last executing test programs: 3m50.341156319s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) 3m49.156137136s ago: executing program 2 (id=19): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x500000000000000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioperm(0x0, 0x1, 0x18a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) 3m39.352732625s ago: executing program 2 (id=44): socket$netlink(0x10, 0x3, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @remote, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 3m23.009903423s ago: executing program 32 (id=44): socket$netlink(0x10, 0x3, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @remote, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 1m38.036122503s ago: executing program 3 (id=311): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') listen(r0, 0x0) accept4$x25(r0, 0x0, 0x0, 0x80800) 1m37.099201588s ago: executing program 3 (id=314): r0 = socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), r0) 1m35.07720023s ago: executing program 3 (id=321): pipe2(&(0x7f0000000040), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 1m33.460101389s ago: executing program 3 (id=325): r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xb101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r4, &(0x7f000000ae80)={0x2020}, 0x2020) pread64(r4, &(0x7f00000002c0)=""/220, 0xdc, 0x0) read$FUSE(r4, &(0x7f0000004b80)={0x2020}, 0x2020) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x85, 0x0, &(0x7f0000005e80)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a00"], 0x38}}, 0x20004000) 1m31.229507783s ago: executing program 3 (id=327): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0xff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x2}, 0xe) 1m30.616251897s ago: executing program 3 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000", @ANYRES16=r1, @ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1m29.161737866s ago: executing program 33 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000", @ANYRES16=r1, @ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 36.60157327s ago: executing program 1 (id=454): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) io_uring_setup(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) sendto$llc(0xffffffffffffffff, &(0x7f0000000300)="8d", 0x1, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r5 = dup2(r4, r4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x0) 35.983633974s ago: executing program 1 (id=456): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x6a2, 0x4) 35.897056585s ago: executing program 1 (id=457): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x4, @remote, 0x80000001}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045520, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 34.514332153s ago: executing program 1 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 34.124308556s ago: executing program 1 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) readlink(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x41) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffd24, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x80000000, 0x0, 0x0, 0x2, [0x0], [0x4, 0x0, 0x4020, 0x4], [0x8, 0x1ff, 0x0, 0xfffffffd], [0x0, 0x1, 0x200000000000a40b]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x100000a, 0x12, r6, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x24008880) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11, 0x2008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x44) 32.099998858s ago: executing program 1 (id=466): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x249, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1000, 0xfd, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xd7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) 32.023537688s ago: executing program 34 (id=466): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x249, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1000, 0xfd, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xd7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) 17.031029928s ago: executing program 5 (id=499): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') setns(r0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001439) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x2000000b) close(0xffffffffffffffff) pread64(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x6, 0x4}, {0x8, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0x2c}}, 0x40) sendto(0xffffffffffffffff, &(0x7f0000000000)="1200000012d12b932e00e7ef007b00000000d0b27b5711dcb5129b3e96ae548d351bd62a0bf5e2deed5f57d9f5ab2fe1c2e06c5abc2b8b63ffdd7a", 0x3b, 0x41009, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f00000004c0)=ANY=[@ANYBLOB='filter'], &(0x7f0000000280)=0x28) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.752958926s ago: executing program 5 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(r1, 0x9) sched_setaffinity(r3, 0x8, &(0x7f0000001400)=0x2) open(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0xe0, 0x43, 0xa0, 0xe0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x3}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@multicast2}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) 13.512823039s ago: executing program 5 (id=507): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x4b52, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x3}}, 0x10, 0x0}, 0x0) socket$inet6(0x10, 0x6, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) 12.676788754s ago: executing program 4 (id=508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r4, 0x89e0, &(0x7f0000004880)=0x1) 11.296195772s ago: executing program 5 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, &(0x7f0000000280), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x9, 0x5, 0x4, 0xff}, 0x8) 11.251496743s ago: executing program 4 (id=511): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x5) 10.656079976s ago: executing program 4 (id=512): openat$autofs(0xffffffffffffff9c, 0x0, 0x40a000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x40400) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645093fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31265aba9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc478a305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0xba, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x67], [0xffffffff], [0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x1a803, 0x0) 9.658708462s ago: executing program 4 (id=514): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x500000000000000}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioperm(0x0, 0x1, 0x18a) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r4, 0x0, 0x3, 0x1}}, 0x20) 9.576490622s ago: executing program 0 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(r1, 0x9) sched_setaffinity(r3, 0x8, &(0x7f0000001400)=0x2) open(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0xe0, 0x43, 0xa0, 0xe0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x3}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@multicast2}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) 8.462854169s ago: executing program 6 (id=519): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x4b52, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x3}}, 0x10, 0x0}, 0x0) socket$inet6(0x10, 0x6, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) 7.892128393s ago: executing program 0 (id=520): r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, &(0x7f00000000c0)="5a54f2047a56cd9888038a0b65b0", 0xe, 0x8000, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0xe, 0x6, @remote}, 0x14) 7.248727306s ago: executing program 6 (id=521): set_tid_address(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r5, 0x0, 0x0, 0x0) 7.231909427s ago: executing program 0 (id=522): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="e8a3785200"/18], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg$inet(r4, &(0x7f0000003340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}, {{&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x4000804) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x2, [{}, {}]}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='--\x00') mremap(&(0x7f0000211000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) 6.186358283s ago: executing program 6 (id=523): openat$autofs(0xffffffffffffff9c, 0x0, 0x40a000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x40400) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, &(0x7f0000000880)="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"}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x1a803, 0x0) 5.837176685s ago: executing program 5 (id=524): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001400)=ANY=[@ANYRESOCT]) r0 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1e, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0xe, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.566727726s ago: executing program 6 (id=525): r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fchown(0xffffffffffffffff, 0x0, 0xee01) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000200)={0x2, 0x0, 0x2, {0xf, 0xffffffff, 0x7427, 0xab1}}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x0) connect$rose(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc084}, 0x4000000) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r5, &(0x7f0000000540)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @mcast2, @private1, {[], @param_prob={0x4, 0x0, 0x0, 0x3, {0x3, 0x6, "fefbd4", 0x2, 0x0, 0x1, @private1, @private1}}}}}}, 0x66) 4.129506995s ago: executing program 0 (id=526): pidfd_send_signal(0xffffffffffffffff, 0x1b, 0x0, 0x700) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) getpid() r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x9) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) getsockname$qrtr(r2, &(0x7f0000000040), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xd71e, 0x1}) 3.963981656s ago: executing program 6 (id=527): pipe(0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000100)=ANY=[@ANYBLOB="7b686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c696f636861727365743d63703835322c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c636f6465706167653d3933322c75744a383d312c696f066861727365743d63703933322c6e6f6e756d7461696c3d302c757466383d302c6e6e6f6e756d7461696c3d312c73686f72746e616d653d6c6f7765722c757466383d302c00"], 0x2d, 0x359, &(0x7f0000000840)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, @mcast2, @empty, 0x700, 0x0, 0x20000000}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x405}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x20004880}, 0xc000) socket(0x11, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r5, &(0x7f00000000c0)='./file0\x00') r6 = openat(r5, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) 3.621915648s ago: executing program 4 (id=528): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000200000000050001100ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000040000000000"], 0xa0}}, 0x0) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b26, &(0x7f0000000040)) 2.588013114s ago: executing program 0 (id=529): memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 2.587294144s ago: executing program 4 (id=530): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x4b52, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x3}}, 0x10, 0x0}, 0x0) socket$inet6(0x10, 0x6, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) 270.856348ms ago: executing program 6 (id=531): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_open_dev$vim2m(0x0, 