing program 4 (id=368): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) 12.540474428s ago: executing program 6 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.494797552s ago: executing program 4 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158010000000000000076745b686158bbcfe8875afdef00010000000006e2ae"], 0x66) 11.933507173s ago: executing program 5 (id=379): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) 11.536042228s ago: executing program 5 (id=381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 10.012943466s ago: executing program 6 (id=384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 8.429442719s ago: executing program 6 (id=385): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x56) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b59507cbd2247ffa70fecd9562370e831c4a38a98fdb", 0x16, 0x6008880, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$cgroup(0x0, 0x0, 0x0, 0x100802d, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffb) capset(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x800, &(0x7f0000000700)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a", @ANYRESHEX=0x0], 0x0) 8.428853799s ago: executing program 4 (id=386): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) 7.958413981s ago: executing program 5 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000a40)={0x2020}, 0x2020) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 6.243298196s ago: executing program 5 (id=391): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) 5.840139553s ago: executing program 2 (id=393): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xa6, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e45"}, 0x50) 5.661610459s ago: executing program 0 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 5.381167534s ago: executing program 2 (id=395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e85"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 5.263540165s ago: executing program 6 (id=396): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 5.043216785s ago: executing program 2 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001000640000000000000000000000000000014000200fe"], 0x54}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 4.883375179s ago: executing program 5 (id=398): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0802, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='fib_table_lookup\x00', r3}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 4.667223959s ago: executing program 4 (id=399): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000005805000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r3, r5, 0x4, r0}, 0x10) 3.76303297s ago: executing program 0 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10, 0x4, 0x8, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)=r2}, 0x20) 3.666565748s ago: executing program 2 (id=401): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000010801030000176000002c00000000"], 0x14}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 3.333607719s ago: executing program 0 (id=402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.326264549s ago: executing program 4 (id=403): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="dc0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000009000128009000100766c616e0000000080000280040003800c00020000000000020000000c000200540a0000180000000600010000000000580004800c000100000000006a0000000c00010005000000ee9500000c00010003000000018000000c000100220b0000000000000c00010004000000010000000c00010081ae0000010000000c0001008000000000000000240012800b00010062726964676500001400028005002d0001000000080001000400000008000a"], 0xdc}, 0x1, 0xba01}, 0x0) 2.43355319s ago: executing program 2 (id=404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.978766531s ago: executing program 0 (id=405): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xa6, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e45"}, 0x50) 1.751668232s ago: executing program 4 (id=406): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x56) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b59507cbd2247ffa70fecd9562370e831c4a38a98fdb", 0x16, 0x6008880, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$cgroup(0x0, 0x0, 0x0, 0x100802d, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffb) capset(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x800, &(0x7f0000000700)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a", @ANYRESHEX=0x0], 0x0) 1.696101906s ago: executing program 0 (id=407): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x848000000015, 0x805, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xed02}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.695955856s ago: executing program 2 (id=408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0x30, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 391.537274ms ago: executing program 5 (id=409): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) 0s ago: executing program 0 (id=410): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 66.761136][ T4239] cgroup: Unknown subsys name 'net' [ 66.895190][ T4239] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.356081][ T4239] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.795030][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.795027][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.796660][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.811669][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.820654][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.826303][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.831773][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.839218][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.846779][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.853234][ T4264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.859357][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.866853][ T4264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.881704][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.881955][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.889286][ T4264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.897006][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.904769][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.911298][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.918840][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.924338][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.931098][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.938395][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.945700][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.959766][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.967585][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.987670][ T4267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.995089][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.002897][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.010455][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.018279][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.465483][ T4258] chnl_net:caif_netlink_parms(): no params data found [ 70.484650][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 70.623033][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 70.636575][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 70.697251][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.707724][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.721471][ T4258] device bridge_slave_0 entered promiscuous mode [ 70.736996][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.744562][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.752673][ T4258] device bridge_slave_1 entered promiscuous mode [ 70.760621][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.767725][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.775962][ T4253] device bridge_slave_0 entered promiscuous mode [ 70.814171][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.821461][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.830331][ T4253] device bridge_slave_1 entered promiscuous mode [ 70.863348][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 70.885921][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.925713][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.936684][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.979318][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.997209][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.004843][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.013138][ T4250] device bridge_slave_0 entered promiscuous mode [ 71.021475][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.028832][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.036686][ T4252] device bridge_slave_0 entered promiscuous mode [ 71.068787][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.076085][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.084250][ T4250] device bridge_slave_1 entered promiscuous mode [ 71.091616][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.099555][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.107498][ T4252] device bridge_slave_1 entered promiscuous mode [ 71.119313][ T4258] team0: Port device team_slave_0 added [ 71.156317][ T4258] team0: Port device team_slave_1 added [ 71.173109][ T4253] team0: Port device team_slave_0 added [ 71.203659][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.214797][ T4253] team0: Port device team_slave_1 added [ 71.238676][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.258608][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.276941][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.284237][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.292760][ T4251] device bridge_slave_0 entered promiscuous mode [ 71.301853][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.320907][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.327892][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.354850][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.376634][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.383771][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.409982][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.424846][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426458][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.431588][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.444741][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.471382][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.482969][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.490383][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.498930][ T4251] device bridge_slave_1 entered promiscuous mode [ 71.514986][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.522215][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.548314][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.592980][ T4250] team0: Port device team_slave_0 added [ 71.604964][ T4252] team0: Port device team_slave_0 added [ 71.613254][ T4252] team0: Port device team_slave_1 added [ 71.638753][ T4250] team0: Port device team_slave_1 added [ 71.646424][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.659035][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.711492][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.718831][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.745048][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.765030][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.772644][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.799009][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.827205][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.834293][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.860307][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.880806][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.887791][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.914455][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.929983][ T4251] team0: Port device team_slave_0 added [ 71.945018][ T4253] device hsr_slave_0 entered promiscuous mode [ 71.952040][ T4253] device hsr_slave_1 entered promiscuous mode [ 71.967200][ T4258] device hsr_slave_0 entered promiscuous mode [ 71.974263][ T4258] device hsr_slave_1 entered promiscuous mode [ 71.981343][ T4258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.989549][ T4258] Cannot create hsr debugfs directory [ 71.996295][ T4251] team0: Port device team_slave_1 added [ 72.059545][ T4266] Bluetooth: hci4: command tx