0x10001, 0x2) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040)) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 268.776808ms ago: executing program 0 (id=532): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x8e]}, &(0x7f0000000400)=0x50) 0s ago: executing program 5 (id=533): set_tid_address(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) kernel console output (not intermixed with test programs): DUID 00:04:25:33:28:72:74:32:e3:68:00:ed:e5:a1:82:40:69:fa forked to background, child pid 3835 [ 35.162218][ T3836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.178909][ T3836] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. syzkaller login: [ 57.097553][ T4154] cgroup: Unknown subsys name 'net' [ 57.203529][ T4154] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.716788][ T4154] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.062381][ T4164] chnl_net:caif_netlink_parms(): no params data found [ 60.223451][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.230688][ T4164] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.239475][ T4164] device bridge_slave_0 entered promiscuous mode [ 60.251192][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.258298][ T4164] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.266625][ T4164] device bridge_slave_1 entered promiscuous mode [ 60.320495][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 60.338206][ T4164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.347691][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 60.380988][ T4164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.424412][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 60.437081][ T4164] team0: Port device team_slave_0 added [ 60.457121][ T4164] team0: Port device team_slave_1 added [ 60.524564][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.531511][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.557525][ T4164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.572790][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.579860][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.606537][ T4164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.659492][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.666933][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.674994][ T4173] device bridge_slave_0 entered promiscuous mode [ 60.692617][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.699765][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.707805][ T4178] device bridge_slave_0 entered promiscuous mode [ 60.726751][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 60.735922][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.743107][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.751435][ T4173] device bridge_slave_1 entered promiscuous mode [ 60.765775][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.772844][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.780739][ T4178] device bridge_slave_1 entered promiscuous mode [ 60.808631][ T4164] device hsr_slave_0 entered promiscuous mode [ 60.815622][ T4164] device hsr_slave_1 entered promiscuous mode [ 60.830093][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.837372][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.846098][ T4169] device bridge_slave_0 entered promiscuous mode [ 60.858701][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.866097][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.874575][ T4169] device bridge_slave_1 entered promiscuous mode [ 60.892243][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.934730][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.945614][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.972238][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.992312][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.021767][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.072280][ T4173] team0: Port device team_slave_0 added [ 61.080856][ T4173] team0: Port device team_slave_1 added [ 61.094124][ T4178] team0: Port device team_slave_0 added [ 61.127265][ T4178] team0: Port device team_slave_1 added [ 61.133267][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.141045][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.149210][ T4170] device bridge_slave_0 entered promiscuous mode [ 61.160404][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.167796][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.176919][ T4170] device bridge_slave_1 entered promiscuous mode [ 61.186861][ T4169] team0: Port device team_slave_0 added [ 61.227665][ T4169] team0: Port device team_slave_1 added [ 61.240706][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.247768][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.274149][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.289462][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.296721][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.322706][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.343783][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.353482][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.360772][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.386986][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.405406][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.412364][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.438504][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.459772][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.485519][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.492479][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.518756][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.552905][ T4170] team0: Port device team_slave_0 added [ 61.560872][ T4170] team0: Port device team_slave_1 added [ 61.567719][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.574992][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.601230][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.655580][ T4173] device hsr_slave_0 entered promiscuous mode [ 61.668416][ T4173] device hsr_slave_1 entered promiscuous mode [ 61.675758][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.683562][ T4173] Cannot create hsr debugfs directory [ 61.697600][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.704797][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.730803][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.743332][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.750469][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.777860][ T4165] Bluetooth: hci0: command 0x0409 tx timeout [ 61.782673][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.843710][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 61.843969][ T4165] Bluetooth: hci1: command 0x0409 tx timeout [ 61.852792][ T4178] device hsr_slave_0 entered promiscuous mode [ 61.862631][ T4178] device hsr_slave_1 entered promiscuous mode [ 61.869477][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.877326][ T4178] Cannot create hsr debugfs directory [ 61.885960][ T4169] device hsr_slave_0 entered promiscuous mode [ 61.894225][ T4169] device hsr_slave_1 entered promiscuous mode [ 61.900788][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.908388][ T4169] Cannot create hsr debugfs directory [ 61.933790][ T4165] Bluetooth: hci2: command 0x0409 tx timeout [ 61.944417][ T4165] Bluetooth: hci4: command 0x0409 tx timeout [ 62.002974][ T4170] device hsr_slave_0 entered promiscuous mode [ 62.010101][ T4170] device hsr_slave_1 entered promiscuous mode [ 62.016819][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.024452][ T4170] Cannot create hsr debugfs directory [ 62.146913][ T4164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.160301][ T4164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.194903][ T4164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.208347][ T4164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.329209][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.350557][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.360327][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.370506][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.405327][ T4173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.428458][ T4173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.455425][ T4173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.465098][ T4173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.485601][ T4164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.538927][ T4178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.549222][ T4178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.570739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.581200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.590907][ T4178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.601005][ T4178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.626632][ T4164] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.661578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.672713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.682426][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.689681][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.705449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.713464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.722360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.731055][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.738178][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.777313][ T4170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.791558][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.805444][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.817477][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.837211][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.845108][ T4170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.861254][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.875799][ T4170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.886964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.895945][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.903700][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.912666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.923167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.943187][ T4164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.954245][ T4164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.972421][ T4170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.001175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.011359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.021184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.030848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.040427][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.047637][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.056486][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.066253][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.075416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.084165][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.092560][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.099653][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.107477][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.116950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.125500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.146360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.160880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.170412][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.180704][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.192763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.202513][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.227919][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.238294][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.250887][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.259385][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.286021][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.318159][ T4169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.328682][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.344847][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.352407][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.360367][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.369433][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.379459][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.388531][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.397302][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.407046][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.415592][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.422673][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.430704][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.438589][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.452217][ T4164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.466478][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.502120][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.518200][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.528921][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.538735][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.545824][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.556231][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.565035][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.572731][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.583875][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.604136][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.612941][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.621936][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.629077][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.637140][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.648486][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.696460][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.705476][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.715798][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.724490][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.733096][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.742515][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.751306][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.760712][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.787136][ T4164] device veth0_vlan entered promiscuous mode [ 63.800020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.809498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.818929][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.826037][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.834797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.842991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.852797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.860394][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 63.861890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.875972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.884730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.902009][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.915191][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.928443][ T4209] Bluetooth: hci1: command 0x041b tx timeout [ 63.936306][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.937933][ T4209] Bluetooth: hci3: command 0x041b tx timeout [ 63.947073][ T4164] device veth1_vlan entered promiscuous mode [ 63.962868][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.971491][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.979852][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.988969][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.998807][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.006449][ T4206] Bluetooth: hci4: command 0x041b tx timeout [ 64.012611][ T4206] Bluetooth: hci2: command 0x041b tx timeout [ 64.028538][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.048151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.057052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.064599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.073371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.082908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.091852][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.099014][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.107771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.116972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.125872][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.132934][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.141282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.152918][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.163430][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.177063][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.200845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.212979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.226639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.243717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.252310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.288770][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.301100][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.311407][ T4164] device veth0_macvtap entered promiscuous mode [ 64.332506][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.342113][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.353081][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.369852][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.379301][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.388553][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.398000][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.407369][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.416698][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.425744][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.434054][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.452958][ T4169] device veth0_vlan entered promiscuous mode [ 64.465953][ T4164] device veth1_macvtap entered promiscuous mode [ 64.482409][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.494075][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.502902][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.518518][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.529472][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.540998][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.550614][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.562514][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.574820][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.599032][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.608346][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.618169][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.627234][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.636377][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.646773][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.662433][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.686601][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.700812][ T4169] device veth1_vlan entered promiscuous mode [ 64.711134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.732100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.741873][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.761985][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.771603][ T4164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.782021][ T4164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.797084][ T4164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.809515][ T4164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.832818][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.847542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.856385][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.864345][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.871769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.879662][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.912381][ T4169] device veth0_macvtap entered promiscuous mode [ 64.933350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.959964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.973454][ T4169] device veth1_macvtap entered promiscuous mode [ 65.018579][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.027216][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.036378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.044660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.067994][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.079201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.088903][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.141892][ T4178] device veth0_vlan entered promiscuous mode [ 65.159800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.169755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.179810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.188650][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.203546][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.217635][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.229756][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.250453][ T4178] device veth1_vlan entered promiscuous mode [ 65.264597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.272386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.281111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.289886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.300129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.319043][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.329987][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.341612][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.353155][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.362017][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.374522][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.383226][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.408789][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.420182][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.429495][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.439517][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.448504][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.456673][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.465832][ T4170] device veth0_vlan entered promiscuous mode [ 65.498022][ T4173] device veth0_vlan entered promiscuous mode [ 65.505974][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.515395][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.516960][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.523400][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.545467][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.557452][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.570326][ T4170] device veth1_vlan entered promiscuous mode [ 65.586905][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.595856][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.603737][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.612119][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.675317][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.683509][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.695456][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.706680][ T4178] device veth0_macvtap entered promiscuous mode [ 65.736225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.745507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.757758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.770287][ T4173] device veth1_vlan entered promiscuous mode [ 65.779411][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.789492][ T4170] device veth0_macvtap entered promiscuous mode [ 65.799677][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.810664][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.810964][ T4178] device veth1_macvtap entered promiscuous mode [ 65.825417][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.839115][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.852200][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.860748][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.870670][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.879029][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.887894][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.904504][ T4170] device veth1_macvtap entered promiscuous mode [ 65.924402][ T4206] Bluetooth: hci0: command 0x040f tx timeout [ 65.937513][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.968245][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.969741][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.991631][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.001870][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.013519][ T4206] Bluetooth: hci3: command 0x040f tx timeout [ 66.020263][ T4206] Bluetooth: hci1: command 0x040f tx timeout [ 66.026714][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.039435][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.049839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.058956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.067216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.076578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.086665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.096154][ T4206] Bluetooth: hci2: command 0x040f tx timeout [ 66.101460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.102279][ T4206] Bluetooth: hci4: command 0x040f tx timeout [ 66.117672][ T4173] device veth0_macvtap entered promiscuous mode [ 66.132199][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.143904][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.154271][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.166446][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.176622][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.187163][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.199671][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.215133][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.227406][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.242013][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.253385][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.265703][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.274043][ T4173] device veth1_macvtap entered promiscuous mode [ 66.289145][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.305613][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.333149][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.342578][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.355390][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.364397][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.391154][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.415084][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 66.418520][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.584503][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.595998][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.606540][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.722244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 66.722363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 66.732962][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 66.876015][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.899422][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.935722][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.075883][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.351689][ T4178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.362780][ T4178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.372779][ T26] audit: type=1326 audit(1733178524.101:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e36041f19 code=0x0 [ 67.604728][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.604782][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.604826][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.604870][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.604913][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.604957][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.301424][ T4209] Bluetooth: hci0: command 0x0419 tx timeout [ 68.301492][ T4209] Bluetooth: hci1: command 0x0419 tx timeout [ 68.301537][ T4209] Bluetooth: hci3: command 0x0419 tx timeout [ 68.302694][ T4209] Bluetooth: hci4: command 0x0419 tx timeout [ 68.302758][ T4209] Bluetooth: hci2: command 0x0419 tx timeout [ 68.309029][ T4178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.309088][ T4178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.323452][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.323475][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.323488][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.323503][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.327967][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.327982][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.327990][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.328000][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.329134][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.380162][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.380786][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.402793][ T4170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.628447][ T4170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.637347][ T4170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.651536][ T4252] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 68.665055][ T4170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.688422][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.703465][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.739348][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.750230][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.788522][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.799442][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.811074][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.821979][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.848159][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.883342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.917072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.940627][ T4173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.951653][ T4173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.977810][ T4173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.991970][ T4173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.169059][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.210082][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.328577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.356692][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.610029][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.980108][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.029189][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.105905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.115803][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.136927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.140566][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.170464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.192828][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.212292][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.387700][ T26] audit: type=1326 audit(1733178527.201:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.0.13" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f374866cf19 code=0x0 [ 70.670284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.847050][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.891092][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.969621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.208615][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.215293][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.203176][ T4296] process 'syz.0.17' launched './file0' with NULL argv: empty string added [ 72.393722][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.856096][ T4314] tmpfs: Unknown parameter 'usrquota' [ 73.205018][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 73.854000][ T21] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 73.866339][ T21] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 73.919390][ T21] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 74.044061][ T21] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 74.057383][ T21] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 74.109479][ T21] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 74.480535][ T4320] loop0: detected capacity change from 0 to 512 [ 74.564679][ T4320] ======================================================= [ 74.564679][ T4320] WARNING: The mand mount option has been deprecated and [ 74.564679][ T4320] and is ignored by this kernel. Remove the mand [ 74.564679][ T4320] option from the mount to silence this warning. [ 74.564679][ T4320] ======================================================= [ 74.613744][ T21] usb 4-1: unable to read config index 2 descriptor/start: -71 [ 74.621360][ T21] usb 4-1: can't read configurations, error -71 [ 74.857628][ T26] audit: type=1326 audit(1733178531.671:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4323 comm="syz.3.24" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e2893df19 code=0x0 [ 75.811982][ T4320] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.23: invalid indirect mapped block 4294967295 (level 1) [ 75.986979][ T4320] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.23: invalid indirect mapped block 4294967295 (level 1) [ 76.029161][ T4320] EXT4-fs (loop0): 2 truncates cleaned up [ 76.039060][ T4320] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 77.233887][ T4315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.365591][ T4344] netlink: 32 bytes leftover after parsing attributes in process `syz.1.29'. [ 78.526841][ T4362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.002620][ T4383] loop3: detected capacity change from 0 to 512 [ 81.590740][ T7] cfg80211: failed to load regulatory.db [ 82.146434][ T4383] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.41: invalid indirect mapped block 4294967295 (level 1) [ 82.161031][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 