timeout [ 72.059560][ T4263] Bluetooth: hci0: command tx timeout [ 72.073216][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.080767][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.107196][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.138282][ T4266] Bluetooth: hci3: command tx timeout [ 72.138484][ T4267] Bluetooth: hci2: command tx timeout [ 72.143937][ T4266] Bluetooth: hci1: command tx timeout [ 72.160242][ T4252] device hsr_slave_0 entered promiscuous mode [ 72.167067][ T4252] device hsr_slave_1 entered promiscuous mode [ 72.174478][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.182215][ T4252] Cannot create hsr debugfs directory [ 72.188494][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.195470][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.222564][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.258805][ T4250] device hsr_slave_0 entered promiscuous mode [ 72.265676][ T4250] device hsr_slave_1 entered promiscuous mode [ 72.272855][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.280733][ T4250] Cannot create hsr debugfs directory [ 72.375518][ T4251] device hsr_slave_0 entered promiscuous mode [ 72.382975][ T4251] device hsr_slave_1 entered promiscuous mode [ 72.391018][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.398965][ T4251] Cannot create hsr debugfs directory [ 72.680566][ T4253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.694190][ T4253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.704928][ T4253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.722981][ T4253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.770883][ T4252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.802964][ T4252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.812958][ T4252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.836305][ T4252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.884295][ T4250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.905377][ T4250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.927492][ T4250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.946285][ T4250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.000603][ T4258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.030949][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.040542][ T4258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.051092][ T4258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.082835][ T4258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.122179][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.132755][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.144413][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.164678][ T4251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.174671][ T4251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.185249][ T4251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.202519][ T4251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.222401][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.235937][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.245320][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.254749][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.262230][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.274981][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.313428][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.323208][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.332628][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.339907][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.348024][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.357419][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.387605][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.395070][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.405695][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.428940][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.446197][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.457363][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.469784][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.479225][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.495181][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.522103][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.530812][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.542567][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.552819][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.561651][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.568791][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.583052][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.594706][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.617957][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.626414][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.637997][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.646786][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.660527][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.669653][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.676745][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.684694][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.693818][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.723171][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.731159][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.745552][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.816385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.827634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.837691][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.844882][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.854892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.871347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.883785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.892869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.902639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.911303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.924631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.933374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.941751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.950768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.960046][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.967124][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.975095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.998991][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.016824][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.030111][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.049214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.059946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.070371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.080869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.097243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.114474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.132884][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.140158][ T4266] Bluetooth: hci0: command tx timeout [ 74.140213][ T4267] Bluetooth: hci4: command tx timeout [ 74.162894][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.172164][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.204016][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.216520][ T4258] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.219379][ T4267] Bluetooth: hci2: command tx timeout [ 74.229456][ T4263] Bluetooth: hci3: command tx timeout [ 74.229466][ T4266] Bluetooth: hci1: command tx timeout [ 74.242910][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.257195][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.267725][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.281481][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.293997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.306713][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.323671][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.331810][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.342568][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.352203][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.371188][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.380338][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.391415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.400721][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.407827][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.416649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.472762][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.481992][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.493321][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.500490][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.515114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.524588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.541085][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.550626][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.560158][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.567240][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.575211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.584860][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.594090][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.601276][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.609294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.620159][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.650254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.660396][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.669728][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.679580][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.688763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.699673][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.709085][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.717771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.727182][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.736136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.769872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.782846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.792273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.803133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.812648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.822054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.830904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.838879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.846465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.855686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.879289][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.893630][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.904904][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.916451][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.929422][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.939366][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.953743][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.991845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.010930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.047364][ T4253] device veth0_vlan entered promiscuous mode [ 75.055944][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.072438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.092287][ T4253] device veth1_vlan entered promiscuous mode [ 75.175516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.204144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.219600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.243793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.272496][ T4253] device veth0_macvtap entered promiscuous mode [ 75.291288][ T4253] device veth1_macvtap entered promiscuous mode [ 75.326485][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.346776][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.357052][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.372531][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.406819][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.425020][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.437523][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.462021][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.483042][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.508699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.538956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.563359][ T4253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.575986][ T4253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.585478][ T4253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.595067][ T4253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.649235][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.670901][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.678212][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.685768][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.693527][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.709276][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.722714][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.732329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.766881][ T4250] device veth0_vlan entered promiscuous mode [ 75.782821][ T4250] device veth1_vlan entered promiscuous mode [ 75.796238][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.807239][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.816691][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.826336][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.834944][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.931280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.940107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.950869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.960337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.969490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.979897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.988955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.006061][ T4258] device veth0_vlan entered promiscuous mode [ 76.025794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.034557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.044113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.053172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.064677][ T4250] device veth0_macvtap entered promiscuous mode [ 76.084784][ T4252] device veth0_vlan entered promiscuous mode [ 76.093562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.100810][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.100882][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.119060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.126946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.135644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.145012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.154093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.162889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.171801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.180667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.189667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.197554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.205488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.215702][ T4251] device veth0_vlan entered promiscuous mode [ 76.222008][ T4263] Bluetooth: hci4: command tx timeout [ 76.228340][ T4267] Bluetooth: hci0: command tx timeout [ 76.233833][ T4250] device veth1_macvtap entered promiscuous mode [ 76.256062][ T4252] device veth1_vlan entered promiscuous mode [ 76.277851][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.279386][ T4258] device veth1_vlan entered promiscuous mode [ 76.297220][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.308244][ T4267] Bluetooth: hci3: command tx timeout [ 76.313704][ T4267] Bluetooth: hci2: command tx timeout [ 76.319565][ T4263] Bluetooth: hci1: command tx timeout [ 76.335606][ T4252] device veth0_macvtap entered promiscuous mode [ 76.350270][ T4251] device veth1_vlan entered promiscuous mode [ 76.360695][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.371832][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.385011][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.393194][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.402258][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.410625][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.418927][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.430609][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.439487][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.447722][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.455811][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.465166][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.475506][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.484421][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.493649][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.519869][ T4252] device veth1_macvtap entered promiscuous mode [ 76.528815][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.537403][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.548810][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.560366][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.577070][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.589829][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.602816][ T4258] device veth0_macvtap entered promiscuous mode [ 76.615753][ T4258] device veth1_macvtap entered promiscuous mode [ 76.626295][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.635538][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.644199][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.652861][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.662263][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.701982][ T4250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.714150][ T4250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.724639][ T4250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.739443][ T4250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.761001][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.772855][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.784448][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.795406][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.807964][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.821345][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.840910][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.855007][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.873031][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.885019][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.901791][ T4252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.916513][ T4252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.928658][ T4252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.951706][ T4252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.974791][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.984271][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.994585][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.004724][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.750265][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.770706][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.784496][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.797894][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.811567][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.852237][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.870985][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.055269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.064703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.079519][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.236279][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.247920][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.264370][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.275353][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.294098][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.304668][ T4267] Bluetooth: hci0: command tx timeout [ 78.310228][ T4267] Bluetooth: hci4: command tx timeout [ 78.323763][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.342787][ T4251] device veth0_macvtap entered promiscuous mode [ 78.378474][ T4268] Bluetooth: hci2: command tx timeout [ 78.384038][ T4268] Bluetooth: hci1: command tx timeout [ 78.389906][ T4267] Bluetooth: hci3: command tx timeout [ 78.562999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.573148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.583848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.594616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.607588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.620949][ T4258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.637650][ T4258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.647333][ T4258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.658975][ T4258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.685291][ T4251] device veth1_macvtap entered promiscuous mode [ 78.764166][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.775384][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.792299][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.806819][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.817031][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.828313][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.838785][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.849540][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.861201][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.872215][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.885548][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.916375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.935648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.946965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.963053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.004967][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.022813][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.032918][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.043738][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.053845][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.064894][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.074864][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.085793][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.097967][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.121565][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.124485][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.138225][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.146605][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.147433][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.161933][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.176902][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.186671][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.217486][ T4251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.227565][ T4251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.237462][ T4251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.246487][ T4251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.299396][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.307460][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.373861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.390447][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.412497][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.442737][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.464044][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.466326][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.483257][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.516819][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.598609][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.631542][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.683175][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.746532][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.760695][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.813001][ T4347] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.952467][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 80.987880][ T4357] loop4: detected capacity change from 0 to 512 [ 81.049699][ T4357] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 81.135143][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 81.146345][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 81.273510][ T4357] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.9: iget: bad i_size value: -67835469387268086 [ 81.290913][ T4357] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.9: couldn't read orphan inode 15 (err -117) [ 81.309017][ T4357] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.325496][ T4357] ext2 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.499586][ T4376] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.9: Directory hole found for htree leaf block 0 [ 83.717035][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 84.981538][ T4400] loop4: detected capacity change from 0 to 1024 [ 85.234488][ T4400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.215427][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 86.240438][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 86.424009][ T4420] loop0: detected capacity change from 0 to 512 [ 86.458743][ T4420] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 86.480577][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 86.514118][ T4420] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.26: iget: bad i_size value: -67835469387268086 [ 86.565091][ T4420] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.26: couldn't read orphan inode 15 (err -117) [ 86.618027][ T4420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.734241][ T4420] ext2 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.852508][ T27] cfg80211: failed to load regulatory.db [ 87.269248][ T4427] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.26: Directory hole found for htree leaf block 0 [ 87.423006][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 89.123298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.138128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.146348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.154584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.162870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.171129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.179385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.187589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.195927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.204153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.784231][ T4447] netlink: 60 bytes leftover after parsing attributes in process `syz.4.32'. [ 89.935548][ T4447] netlink: 60 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.270940][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 90.354240][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 94.263792][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 94.317283][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 99.583972][ T4535] loop0: detected capacity change from 0 to 512 [ 99.691159][ T4535] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.792340][ T4535] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.840455][ T4535] EXT4-fs (loop0): 1 truncate cleaned up [ 99.860828][ T4535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.812910][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 103.348440][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.458541][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.495237][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.518231][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.553104][ T7] usb 4-1: config 1 has no interface number 0 [ 104.568402][ T7] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.738539][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.762804][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.803250][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 104.873687][ T7] usb 4-1: Product: syz [ 104.878442][ T7] usb 4-1: Manufacturer: syz [ 105.546515][ T7] usb 4-1: SerialNumber: syz [ 105.993476][ T14] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.016772][ T14] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.026196][ T14] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.035424][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.045157][ T14] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.057544][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.108358][ T7] usb 4-1: can't set config #1, error -71 [ 106.156584][ T7] usb 4-1: USB disconnect, device number 2 [ 106.162642][ T14] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.181033][ T4241] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.198246][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.210892][ T4591] loop1: detected capacity change from 0 to 512 [ 106.229221][ T14] usb 5-1: config 0 descriptor?? [ 106.237659][ T4591] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.315804][ T4591] EXT4-fs (loop1): 1 truncate cleaned up [ 106.333106][ T4591] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.448377][ T4241] usb 3-1: Using ep0 maxpacket: 8 [ 106.509090][ T14] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.588574][ T4241] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.160879][ T14] usb 5-1: USB disconnect, device number 2 [ 107.256404][ T4241] usb 3-1: config 179 has no interface number 0 [ 107.264293][ T4241] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 107.275446][ T4241] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 107.287620][ T4241] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 107.301979][ T4241] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 107.318138][ T4241] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.341817][ T14] usblp0: removed [ 107.539290][ T4241] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 107.539345][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.809546][ T4596] tty tty26: ldisc open failed (-12), clearing slot 25 [ 107.933484][ T4258] EXT4-fs (loop1): unmounting filesystem. [ 107.948384][ T4241] usb 3-1: can't set config #179, error -71 [ 107.978421][ T4241] usb 3-1: USB disconnect, device number 2 [ 109.756313][ T4629] loop4: detected capacity change from 0 to 512 [ 109.798814][ T4629] EXT4-fs: Ignoring removed bh option [ 110.079573][ T4629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.526180][ T4629] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.101734][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 111.116472][ T4645] loop3: detected capacity change from 0 to 1024 [ 111.153422][ T4645] EXT4-fs: Ignoring removed orlov option [ 111.181929][ T4645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.275705][ T4645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.307167][ T4651] loop4: detected capacity change from 0 to 512 [ 111.337053][ T4651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.402705][ T4651] EXT4-fs (loop4): 1 truncate cleaned up [ 111.416276][ T4651] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.512212][ T4645] process 'syz.3.88' launched './file0/file0' with NULL argv: empty string added [ 112.977958][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 114.653857][ T4241] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.716615][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 116.170684][ T4681] loop3: detected capacity change from 0 to 1024 [ 116.177864][ T4681] EXT4-fs: Ignoring removed i_version option [ 116.265509][ T26] audit: type=1326 audit(1730905320.957:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4682 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 116.342261][ T26] audit: type=1326 audit(1730905320.997:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4682 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 116.378167][ T26] audit: type=1326 audit(1730905320.997:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4682 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 116.409046][ T4681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.424074][ T26] audit: type=1326 audit(1730905320.997:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4682 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 116.494323][ T26] audit: type=1326 audit(1730905320.997:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4682 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 116.577282][ T4681] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz.3.95: Invalid inode table block 5 in block_group 0 [ 116.582515][ T4688] loop4: detected capacity change from 0 to 512 [ 116.620407][ T4688] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 116.632974][ T26] audit: type=1326 audit(1730905320.997:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4682 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 116.657386][ T4681] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 116.690921][ T4688] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.100: iget: bad i_size value: -67835469387268086 [ 116.698194][ T4691] input: syz0 as /devices/virtual/input/input5 [ 116.719719][ T26] audit: type=1326 audit(1730905320.997:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4682 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 116.742146][ T26] audit: type=1326 audit(1730905320.997:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4682 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 116.768808][ T4681] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #15: comm syz.3.95: mark_inode_dirty error [ 116.779550][ T26] audit: type=1326 audit(1730905321.017:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4682 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 116.804262][ T4681] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz.3.95: Invalid inode table block 5 in block_group 0 [ 116.823551][ T4688] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.100: couldn't read orphan inode 15 (err -117) [ 116.887011][ T26] audit: type=1326 audit(1730905321.017:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4682 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 116.916897][ T4251] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 116.948511][ T4251] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 116.959098][ T4688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.022599][ T4688] ext2 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.057761][ T4251] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 117.319576][ T4251] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 118.523258][ T4251] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error [ 118.717728][ T4699] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.100: Directory hole found for htree leaf block 0 [ 118.801254][ T4371] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm kworker/u4:9: Invalid inode table block 5 in block_group 0 [ 118.841846][ T4698] tty tty29: ldisc open failed (-12), clearing slot 28 [ 118.850799][ T4371] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm kworker/u4:9: Invalid inode table block 5 in block_group 0 [ 118.939968][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 120.535128][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 121.119453][ T4714] fuse: Bad value for 'rootmode' [ 123.677455][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.690377][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.691185][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.937010][ T4716] tty tty23: ldisc open failed (-12), clearing slot 22 [ 124.024787][ T4251] syz-executor (4251) used greatest stack depth: 19640 bytes left [ 124.810635][ T4302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.241478][ T4302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.807594][ T4302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.454836][ T4302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.503110][ T4263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.515740][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.524748][ T4263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.532978][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.541041][ T4263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 126.548877][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.728078][ C0] sched: RT throttling activated [ 129.247853][ T4268] Bluetooth: hci2: command tx timeout [ 130.156182][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 130.156199][ T26] audit: type=1326 audit(1730905334.847:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 130.211068][ T4740] chnl_net:caif_netlink_parms(): no params data found [ 130.272671][ T26] audit: type=1326 audit(1730905334.847:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 130.400866][ T26] audit: type=1326 audit(1730905334.877:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 130.538222][ T26] audit: type=1326 audit(1730905334.887:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 130.698635][ T26] audit: type=1326 