82.188985][ T4383] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.41: invalid indirect mapped block 4294967295 (level 1) [ 82.206433][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 82.245678][ T13] Bluetooth: hci2: command 0x2021 tx timeout [ 82.268658][ T4383] EXT4-fs (loop3): 2 truncates cleaned up [ 82.326283][ T4383] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 82.551467][ T4403] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 84.014572][ T4415] unsupported nlmsg_type 40 [ 90.566577][ T4450] loop0: detected capacity change from 0 to 512 [ 90.916572][ T4450] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.58: invalid block [ 91.747032][ T4450] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.58: invalid indirect mapped block 4294967295 (level 1) [ 91.774283][ T4450] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.58: invalid indirect mapped block 4294967295 (level 1) [ 91.844091][ T4450] EXT4-fs (loop0): 2 truncates cleaned up [ 91.860602][ T4450] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 91.860890][ T4456] kvm: emulating exchange as write [ 92.732288][ T4467] vivid-003: disconnect [ 92.775573][ T4466] vivid-003: reconnect [ 94.013671][ T4460] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 96.169169][ T26] audit: type=1107 audit(1733178552.921:5): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 98.790665][ T4517] infiniband syz2: set active [ 98.795619][ T4517] infiniband syz2: added team_slave_1 [ 98.808463][ T4517] infiniband syz2: Couldn't open port 1 [ 98.921635][ T4517] RDS/IB: syz2: added [ 98.926337][ T4517] smc: adding ib device syz2 with port count 1 [ 98.932624][ T4517] smc: ib device syz2 port 1 has pnetid [ 100.452594][ T4528] loop3: detected capacity change from 0 to 512 [ 101.344926][ T4208] Bluetooth: hci5: command 0x0409 tx timeout [ 101.463786][ T4528] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.77: invalid indirect mapped block 4294967295 (level 1) [ 101.536278][ T4528] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.77: invalid indirect mapped block 4294967295 (level 1) [ 101.632261][ T4528] EXT4-fs (loop3): 2 truncates cleaned up [ 101.659990][ T4528] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 102.073794][ T26] audit: type=1107 audit(1733178558.621:6): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 103.292452][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.363791][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 103.491311][ T4520] chnl_net:caif_netlink_parms(): no params data found [ 103.699264][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.602361][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.699497][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.721455][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.750685][ T4520] device bridge_slave_0 entered promiscuous mode [ 104.785423][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.804352][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.822736][ T4520] device bridge_slave_1 entered promiscuous mode [ 104.995460][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.757806][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 105.903232][ T4581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'. [ 105.912094][ T4581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'. [ 106.130267][ T4520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.234965][ T4520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.694628][ T4520] team0: Port device team_slave_0 added [ 106.731997][ T4520] team0: Port device team_slave_1 added [ 107.025286][ T4520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.042669][ T4520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.843908][ T4208] Bluetooth: hci5: command 0x0419 tx timeout [ 107.867016][ T4520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.914717][ T4520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.921693][ T4520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.050289][ T4520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.348464][ T4520] device hsr_slave_0 entered promiscuous mode [ 108.373834][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.392207][ T4520] device hsr_slave_1 entered promiscuous mode [ 108.423171][ T4520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.458626][ T4520] Cannot create hsr debugfs directory [ 108.653876][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 109.001852][ T23] usb 1-1: config 128 has an invalid interface number: 61 but max is 0 [ 109.010370][ T23] usb 1-1: config 128 has no interface number 0 [ 109.190251][ T4520] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.256387][ T4520] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.300851][ T4520] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.364962][ T4520] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.398435][ T4620] loop4: detected capacity change from 0 to 512 [ 109.463864][ T23] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=25.84 [ 109.484776][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.499729][ T4620] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.95: invalid indirect mapped block 4294967295 (level 1) [ 109.520366][ T23] usb 1-1: Product: syz [ 109.523172][ T4620] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.95: invalid indirect mapped block 4294967295 (level 1) [ 109.531247][ T23] usb 1-1: Manufacturer: syz [ 109.590243][ T4620] EXT4-fs (loop4): 2 truncates cleaned up [ 109.597385][ T4620] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 109.656687][ T23] usb 1-1: SerialNumber: syz [ 110.395937][ T23] usb 1-1: ignoring: probably an ADSL modem [ 111.690672][ T4638] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 111.697559][ T4638] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.705827][ T4638] vhci_hcd vhci_hcd.0: Device attached [ 112.069580][ T23] cxacru 1-1:128.61: usbatm_usb_probe: bind failed: -19! [ 112.483847][ T4622] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 113.044307][ T13] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 113.103058][ T4642] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 113.135284][ T4520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.159126][ T4641] vhci_hcd: connection closed [ 113.159304][ T4274] vhci_hcd: stop threads [ 113.196928][ T4520] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.637532][ T4274] vhci_hcd: release socket [ 113.768456][ T4274] vhci_hcd: disconnect device [ 113.899580][ T4520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.015716][ T4520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.028389][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.072488][ T23] usb 1-1: USB disconnect, device number 2 [ 114.090476][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.109619][ T4663] loop4: detected capacity change from 0 to 256 [ 114.163488][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.182722][ T4669] binder: 4665:4669 ioctl c0306201 20000940 returned -14 [ 114.195497][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.236535][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.243742][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.390229][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.420981][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.431528][ T4663] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 114.475519][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.482620][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.491369][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.500890][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.510192][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.860793][ T4165] Bluetooth: hci1: command 0x0409 tx timeout [ 115.897819][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.957620][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.995682][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.034585][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.060103][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.094305][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.137053][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.182771][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.212939][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.228999][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.426064][ T154] device hsr_slave_0 left promiscuous mode [ 116.454613][ T154] device hsr_slave_1 left promiscuous mode [ 116.548461][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.703367][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.731294][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.755663][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.769758][ T154] device bridge_slave_1 left promiscuous mode [ 116.778945][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.823218][ T154] device bridge_slave_0 left promiscuous mode [ 116.839172][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.927218][ T154] device veth1_macvtap left promiscuous mode [ 116.948600][ T154] device veth0_macvtap left promiscuous mode [ 116.988246][ T154] device veth1_vlan left promiscuous mode [ 117.015960][ T154] device veth0_vlan left promiscuous mode [ 117.708977][ T154] team0 (unregistering): Port device team_slave_1 removed [ 118.985090][ T154] team0 (unregistering): Port device team_slave_0 removed [ 119.030977][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.080813][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.123717][ T13] vhci_hcd: vhci_device speed not set [ 119.265281][ T154] bond0 (unregistering): Released all slaves [ 119.632884][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.662070][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.862847][ T4520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.634099][ T4728] binder: 4726:4728 ioctl c0306201 20000940 returned -14 [ 122.789654][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.886859][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.926243][ T4763] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.985204][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.994184][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.125578][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.137422][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.741795][ T4520] device veth0_vlan entered promiscuous mode [ 124.874272][ T4520] device veth1_vlan entered promiscuous mode [ 124.957585][ T4774] [U]  [ 125.084344][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.101982][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.232659][ T4520] device veth0_macvtap entered promiscuous mode [ 125.313923][ T4520] device veth1_macvtap entered promiscuous mode [ 125.730633][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.820151][ T4784] loop0: detected capacity change from 0 to 256 [ 125.963699][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.087086][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.123677][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.157951][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.194796][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.217399][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.283653][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.305243][ T4520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.314656][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.334396][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.354987][ T4784] FAT-fs (loop0): Unrecognized mount option "{hortname=lower" or missing value [ 126.364476][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.398093][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.443804][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.462280][ T4794] binder: 4793:4794 ioctl c0306201 20000940 returned -14 [ 126.479220][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.644492][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.259065][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.289833][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.333811][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.532482][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.569320][ T4520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.641427][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.675142][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.728054][ T4520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.758034][ T4520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.787708][ T4520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.813640][ T4520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.024138][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.057077][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.166748][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.335080][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.343276][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.361981][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.486372][ T4820] syz.3.133 (4820): /proc/4817/oom_adj is deprecated, please use /proc/4817/oom_score_adj instead. [ 131.682504][ T4835] netlink: 28 bytes leftover after parsing attributes in process `syz.5.73'. [ 131.911546][ T4835] netlink: 28 bytes leftover after parsing attributes in process `syz.5.73'. [ 132.724500][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730901][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.805372][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 133.484100][ T4863] loop4: detected capacity change from 0 to 256 [ 133.513930][ T4865] kAFS: No cell specified [ 133.561671][ T4867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.143'. [ 133.573072][ T4863] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 137.964752][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'. [ 140.533992][ T4953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.160'. [ 140.542931][ T4953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.160'. [ 141.270629][ T4957] Dead loop on virtual device ip6_vti0, fix it urgently! [ 144.114717][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.166'. [ 147.668731][ T5000] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 147.678554][ T5000] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 148.014321][ T5008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.172'. [ 148.023216][ T5008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.172'. [ 148.413767][ T4659] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.743687][ T4659] usb 4-1: Using ep0 maxpacket: 16 [ 148.863960][ T4659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.909509][ T4659] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.963383][ T4659] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 148.999436][ T4659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.029141][ T4659] usb 4-1: config 0 descriptor?? [ 149.745998][ T4659] HID 045e:07da: Invalid code 65791 type 1 [ 149.759223][ T4659] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input6 [ 149.782610][ T4659] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 150.800197][ T4659] usb 4-1: USB disconnect, device number 4 [ 153.323549][ C0] sched: RT throttling activated [ 153.422485][ T4659] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.753655][ T4267] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 153.793767][ T4659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.815205][ T4659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.827293][ T4659] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 153.837371][ T4659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.937246][ T4659] usb 2-1: config 0 descriptor?? [ 154.455278][ T4659] hid (null): bogus close delimiter [ 154.646540][ T4267] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 154.663757][ T4659] usb 2-1: language id specifier not provided by device, defaulting to English [ 155.343993][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.352083][ T4267] usb 6-1: Product: syz [ 155.385531][ T4267] usb 6-1: Manufacturer: syz [ 155.390859][ T4267] usb 6-1: SerialNumber: syz [ 155.464315][ T4659] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input7 [ 155.465324][ T4267] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 155.596438][ T4659] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input8 [ 155.665188][ T4659] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 155.734010][ T4659] usb 2-1: USB disconnect, device number 2 [ 155.833793][ T4206] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 156.214208][ T4267] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 156.264016][ T4206] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 156.709047][ T4206] usb 1-1: config 0 has no interface number 0 [ 156.723923][ T2854] usb 6-1: USB disconnect, device number 2 [ 156.735746][ T4206] usb 1-1: config 0 interface 112 has no altsetting 0 [ 156.898680][ T5115] loop1: detected capacity change from 0 to 256 [ 156.964802][ T4206] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= c.d8 [ 156.987360][ T5115] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 157.035167][ T4206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.068693][ T4206] usb 1-1: Product: syz [ 157.083573][ T4206] usb 1-1: Manufacturer: syz [ 157.094926][ T4206] usb 1-1: SerialNumber: syz [ 157.109155][ T4206] usb 1-1: config 0 descriptor?? [ 157.338259][ T4267] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 157.347456][ T4267] ath9k_htc: Failed to initialize the device [ 157.356528][ T2854] usb 6-1: ath9k_htc: USB layer deinitialized [ 159.060148][ T5130] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 159.107141][ T4206] vmk80xx 1-1:0.112: driver 'vmk80xx' failed to auto-configure device. [ 159.180997][ T4206] usb 1-1: USB disconnect, device number 3 [ 159.305965][ T5130] kvm: pic: non byte read [ 159.333277][ T5130] kvm: pic: level sensitive irq not supported [ 159.333433][ T5130] kvm: pic: non byte read [ 159.384177][ T5130] kvm: pic: level sensitive irq not supported [ 159.384251][ T5130] kvm: pic: non byte read [ 164.200083][ T5184] loop0: detected capacity change from 0 to 256 [ 164.286012][ T5184] FAT-fs (loop0): Unrecognized mount option "{hortname=lower" or missing value [ 164.322755][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.212'. [ 164.380593][ T5194] Zero length message leads to an empty skb [ 166.077936][ T5218] loop1: detected capacity change from 0 to 256 [ 166.211539][ T4165] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.219632][ T5218] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 167.763744][ T4165] usb 5-1: Using ep0 maxpacket: 32 [ 168.033900][ T4165] usb 5-1: config 0 has no interfaces? [ 169.693709][ T4165] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 169.702789][ T4165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.729869][ T4165] usb 5-1: config 0 descriptor?? [ 170.014341][ T4165] usb 5-1: can't set config #0, error -71 [ 170.275165][ T4165] usb 5-1: USB disconnect, device number 2 [ 171.677360][ T5280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.231'. [ 171.936178][ T5288] loop1: detected capacity change from 0 to 256 [ 172.034266][ T5288] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 179.712534][ T5369] 9pnet: Unknown protocol version 9p200 [ 180.893833][ T5370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 181.400139][ T5376] netlink: 140 bytes leftover after parsing attributes in process `syz.5.250'. [ 181.438585][ T5375] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 181.502553][ T5375] kvm: pic: non byte read [ 182.058614][ T4267] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 183.404136][ T4267] usb 1-1: Using ep0 maxpacket: 16 [ 183.643738][ T4267] usb 1-1: device descriptor read/all, error -71 [ 184.576171][ T5424] 9pnet: Unknown protocol version 9p200 [ 185.029412][ T5427] netlink: 176 bytes leftover after parsing attributes in process `syz.1.262'. [ 185.040363][ T5429] netlink: 68 bytes leftover after parsing attributes in process `syz.4.263'. [ 185.242167][ T5437] loop5: detected capacity change from 0 to 256 [ 185.558916][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 185.956572][ T5437] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 186.639157][ T4165] Bluetooth: hci0: command 0x0406 tx timeout [ 186.662354][ T4165] Bluetooth: hci1: command 0x0406 tx timeout [ 186.708411][ T4165] Bluetooth: hci2: command 0x0406 tx timeout [ 186.746510][ T4165] Bluetooth: hci3: command 0x0406 tx timeout [ 187.774988][ T5452] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 190.543175][ T5507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 191.307755][ T5509] loop5: detected capacity change from 0 to 256 [ 192.365646][ T5509] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 194.663503][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.669862][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.082341][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 197.267618][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 197.982499][ T5600] loop5: detected capacity change from 0 to 256 [ 198.064974][ T5600] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 204.775434][ T5660] loop0: detected capacity change from 0 to 256 [ 204.844767][ T5660] FAT-fs (loop0): Unrecognized mount option "{hortname=lower" or missing value [ 211.213920][ T4316] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.231273][ T4316] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.309797][ T5702] loop1: detected capacity change from 0 to 256 [ 212.511037][ T4316] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.561300][ T5706] dlm: non-version read from control device 0 [ 212.565003][ T5702] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 212.718342][ T4316] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.846021][ T5719] binder: BINDER_SET_CONTEXT_MGR already set [ 213.852500][ T5719] binder: 5718:5719 ioctl 4018620d 200001c0 returned -16 [ 214.820348][ T5728] ptrace attach of "./syz-executor exec"[5729] was attempted by "./syz-executor exec"[5728] [ 217.519400][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 217.833702][ T4271] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 218.497638][ T5721] chnl_net:caif_netlink_parms(): no params data found [ 219.604015][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 219.778898][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.854501][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.916075][ T5721] device bridge_slave_0 entered promiscuous mode [ 219.953749][ T4271] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.007984][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.028002][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.046281][ T5721] device bridge_slave_1 entered promiscuous mode [ 220.077166][ T5790] loop0: detected capacity change from 0 to 256 [ 220.083647][ T4271] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 220.091272][ T4271] usb 1-1: can't read configurations, error -71 [ 220.331956][ T5790] FAT-fs (loop0): Unrecognized mount option "{hortname=lower" or missing value [ 220.407352][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.456346][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.579815][ T5802] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 221.643762][ T4316] device hsr_slave_0 left promiscuous mode [ 221.680157][ T4316] device hsr_slave_1 left promiscuous mode [ 221.688899][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 221.728715][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.780843][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.041566][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.059901][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.110586][ T4316] device bridge_slave_1 left promiscuous mode [ 222.147934][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.200505][ T4316] device bridge_slave_0 left promiscuous mode [ 222.227672][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.313899][ T4316] device veth1_macvtap left promiscuous mode [ 222.340657][ T4316] device veth0_macvtap left promiscuous mode [ 222.376116][ T4316] device veth1_vlan left promiscuous mode [ 222.381938][ T4316] device veth0_vlan left promiscuous mode [ 223.763914][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 223.840770][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 223.894226][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 223.919729][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.073859][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.421961][ T4316] bond0 (unregistering): Released all slaves [ 224.558628][ T5721] team0: Port device team_slave_0 added [ 224.743842][ T5721] team0: Port device team_slave_1 added [ 225.558523][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.583750][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.609845][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.658549][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.717180][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.733637][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.759581][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.958133][ T4267] Bluetooth: hci5: command 0x0406 tx timeout [ 228.334274][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.524525][ T5866] netlink: 44 bytes leftover after parsing attributes in process `syz.4.369'. [ 228.606470][ T5721] device hsr_slave_0 entered promiscuous mode [ 228.661573][ T5721] device hsr_slave_1 entered promiscuous mode [ 228.794946][ T5721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.802676][ T5721] Cannot create hsr debugfs directory [ 230.878514][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.373'. [ 230.887599][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.373'. [ 233.422018][ T5721] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 233.554158][ T5721] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 233.609259][ T5721] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 233.658064][ T5721] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 234.179308][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.241185][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.263347][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.295642][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.329993][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.346758][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.380651][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.387811][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.443843][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.510560][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.538745][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.554186][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.561317][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.587704][ T5947] loop4: detected capacity change from 0 to 256 [ 234.603930][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.639203][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.655069][ T5947] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 234.684970][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.723648][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.763407][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.802825][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.845876][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.864615][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.883889][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.937198][ T5721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.048122][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.081688][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.236593][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.385'. [ 236.245759][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.385'. [ 239.282769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.337358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.407739][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.938876][ T5990] loop4: detected capacity change from 0 to 8192 [ 240.055045][ T5990] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 240.125485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.139872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.231356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.270014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.297241][ T5721] device veth0_vlan entered promiscuous mode [ 240.321256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.353172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.400370][ T5721] device veth1_vlan entered promiscuous mode [ 240.559535][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.578784][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.636153][ T5721] device veth0_macvtap entered promiscuous mode [ 240.663386][ T5721] device veth1_macvtap entered promiscuous mode [ 240.722690][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.767661][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.824417][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.853546][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.886703][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.917590][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.947990][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.983715][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.022888][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.053167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.081927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.106410][ T6023] loop0: detected capacity change from 0 to 256 [ 241.126176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.146044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.196061][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.249791][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.285732][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.303706][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.323554][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.370197][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.380981][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.417480][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.468299][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.478381][ T6023] FAT-fs (loop0): Unrecognized mount option "{hortname=lower" or missing value [ 241.499639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.528839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.574734][ T5721] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.585063][ T5721] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.594736][ T5721] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.603689][ T5721] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.190613][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.389609][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.401479][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.444199][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.469296][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.548589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.618939][ T6046] netlink: 'syz.5.398': attribute type 4 has an invalid length. [ 243.328270][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.399'. [ 245.268723][ T6073] ODEBUG: Out of memory. ODEBUG disabled [ 248.621743][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.411'. [ 255.631402][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.693737][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.724133][ T6195] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 256.732773][ T6195] XFS (loop4): SB validate failed with error -5. [ 258.893713][ T4209] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 259.903781][ T4209] usb 7-1: Using ep0 maxpacket: 32 [ 260.667411][ T4209] usb 7-1: config 0 has no interfaces? [ 260.953742][ T4209] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.975827][ T4209] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 261.019505][ T4209] usb 7-1: Product: syz [ 261.024056][ T4209] usb 7-1: Manufacturer: syz [ 261.033817][ T4209] usb 7-1: SerialNumber: syz [ 261.051281][ T4209] usb 7-1: config 0 descriptor?? [ 261.338590][ T2854] usb 7-1: USB disconnect, device number 2 [ 263.466280][ T6285] 9pnet: Unknown protocol version 9p200 [ 268.469020][ T6351] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 268.543684][ T4165] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 268.903824][ T4165] usb 7-1: Using ep0 maxpacket: 8 [ 269.149585][ T4165] usb 7-1: config 0 has no interfaces? [ 269.155484][ T4165] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.193697][ T4165] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.266836][ T4165] usb 7-1: config 0 descriptor?? [ 269.421300][ T4316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.760141][ T4316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.215992][ T23] usb 7-1: USB disconnect, device number 3 [ 270.235927][ T4316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.806472][ T4316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.929905][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.471'. [ 272.475439][ T6400] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 272.804900][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 273.104910][ T6403] Process accounting resumed [ 273.862291][ T4271] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 275.616120][ T4165] Bluetooth: hci1: command 0x041b tx timeout [ 275.879437][ T6375] chnl_net:caif_netlink_parms(): no params data found [ 277.937570][ T4165] Bluetooth: hci1: command 0x040f tx timeout [ 277.939191][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.485'. [ 277.952510][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.485'. [ 278.344604][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.353578][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.160776][ T6375] device bridge_slave_0 entered promiscuous mode [ 280.327298][ T4209] Bluetooth: hci1: command 0x0419 tx timeout [ 280.353939][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.361075][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.401699][ T6375] device bridge_slave_1 entered promiscuous mode [ 280.701739][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.736894][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.766675][ T6375] team0: Port device team_slave_0 added [ 280.806045][ T6375] team0: Port device team_slave_1 added [ 