audit(1730905334.887:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 130.721523][ T26] audit: type=1326 audit(1730905334.897:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 130.744222][ T26] audit: type=1326 audit(1730905334.897:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 130.766814][ T26] audit: type=1326 audit(1730905334.897:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 130.814796][ T26] audit: type=1326 audit(1730905334.897:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 131.338284][ T4268] Bluetooth: hci2: command tx timeout [ 131.379509][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.386660][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.456453][ T4740] device bridge_slave_0 entered promiscuous mode [ 131.512780][ T26] audit: type=1326 audit(1730905334.897:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 132.489486][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.496639][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.536093][ T4740] device bridge_slave_1 entered promiscuous mode [ 132.658167][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.864511][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.870955][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.939351][ T4740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.968546][ T14] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 133.290076][ T4740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.428649][ T4268] Bluetooth: hci2: command tx timeout [ 135.525254][ T4268] Bluetooth: hci2: command tx timeout [ 135.557746][ T4740] team0: Port device team_slave_0 added [ 135.669591][ T14] usb 1-1: unable to read config index 5 descriptor/start: -71 [ 135.677232][ T14] usb 1-1: can't read configurations, error -71 [ 135.851372][ T4740] team0: Port device team_slave_1 added [ 135.940039][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.947059][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.004742][ T4811] kvm [4810]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 136.045933][ T4740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.085573][ T4302] device hsr_slave_0 left promiscuous mode [ 136.116519][ T4302] device hsr_slave_1 left promiscuous mode [ 136.145665][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.176884][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.216349][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.248395][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.280340][ T4302] device bridge_slave_1 left promiscuous mode [ 136.294946][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.354941][ T4302] device bridge_slave_0 left promiscuous mode [ 136.355222][ T4811] kvm [4810]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 136.374609][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.475455][ T4811] kvm [4810]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 136.485775][ T4302] device veth1_macvtap left promiscuous mode [ 136.508851][ T4302] device veth0_macvtap left promiscuous mode [ 136.536473][ T4302] device veth1_vlan left promiscuous mode [ 136.560082][ T4302] device veth0_vlan left promiscuous mode [ 138.535208][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 138.572515][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 138.610927][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.655309][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.027179][ T4302] bond0 (unregistering): Released all slaves [ 139.122104][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.129250][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.163055][ T4740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.432768][ T4740] device hsr_slave_0 entered promiscuous mode [ 139.489231][ T4740] device hsr_slave_1 entered promiscuous mode [ 139.504287][ T4740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.535184][ T4740] Cannot create hsr debugfs directory [ 139.593346][ T4849] loop2: detected capacity change from 0 to 1024 [ 140.716335][ T4858] loop1: detected capacity change from 0 to 1024 [ 140.784774][ T4849] EXT4-fs (loop2): Test dummy encryption mode enabled [ 140.803823][ T4849] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.925043][ T4849] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 141.015874][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 141.015890][ T26] audit: type=1326 audit(1730905345.707:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 141.072434][ T4740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.463206][ T4740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.989503][ T4740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.664892][ T4858] EXT4-fs: Ignoring removed orlov option [ 142.711611][ T26] audit: type=1326 audit(1730905346.027:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 142.803231][ T26] audit: type=1326 audit(1730905346.037:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 142.854187][ T4858] EXT4-fs (loop1): Test dummy encryption mode enabled [ 142.876250][ T4740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.963138][ T4858] EXT4-fs: failed to create workqueue [ 142.972585][ T26] audit: type=1326 audit(1730905346.077:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 143.031291][ T4858] EXT4-fs (loop1): mount failed [ 143.120609][ T26] audit: type=1326 audit(1730905346.087:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 144.614491][ T4740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.678157][ T26] audit: type=1326 audit(1730905346.137:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 144.702062][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.714946][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.762070][ T4740] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.769836][ T26] audit: type=1326 audit(1730905346.637:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 144.834408][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.878966][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.898153][ T26] audit: type=1326 audit(1730905346.637:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 144.926607][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.933821][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.018899][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.048530][ T26] audit: type=1326 audit(1730905346.697:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 145.109047][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.137283][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.166873][ T4873] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.174109][ T4873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.188839][ T26] audit: type=1326 audit(1730905347.497:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 145.244825][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.285804][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.326918][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.386848][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.429007][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.528102][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.552561][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.583854][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.633358][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.671645][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.709174][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.501989][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.520173][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.759223][ T4740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.102107][ T4956] loop2: detected capacity change from 0 to 256 [ 151.188976][ T4956] ======================================================= [ 151.188976][ T4956] WARNING: The mand mount option has been deprecated and [ 151.188976][ T4956] and is ignored by this kernel. Remove the mand [ 151.188976][ T4956] option from the mount to silence this warning. [ 151.188976][ T4956] ======================================================= [ 152.720247][ T4956] FAT-fs (loop2): Directory bread(block 64) failed [ 152.727168][ T4956] FAT-fs (loop2): Directory bread(block 65) failed [ 152.736240][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.745918][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.754616][ T4956] FAT-fs (loop2): Directory bread(block 66) failed [ 152.817430][ T4956] FAT-fs (loop2): Directory bread(block 67) failed [ 152.845142][ T4956] FAT-fs (loop2): Directory bread(block 68) failed [ 152.858571][ T4956] FAT-fs (loop2): Directory bread(block 69) failed [ 152.866560][ T4956] FAT-fs (loop2): Directory bread(block 70) failed [ 152.874263][ T4956] FAT-fs (loop2): Directory bread(block 71) failed [ 152.881128][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.890448][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.899827][ T4956] FAT-fs (loop2): Directory bread(block 72) failed [ 152.906462][ T4956] FAT-fs (loop2): Directory bread(block 73) failed [ 152.924095][ T4740] device veth0_vlan entered promiscuous mode [ 152.942466][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.963919][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.041726][ T4740] device veth1_vlan entered promiscuous mode [ 153.190872][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.220060][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.306543][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.315511][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.611962][ T4740] device veth0_macvtap entered promiscuous mode [ 153.623135][ T4740] device veth1_macvtap entered promiscuous mode [ 153.759006][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.779824][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.860693][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.907745][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.947539][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.978213][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.008131][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.058113][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.068001][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.147733][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.180897][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.205527][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.231064][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.277553][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.308261][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.328188][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.370316][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.401274][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.415803][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.428438][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.444982][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.483703][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.496314][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 154.517991][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 154.534497][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.553012][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.587178][ T4740] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.608588][ T4740] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.629105][ T4740] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.646812][ T4740] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.329605][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.388907][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.560265][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.670350][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.726837][ T4857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.176718][ T4857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.280521][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 158.401191][ T7] usb 5-1: device descriptor read/all, error -71 [ 158.405083][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.379928][ T5021] loop4: detected capacity change from 0 to 512 [ 159.408337][ T5021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.492075][ T5021] EXT4-fs (loop4): 1 truncate cleaned up [ 159.497799][ T5021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 159.526070][ T5026] loop5: detected capacity change from 0 to 1024 [ 159.586171][ T5026] EXT4-fs: Ignoring removed orlov option [ 159.766191][ T5026] EXT4-fs (loop5): Test dummy encryption mode enabled [ 159.852244][ T5026] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 160.830773][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 161.909279][ T5039] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 161.948434][ T5038] kernel profiling enabled (shift: 17) [ 161.962080][ T5038] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.971395][ T5038] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 161.979796][ T5038] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 162.277576][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 163.360449][ T5068] loop5: detected capacity change from 0 to 512 [ 164.843685][ T5068] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.168: corrupted inode contents [ 164.877743][ T5068] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #3: comm syz.5.168: mark_inode_dirty error [ 164.907541][ T5068] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.168: corrupted inode contents [ 164.925686][ T5068] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.168: mark_inode_dirty error [ 164.944497][ T5076] device pim6reg1 entered promiscuous mode [ 164.945492][ T5068] __quota_error: 1 callbacks suppressed [ 164.945510][ T5068] Quota error (device loop5): write_blk: dquota write failed [ 164.964543][ T5068] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 164.975555][ T5068] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.168: Failed to acquire dquot type 0 [ 165.020549][ T5068] EXT4-fs (loop5): 1 orphan inode deleted [ 165.038156][ T5068] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 165.056012][ T4315] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 165.066459][ T5068] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.088428][ T4315] EXT4-fs error (device loop5): ext4_release_dquot:6824: comm kworker/u4:6: Failed to release dquot type 1 [ 166.191620][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 167.414863][ T5099] loop5: detected capacity change from 0 to 512 [ 167.528202][ T5099] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 167.640209][ T5099] EXT4-fs (loop5): 1 truncate cleaned up [ 167.706257][ T5099] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 169.566558][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 171.262946][ T5134] loop5: detected capacity change from 0 to 512 [ 171.277923][ T5126] loop0: detected capacity change from 0 to 1024 [ 171.424504][ T5134] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.453353][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 171.463772][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 171.518812][ T5134] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.650354][ T5126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.655821][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 172.682973][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 172.861532][ T5160] loop0: detected capacity change from 0 to 512 [ 172.911523][ T5160] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.970419][ T5160] EXT4-fs (loop0): 1 truncate cleaned up [ 172.988808][ T5160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.427409][ T5173] netlink: 'syz.1.192': attribute type 12 has an invalid length. [ 175.676889][ T5160] syz.0.189 (pid 5160) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 175.788195][ T5191] Zero length message leads to an empty skb [ 176.904437][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 176.955007][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 177.030563][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 177.280915][ T5209] loop5: detected capacity change from 0 to 1024 [ 177.414433][ T5209] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 177.713039][ T5220] netlink: 'syz.2.203': attribute type 12 has an invalid length. [ 177.724851][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 179.272444][ T5228] fuse: Unknown parameter '0x0000000000000003' [ 179.349484][ T26] audit: type=1326 audit(1730905384.047:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.5.204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9ffb7e719 code=0x0 [ 179.766573][ T26] audit: type=1326 audit(1730905384.457:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 179.881524][ T26] audit: type=1326 audit(1730905384.487:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 179.995078][ T26] audit: type=1326 audit(1730905384.487:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 180.089868][ T26] audit: type=1326 audit(1730905384.487:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 180.182664][ T26] audit: type=1326 audit(1730905384.487:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x7ffc0000 [ 181.041047][ T5250] loop5: detected capacity change from 0 to 512 [ 181.088174][ T5250] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.219392][ T5250] EXT4-fs (loop5): 1 truncate cleaned up [ 181.225123][ T5250] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 181.306523][ T5254] netlink: 5 bytes leftover after parsing attributes in process `syz.0.210'. [ 181.409478][ T5254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.231332][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 183.309396][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 183.400498][ T5278] loop0: detected capacity change from 0 to 1024 [ 183.509132][ T5278] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.774348][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 184.088359][ T5289] netlink: 'syz.4.216': attribute type 12 has an invalid length. [ 187.434509][ T5310] fuse: Unknown parameter '0x0000000000000003' [ 187.510817][ T26] audit: type=1326 audit(1730905392.207:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz.0.219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x0 [ 188.002208][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 188.078125][ T2180] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 188.338109][ T2180] usb 3-1: Using ep0 maxpacket: 16 [ 188.458417][ T2180] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.497540][ T2180] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.756984][ T5335] loop0: detected capacity change from 0 to 512 [ 188.765728][ T2180] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 188.796155][ T2180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.826502][ T2180] usb 3-1: Product: syz [ 188.870274][ T2180] usb 3-1: Manufacturer: syz [ 188.895241][ T2180] usb 3-1: SerialNumber: syz [ 188.916089][ T2180] usb 3-1: config 0 descriptor?? [ 188.943066][ T5335] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.224: corrupted inode contents [ 188.975534][ T2180] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 189.006066][ T2180] gspca_stv06xx: st6422 sensor detected [ 189.012927][ T5335] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #3: comm syz.0.224: mark_inode_dirty error [ 189.074777][ T5335] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.224: corrupted inode contents [ 189.107141][ T5335] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.224: mark_inode_dirty error [ 189.147712][ T5335] Quota error (device loop0): write_blk: dquota write failed [ 189.185276][ T5335] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 189.243707][ T5335] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.224: Failed to acquire dquot type 0 [ 189.306471][ T5335] EXT4-fs (loop0): 1 orphan inode deleted [ 189.322471][ T4382] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 189.355631][ T5335] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 189.384835][ T4382] EXT4-fs error (device loop0): ext4_release_dquot:6824: comm kworker/u4:10: Failed to release dquot type 1 [ 189.443612][ T5335] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.373014][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 190.538982][ T5352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 190.579611][ T5352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 190.918333][ T2180] STV06xx: probe of 3-1:0.0 failed with error -71 [ 190.975418][ T2180] usb 3-1: USB disconnect, device number 4 [ 191.388846][ T4263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.099605][ T4263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.108073][ T4263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.118108][ T4267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.125806][ T4263] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 192.133664][ T4263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.378983][ T5376] loop5: detected capacity change from 0 to 512 [ 192.415005][ T5376] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.489454][ T5376] EXT4-fs (loop5): 1 truncate cleaned up [ 192.495166][ T5376] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 193.059646][ T5388] loop2: detected capacity change from 0 to 128 [ 193.317212][ T5387] fuse: Unknown parameter '0x0000000000000003' [ 193.916180][ T26] audit: type=1326 audit(1730905398.607:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.4.233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ef0f7e719 code=0x0 [ 194.218594][ T4263] Bluetooth: hci5: command tx timeout [ 194.340427][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.346865][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.910908][ T5362] chnl_net:caif_netlink_parms(): no params data found [ 196.171193][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 196.216826][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 196.298331][ T4265] Bluetooth: hci5: command tx timeout [ 196.375592][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 196.388784][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 196.394973][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 196.401169][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 196.407313][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 196.565235][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.618463][ T5362] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.663982][ T5362] device bridge_slave_0 entered promiscuous mode [ 196.700610][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.734978][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.764255][ T5362] device bridge_slave_1 entered promiscuous mode [ 197.621332][ T5362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.633247][ T5362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.787222][ T5362] team0: Port device team_slave_0 added [ 197.820767][ T5362] team0: Port device team_slave_1 added [ 197.919540][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.992518][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.133618][ T5362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.389704][ T4265] Bluetooth: hci5: command tx timeout [ 198.745021][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.782939][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.859842][ T5362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.004714][ T5430] loop5: detected capacity change from 0 to 512 [ 199.017753][ T5362] device hsr_slave_0 entered promiscuous mode [ 199.038802][ T5432] fuse: Unknown parameter '0x0000000000000003' [ 199.048708][ T5362] device hsr_slave_1 entered promiscuous mode [ 199.068558][ T5362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.087852][ T5362] Cannot create hsr debugfs directory [ 199.117834][ T26] audit: type=1326 audit(1730905403.807:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5431 comm="syz.0.244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b71b7e719 code=0x0 [ 199.183388][ T5430] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.243: corrupted inode contents [ 199.238482][ T5430] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #3: comm syz.5.243: mark_inode_dirty error [ 199.259395][ T5430] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.243: corrupted inode contents [ 199.284587][ T5430] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.243: mark_inode_dirty error [ 199.368988][ T5430] Quota error (device loop5): write_blk: dquota write failed [ 199.376547][ T5430] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 199.423905][ T5430] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.243: Failed to acquire dquot type 0 [ 199.461078][ T5430] EXT4-fs (loop5): 1 orphan inode deleted [ 199.469248][ T4315] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 199.484897][ T5430] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 199.500291][ T4315] EXT4-fs error (device loop5): ext4_release_dquot:6824: comm kworker/u4:6: Failed to release dquot type 1 [ 199.507944][ T5444] loop4: detected capacity change from 0 to 512 [ 199.520244][ T26] audit: type=1326 audit(1730905404.217:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5445 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1b97e719 code=0x7ffc0000 [ 199.548613][ T5430] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.586208][ T26] audit: type=1326 audit(1730905404.217:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5445 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1b97e719 code=0x7ffc0000 [ 199.633986][ T5444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.791282][ T26] audit: type=1326 audit(1730905404.217:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5445 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fdb1b97e719 code=0x7ffc0000 [ 199.795014][ T5444] EXT4-fs (loop4): 1 truncate cleaned up [ 199.824846][ T26] audit: type=1326 audit(1730905404.217:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5445 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1b97e719 code=0x7ffc0000 [ 200.108873][ T5444] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 200.558444][ T4265] Bluetooth: hci5: command tx timeout [ 201.151105][ T26] audit: type=1326 audit(1730905404.217:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5445 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1b97e719 code=0x7ffc0000 [ 201.214823][ T26] audit: type=1326 audit(1730905404.217:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5445 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb1b97e719 code=0x7ffc0000 [ 201.342763][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 201.460509][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 201.666483][ T5362] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.703813][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 201.751448][ T5362] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.811930][ T5362] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.847214][ T5362] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 201.904641][ T5468] syz.2.251[5468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.904809][ T5468] syz.2.251[5468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.326404][ T5362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.348600][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 205.228342][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.236661][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.377389][ T5362] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.442496][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.465813][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.631476][ T5503] fuse: Unknown parameter '0x0000000000000003' [ 205.641748][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.648991][ T4873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.722235][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.743167][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.792186][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.868747][ T4873] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.875918][ T4873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.901567][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.925240][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.935401][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.999117][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.059435][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.083369][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.123086][ T5516] loop5: detected capacity change from 0 to 512 [ 206.135530][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.159406][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.186313][ T5516] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 206.201910][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.229182][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.257775][ T5516] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.263: iget: bad i_size value: -67835469387268086 [ 206.287159][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.294612][ T5516] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.263: couldn't read orphan inode 15 (err -117) [ 206.324805][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 206.338325][ T5516] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 206.352022][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.375032][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 206.380662][ T5516] ext2 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.077071][ T5531] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.263: Directory hole found for htree leaf block 0 [ 207.396676][ T5533] loop0: detected capacity change from 0 to 512 [ 207.527960][ T5533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.590742][ T5533] EXT4-fs (loop0): 1 truncate cleaned up [ 207.596463][ T5533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 207.654700][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 208.527690][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.648678][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.667839][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.677210][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.816924][ T5362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.859975][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 211.001062][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.052915][ T5560] loop5: detected capacity change from 0 to 2048 [ 211.087808][ T5564] netlink: 'syz.2.271': attribute type 4 has an invalid length. [ 211.170370][ T5560] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 211.188441][ T5560] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.277059][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.472291][ T5564] syz.2.271 (5564) used greatest stack depth: 18392 bytes left [ 211.573850][ T5577] fuse: Unknown parameter '0x0000000000000003' [ 212.435624][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 213.657224][ T5602] serio: Serial port ptm0 [ 213.884260][ T5612] loop5: detected capacity change from 0 to 512 [ 213.898757][ T5612] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 214.313693][ T5612] EXT4-fs (loop5): 1 truncate cleaned up [ 214.574045][ T5612] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 214.772961][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.802200][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.845251][ T5362] device veth0_vlan entered promiscuous mode [ 214.928437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.937518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.006518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.058835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.276168][ T5362] device veth1_vlan entered promiscuous mode [ 216.025642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.050771][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.997126][ T4740] EXT4-fs (loop5): unmounting filesystem. [ 217.081070][ T5643] fuse: Unknown parameter '0x0000000000000003' [ 217.319573][ T5362] device veth0_macvtap entered promiscuous mode [ 217.382862][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.407136][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.443250][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.526264][ T5362] device veth1_macvtap entered promiscuous mode [ 217.668643][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.714666][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.765292][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.815774][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.859199][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.890261][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.931364][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.962761][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.997463][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.035411][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.065952][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.094787][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.126777][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.167722][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.226573][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.236584][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.247220][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.257942][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.269084][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.279218][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.309308][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.551030][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.922790][ T5362] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.960486][ T5362] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.990012][ T5362] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.016790][ T5362] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.047866][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.077140][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.102330][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.118984][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.861434][ T5115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.903740][ T5115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.999012][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.030009][ T46] device hsr_slave_0 left promiscuous mode [ 220.039642][ T46] device hsr_slave_1 left promiscuous mode [ 220.062135][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.113912][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.179682][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.215899][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.633620][ T46] device bridge_slave_1 left promiscuous mode [ 220.755333][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.897044][ T46] device bridge_slave_0 left promiscuous mode [ 220.934178][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.088737][ T5700] fuse: Unknown parameter '0x0000000000000003' [ 221.159769][ T46] device veth1_macvtap left promiscuous mode [ 221.165888][ T46] device veth0_macvtap left promiscuous mode [ 221.175931][ T46] device veth1_vlan left promiscuous mode [ 221.199835][ T46] device veth0_vlan left promiscuous mode [ 221.206566][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 221.206579][ T26] audit: type=1326 audit(1730905425.897:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.4.294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ef0f7e719 code=0x0 [ 221.293196][ T5705] loop2: detected capacity change from 0 to 512 [ 221.400527][ T4719] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.541948][ T46] team0 (unregistering): Port device team_slave_1 removed [ 224.611395][ T46] team0 (unregistering): Port device team_slave_0 removed [ 224.657643][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.701077][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.157273][ T46] bond0 (unregistering): Released all slaves [ 225.256076][ T5115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.304906][ T5115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.439022][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.654917][ T5752] loop6: detected capacity change from 0 to 1024 [ 225.741715][ T5752] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 226.715279][ T5759] loop4: detected capacity change from 0 to 1024 [ 226.782879][ T5759] EXT4-fs (loop4): Test dummy encryption mode enabled [ 226.803121][ T5362] EXT4-fs (loop6): unmounting filesystem. [ 226.818420][ T5759] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 226.838464][ T5759] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 227.039143][ T5769] loop5: detected capacity change from 0 to 256 [ 228.982728][ T5769] FAT-fs (loop5): Directory bread(block 64) failed [ 229.124258][ T5769] FAT-fs (loop5): Directory bread(block 65) failed [ 229.132498][ T5769] FAT-fs (loop5): Directory bread(block 66) failed [ 229.150468][ T5769] FAT-fs (loop5): Directory bread(block 67) failed [ 229.167506][ T5769] FAT-fs (loop5): Directory bread(block 68) failed [ 229.312966][ T5769] FAT-fs (loop5): Directory bread(block 69) failed [ 229.371950][ T5769] FAT-fs (loop5): Directory bread(block 70) failed [ 229.398179][ T5769] FAT-fs (loop5): Directory bread(block 71) failed [ 229.996245][ T5769] FAT-fs (loop5): Directory bread(block 72) failed [ 230.009394][ T5786] netlink: 60 bytes leftover after parsing attributes in process `syz.6.308'. [ 230.034009][ T5786] netlink: 60 bytes leftover after parsing attributes in process `syz.6.308'. [ 230.048138][ T5769] FAT-fs (loop5): Directory bread(block 73) failed [ 230.163881][ T5791] fuse: Unknown parameter '0x0000000000000003' [ 231.496201][ T5800] loop2: detected capacity change from 0 to 256 [ 235.377187][ T5829] loop6: detected capacity change from 0 to 512 [ 235.415979][ T5829] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 235.740548][ T5829] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.322: iget: bad i_size value: -67835469387268086 [ 236.110368][ T5829] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.322: couldn't read orphan inode 15 (err -117) [ 236.196089][ T5829] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 236.237684][ T5829] ext2 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.518818][ T5845] loop5: detected capacity change from 0 to 512 [ 236.609823][ T5845] ext4: Unknown parameter 'nouser_xattr' [ 236.844371][ T5845] overlayfs: missing 'lowerdir' [ 237.139901][ T5362] EXT4-fs (loop6): unmounting filesystem. [ 237.272613][ T5855] fuse: Unknown parameter '0x0000000000000003' [ 237.679166][ T5864] netlink: 'syz.6.327': attribute type 4 has an invalid length. [ 237.686968][ T5864] netlink: 17 bytes leftover after parsing attributes in process `syz.6.327'. [ 237.774056][ T5864] loop6: detected capacity change from 0 to 256 [ 238.825320][ T5868] netlink: 60 bytes leftover after parsing attributes in process `syz.5.325'. [ 238.867063][ T5868] netlink: 60 bytes leftover after parsing attributes in process `syz.5.325'. [ 240.401729][ T5879] loop6: detected capacity change from 0 to 256 [ 242.996191][ T5887] futex_wake_op: syz.4.331 tries to shift op by -1; fix this program [ 243.757402][ T2180] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 244.372051][ T5903] fuse: Unknown parameter '0x0000000000000003' [ 247.698184][ T2180] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 248.070467][ T2180] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.104071][ T2180] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.128190][ T2180] usb 1-1: config 1 has no interface number 0 [ 248.135416][ T2180] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.318475][ T2180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.336715][ T2180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.356248][ T2180] usb 1-1: Product: syz [ 248.360846][ T2180] usb 1-1: Manufacturer: syz [ 248.365548][ T2180] usb 1-1: SerialNumber: syz [ 248.419778][ T2180] cdc_ncm 1-1:1.1: skipping garbage [ 248.435367][ T2180] usb 1-1: selecting invalid altsetting 1 [ 248.738348][ T2180] cdc_ncm 1-1:1.1: bind() failure [ 248.759040][ T2180] usb 1-1: USB disconnect, device number 4 [ 251.277321][ T5972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.346'. [ 251.308277][ T5972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.346'. [ 253.188204][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 254.407897][ T6012] fuse: Unknown parameter '0x0000000000000003' [ 255.708538][ T5731] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 256.148501][ T5731] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.178218][ T5731] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.207840][ T5731] usb 7-1: config 1 has no interface number 0 [ 256.247990][ T5731] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.488105][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.497925][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.531079][ T6039] device pim6reg1 entered promiscuous mode [ 256.798565][ T5731] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.815793][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.825040][ T5731] usb 7-1: Product: syz [ 256.862517][ T5731] usb 7-1: Manufacturer: syz [ 256.867189][ T5731] usb 7-1: SerialNumber: syz [ 256.979285][ T5731] cdc_ncm 7-1:1.1: skipping garbage [ 257.032964][ T5731] usb 7-1: selecting invalid altsetting 1 [ 257.268398][ T5731] cdc_ncm 7-1:1.1: bind() failure [ 258.216635][ T5731] usb 7-1: USB disconnect, device number 2 [ 260.671555][ T6073] Illegal XDP return value 2919372923 on prog (id 204) dev N/A, expect packet loss! [ 260.802491][ T6075] device pim6reg1 entered promiscuous mode [ 261.026786][ T6080] bridge0: port 3(hsr_slave_1) entered blocking state [ 261.048413][ T6080] bridge0: port 3(hsr_slave_1) entered disabled state [ 266.328281][ T5041] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 267.198349][ T5041] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.213432][ T5041] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 267.256599][ T5041] usb 7-1: config 1 has no interface number 0 [ 267.307576][ T5041] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.847045][ T5041] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.858579][ T5041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.867026][ T5041] usb 7-1: Product: syz [ 267.880383][ T5041] usb 7-1: Manufacturer: syz [ 267.908657][ T5041] usb 7-1: can't set config #1, error -71 [ 267.924932][ T5041] usb 7-1: USB disconnect, device number 3 [ 271.643837][ T6201] bridge0: port 3(hsr_slave_1) entered blocking state [ 273.260897][ T6201] bridge0: port 3(hsr_slave_1) entered disabled state [ 273.419035][ T4298] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 273.668994][ T6208] [ 273.671375][ T6208] ====================================================== [ 273.678402][ T6208] WARNING: possible circular locking dependency detected [ 273.685425][ T6208] 6.1.115-syzkaller #0 Not tainted [ 273.690524][ T6208] ------------------------------------------------------ [ 273.697527][ T6208] syz.6.396/6208 is trying to acquire lock: [ 273.703407][ T6208] ffff8880b8e28118 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x1b2/0x8c0 [ 273.712035][ T6208] [ 273.712035][ T6208] but task is already holding lock: [ 273.719400][ T6208] ffff8880b8e28358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 273.728268][ T6208] [ 273.728268][ T6208] which lock already depends on the new lock. [ 273.728268][ T6208] [ 273.738675][ T6208] [ 273.738675][ T6208] the existing dependency chain (in reverse order) is: [ 273.747677][ T6208] [ 273.747677][ T6208] -> #1 (&base->lock){-.-.}-{2:2}: [ 273.754968][ T6208] lock_acquire+0x1f8/0x5a0 [ 273.760014][ T6208] _raw_spin_lock_irqsave+0xd1/0x120 [ 273.765823][ T6208] lock_timer_base+0x120/0x260 [ 273.771187][ T6208] __mod_timer+0x1cb/0xee0 [ 273.776116][ T6208] queue_delayed_work_on+0x156/0x250 [ 273.781912][ T6208] kvfree_call_rcu+0x520/0x8c0 [ 273.787227][ T6208] rtnl_register_internal+0x489/0x580 [ 273.793118][ T6208] rtnl_register+0x32/0x70 [ 273.798141][ T6208] ip_rt_init+0x335/0x3c7 [ 273.802980][ T6208] ip_init+0xa/0x14 [ 273.807298][ T6208] inet_init+0x2ae/0x3c0 [ 273.812062][ T6208] do_one_initcall+0x265/0x8f0 [ 273.817344][ T6208] do_initcall_level+0x157/0x207 [ 273.822810][ T6208] do_initcalls+0x49/0x86 [ 273.827652][ T6208] kernel_init_freeable+0x45c/0x60f [ 273.833366][ T6208] kernel_init+0x19/0x290 [ 273.838214][ T6208] ret_from_fork+0x1f/0x30 [ 273.843148][ T6208] [ 273.843148][ T6208] -> #0 (krc.lock){..-.}-{2:2}: [ 273.850179][ T6208] validate_chain+0x1661/0x5950 [ 273.855543][ T6208] __lock_acquire+0x125b/0x1f80 [ 273.860914][ T6208] lock_acquire+0x1f8/0x5a0 [ 273.865939][ T6208] _raw_spin_lock+0x2a/0x40 [ 273.870959][ T6208] kvfree_call_rcu+0x1b2/0x8c0 [ 273.876233][ T6208] trie_delete_elem+0x53a/0x690 [ 273.881614][ T6208] bpf_prog_ae0c3e605f35524c+0x3d/0x41 [ 273.887592][ T6208] bpf_trace_run3+0x3a1/0x440 [ 273.892870][ T6208] enqueue_timer+0x440/0x600 [ 273.897978][ T6208] __mod_timer+0x92b/0xee0 [ 273.902907][ T6208] sk_reset_timer+0x1f/0xb0 [ 273.907953][ T6208] tipc_sk_finish_conn+0x162/0x810 [ 273.913604][ T6208] tipc_socketpair+0x253/0x4a0 [ 273.918890][ T6208] __sys_socketpair+0x402/0x700 [ 273.924259][ T6208] __x64_sys_socketpair+0x97/0xb0 [ 273.929801][ T6208] do_syscall_64+0x3b/0xb0 [ 273.934730][ T6208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.941159][ T6208] [ 273.941159][ T6208] other info that might help us debug this: [ 273.941159][ T6208] [ 273.951485][ T6208] Possible unsafe locking scenario: [ 273.951485][ T6208] [ 273.958920][ T6208] CPU0 CPU1 [ 273.964274][ T6208] ---- ---- [ 273.969628][ T6208] lock(&base->lock); [ 273.973693][ T6208] lock(krc.lock); [ 273.980010][ T6208] lock(&base->lock); [ 273.986854][ T6208] lock(krc.lock); [ 273.990759][ T6208] [ 273.990759][ T6208] *** DEADLOCK *** [ 273.990759][ T6208] [ 273.998916][ T6208] 2 locks held by syz.6.396/6208: [ 274.003945][ T6208] #0: ffff8880b8e28358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 274.013282][ T6208] #1: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x146/0x440 [ 274.023132][ T6208] [ 274.023132][ T6208] stack backtrace: [ 274.029033][ T6208] CPU: 0 PID: 6208 Comm: syz.6.396 Not tainted 6.1.115-syzkaller #0 [ 274.037059][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.047128][ T6208] Call Trace: [ 274.050402][ T6208] [ 274.053328][ T6208] dump_stack_lvl+0x1e3/0x2cb [ 274.058007][ T6208] ? nf_tcp_handle_invalid+0x642/0x642 [ 274.063464][ T6208] ? print_circular_bug+0x12b/0x1a0 [ 274.068661][ T6208] check_noncircular+0x2fa/0x3b0 [ 274.073600][ T6208] ? add_chain_block+0x850/0x850 [ 274.078530][ T6208] ? lockdep_lock+0x11f/0x2a0 [ 274.083229][ T6208] ? _find_first_zero_bit+0xd0/0x100 [ 274.088518][ T6208] validate_chain+0x1661/0x5950 [ 274.093399][ T6208] ? reacquire_held_locks+0x660/0x660 [ 274.098773][ T6208] ? mark_lock+0x9a/0x340 [ 274.103136][ T6208] ? __lock_acquire+0x125b/0x1f80 [ 274.108163][ T6208] ? mark_lock+0x9a/0x340 [ 274.112494][ T6208] ? mark_lock+0x9a/0x340 [ 274.116827][ T6208] __lock_acquire+0x125b/0x1f80 [ 274.121710][ T6208] lock_acquire+0x1f8/0x5a0 [ 274.126226][ T6208] ? kvfree_call_rcu+0x1b2/0x8c0 [ 274.131163][ T6208] ? read_lock_is_recursive+0x10/0x10 [ 274.136556][ T6208] ? do_raw_spin_unlock+0x137/0x8a0 [ 274.141752][ T6208] ? __virt_addr_valid+0x17f/0x530 [ 274.146858][ T6208] ? __virt_addr_valid+0x17f/0x530 [ 274.151965][ T6208] ? __virt_addr_valid+0x45b/0x530 [ 274.157091][ T6208] ? __phys_addr+0xb6/0x170 [ 274.161697][ T6208] _raw_spin_lock+0x2a/0x40 [ 274.166202][ T6208] ? kvfree_call_rcu+0x1b2/0x8c0 [ 274.171136][ T6208] kvfree_call_rcu+0x1b2/0x8c0 [ 274.175894][ T6208] ? rcu_leak_callback+0x10/0x10 [ 274.180823][ T6208] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 274.186722][ T6208] ? _raw_spin_unlock+0x40/0x40 [ 274.191588][ T6208] ? longest_prefix_match+0x49b/0x640 [ 274.197007][ T6208] trie_delete_elem+0x53a/0x690 [ 274.201959][ T6208] bpf_prog_ae0c3e605f35524c+0x3d/0x41 [ 274.207409][ T6208] bpf_trace_run3+0x3a1/0x440 [ 274.212078][ T6208] ? bpf_trace_run3+0x146/0x440 [ 274.216925][ T6208] ? bpf_trace_run2+0x410/0x410 [ 274.221769][ T6208] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 274.227682][ T6208] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 274.233139][ T6208] ? _raw_spin_lock+0x40/0x40 [ 274.237812][ T6208] ? __lock_acquire+0x125b/0x1f80 [ 274.242849][ T6208] enqueue_timer+0x440/0x600 [ 274.247437][ T6208] __mod_timer+0x92b/0xee0 [ 274.251873][ T6208] ? mod_timer_pending+0x20/0x20 [ 274.256806][ T6208] ? net_generic+0x1f/0x230 [ 274.261328][ T6208] ? __lock_acquire+0x1f80/0x1f80 [ 274.266392][ T6208] ? aa_get_current_label+0x111/0x1d0 [ 274.271775][ T6208] sk_reset_timer+0x1f/0xb0 [ 274.276283][ T6208] tipc_sk_finish_conn+0x162/0x810 [ 274.281417][ T6208] tipc_socketpair+0x253/0x4a0 [ 274.286201][ T6208] ? bpf_lsm_socket_socketpair+0x5/0x10 [ 274.291793][ T6208] __sys_socketpair+0x402/0x700 [ 274.296655][ T6208] ? __ia32_sys_socket+0x80/0x80 [ 274.301639][ T6208] ? print_irqtrace_events+0x210/0x210 [ 274.307118][ T6208] ? syscall_enter_from_user_mode+0x2e/0x230 [ 274.313104][ T6208] __x64_sys_socketpair+0x97/0xb0 [ 274.318133][ T6208] do_syscall_64+0x3b/0xb0 [ 274.322565][ T6208] ? clear_bhb_loop+0x45/0xa0 [ 274.327381][ T6208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.333304][ T6208] RIP: 0033:0x7f6a7697e719 [ 274.337733][ T6208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.357347][ T6208] RSP: 002b:00007f6a776c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 274.365841][ T6208] RAX: ffffffffffffffda RBX: 00007f6a76b35f80 RCX: 00007f6a7697e719 [ 274.373829][ T6208] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 274.381793][ T6208] RBP: 00007f6a769f139e R08: 0000000000000000 R09: 0000000000000000 [ 274.389784][ T6208] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000000 [ 274.397855][ T6208] R13: 0000000000000000 R14: 00007f6a76b35f80 R15: 00007ffe3ce233f8 [ 274.405839][ T6208] [ 274.508135][ T4298] usb 5-1: device descriptor read/all, error -71