281.814314][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.821301][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.906127][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.936607][ T146] block nbd5: Receive control failed (result -32) [ 281.949660][ T6488] block nbd5: shutting down sockets [ 282.021673][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.046637][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.073691][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.291950][ T6375] device hsr_slave_0 entered promiscuous mode [ 284.264355][ T6375] device hsr_slave_1 entered promiscuous mode [ 284.274575][ T6375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.304198][ T6375] Cannot create hsr debugfs directory [ 284.309786][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.497'. [ 284.318839][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.497'. [ 284.627244][ T6515] loop6: detected capacity change from 0 to 256 [ 285.115639][ T6515] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 286.713647][ T4271] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 286.722125][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.764309][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.788924][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.800053][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.825064][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.866862][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.886694][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.893815][ T5738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.922762][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.943433][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.953562][ T4271] usb 5-1: Using ep0 maxpacket: 32 [ 286.965474][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.972608][ T5738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.037395][ T4316] device hsr_slave_0 left promiscuous mode [ 287.060290][ T4316] device hsr_slave_1 left promiscuous mode [ 287.073893][ T4271] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 287.092859][ T4271] usb 5-1: config 0 has no interface number 0 [ 287.112542][ T4271] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 287.134723][ T4271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.181082][ T4271] usb 5-1: config 0 descriptor?? [ 287.216900][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.237006][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.249140][ T4271] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 287.268359][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.284180][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.302739][ T4316] device bridge_slave_1 left promiscuous mode [ 287.327021][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.356756][ T4316] device bridge_slave_0 left promiscuous mode [ 287.370150][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.390298][ T4316] device veth1_macvtap left promiscuous mode [ 287.410522][ T4316] device veth0_macvtap left promiscuous mode [ 287.765883][ T4316] device veth1_vlan left promiscuous mode [ 287.771698][ T4316] device veth0_vlan left promiscuous mode [ 287.793431][ T4271] usb 5-1: USB disconnect, device number 3 [ 290.462788][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 290.501891][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 290.542792][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.581952][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.795417][ T4316] bond0 (unregistering): Released all slaves [ 291.524265][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.604525][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.629447][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.639016][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.649609][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.658454][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.800371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.821551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.839208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.883029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.400490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.424821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.477903][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.635074][ T6609] netlink: 140 bytes leftover after parsing attributes in process `syz.6.518'. [ 293.060603][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.083875][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.099198][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.345923][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.394936][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.556180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.659941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.896982][ T6375] device veth0_vlan entered promiscuous mode [ 295.953183][ T6375] device veth1_vlan entered promiscuous mode [ 296.066338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.095938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.227307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.429888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.948136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.975601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.036615][ T6375] device veth0_macvtap entered promiscuous mode [ 297.068561][ T6375] device veth1_macvtap entered promiscuous mode [ 297.143758][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.173580][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.209511][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.240609][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.272141][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.297564][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.318079][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.349594][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.450321][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.470033][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.512712][ T6675] sp0: Synchronizing with TNC [ 297.518818][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.535247][ T6674] sp0: Found TNC [ 297.535525][ T6677] loop6: detected capacity change from 0 to 256 [ 297.544321][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.581926][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.632497][ T6677] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 297.654779][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.723375][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.820946][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.923507][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.986484][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.072699][ T6681] netlink: 140 bytes leftover after parsing attributes in process `syz.4.528'. [ 298.081532][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.111988][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.126553][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.148061][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.206885][ T6673] [U] è` [ 298.282324][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.331357][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.440928][ T6703] page:ffffea00014b4340 refcount:4 mapcount:1 mapping:ffff88807ae8bb48 index:0x0 pfn:0x52d0d [ 301.451773][ T6703] memcg:ffff888079be0000 [ 301.456047][ T6703] aops:shmem_aops ino:4bb [ 301.460426][ T6703] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 301.470257][ T6703] raw: 00fff00000080015 ffffea00014b4308 ffffea00014b4388 ffff88807ae8bb48 [ 301.478857][ T6703] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888079be0000 [ 301.487452][ T6703] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 301.494488][ T6703] page_owner tracks the page as allocated [ 301.500205][ T6703] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 6704, ts 301250337459, free_ts 301239829267 [ 301.514986][ T6703] get_page_from_freelist+0x3b78/0x3d40 [ 301.520558][ T6703] __alloc_pages+0x272/0x700 [ 301.525161][ T6703] alloc_pages_vma+0x39a/0x800 [ 301.529947][ T6703] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 301.535605][ T6703] shmem_getpage_gfp+0x17b1/0x3190 [ 301.540759][ T6703] shmem_read_mapping_page_gfp+0xfd/0x180 [ 301.546498][ T6703] udmabuf_create+0xa62/0x15e0 [ 301.551284][ T6703] udmabuf_ioctl+0x300/0x4e0 [ 301.555890][ T6703] __se_sys_ioctl+0xf1/0x160 [ 301.560495][ T6703] do_syscall_64+0x3b/0xb0 [ 301.564917][ T6703] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.570822][ T6703] page last free stack trace: [ 301.575490][ T6703] free_unref_page_prepare+0xc34/0xcf0 [ 301.580963][ T6703] free_unref_page_list+0x1f7/0x8e0 [ 301.586171][ T6703] release_pages+0x1bb9/0x1f40 [ 301.590946][ T6703] __pagevec_release+0x80/0xf0 [ 301.595712][ T6703] shmem_undo_range+0x67a/0x1b50 [ 301.600674][ T6703] shmem_evict_inode+0x21b/0xa00 [ 301.605643][ T6703] evict+0x529/0x930 [ 301.609562][ T6703] __dentry_kill+0x436/0x650 [ 301.614173][ T6703] dentry_kill+0xbb/0x290 [ 301.618518][ T6703] dput+0xd8/0x1a0 [ 301.622246][ T6703] __fput+0x636/0x8e0 [ 301.626243][ T6703] task_work_run+0x129/0x1a0 [ 301.630851][ T6703] do_exit+0x6a3/0x2480 [ 301.635025][ T6703] do_group_exit+0x144/0x310 [ 301.639636][ T6703] get_signal+0xc66/0x14e0 [ 301.644070][ T6703] arch_do_signal_or_restart+0xc3/0x1890 [ 301.649849][ T6703] ------------[ cut here ]------------ [ 301.655311][ T6703] kernel BUG at mm/filemap.c:166! [ 301.660383][ T6703] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 301.666550][ T6703] CPU: 1 PID: 6703 Comm: syz.0.532 Not tainted 5.15.173-syzkaller #0 [ 301.674627][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.684702][ T6703] RIP: 0010:unaccount_page_cache_page+0x79d/0x8b0 [ 301.691148][ T6703] Code: e8 b8 77 d8 ff 4c 89 f7 48 c7 c6 c0 14 b3 8a e8 c9 c9 0e 00 0f 0b e8 a2 77 d8 ff 4c 89 f7 48 c7 c6 00 15 b3 8a e8 b3 c9 0e 00 <0f> 0b 48 85 ed 75 62 e8 87 77 d8 ff 4c 89 eb eb 60 e8 7d 77 d8 ff [ 301.710771][ T6703] RSP: 0018:ffffc900033df610 EFLAGS: 00010046 [ 301.716859][ T6703] RAX: 62ecb994df636a00 RBX: 0000000000000000 RCX: ffff88801e990000 [ 301.724839][ T6703] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 301.732820][ T6703] RBP: 0000000000000000 R08: ffffffff81d10e84 R09: ffffed10171e4f24 [ 301.740811][ T6703] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd4000296869 [ 301.748795][ T6703] R13: ffffea00014b4348 R14: ffffea00014b4340 R15: dffffc0000000000 [ 301.756903][ T6703] FS: 0000555580f3c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 301.765852][ T6703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.772443][ T6703] CR2: 000000002000e030 CR3: 000000006003d000 CR4: 00000000003506e0 [ 301.780429][ T6703] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.788409][ T6703] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.796395][ T6703] Call Trace: [ 301.799687][ T6703] [ 301.802631][ T6703] ? __die_body+0x5e/0xa0 [ 301.806976][ T6703] ? die+0x83/0xb0 [ 301.810706][ T6703] ? do_trap+0x11e/0x350 [ 301.814967][ T6703] ? unaccount_page_cache_page+0x79d/0x8b0 [ 301.820781][ T6703] ? unaccount_page_cache_page+0x79d/0x8b0 [ 301.826597][ T6703] ? do_error_trap+0x13d/0x1e0 [ 301.831372][ T6703] ? unaccount_page_cache_page+0x79d/0x8b0 [ 301.837186][ T6703] ? do_int3+0x30/0x30 [ 301.841267][ T6703] ? unaccount_page_cache_page+0x79d/0x8b0 [ 301.847082][ T6703] ? handle_invalid_op+0x2c/0x40 [ 301.852029][ T6703] ? unaccount_page_cache_page+0x79d/0x8b0 [ 301.857950][ T6703] ? exc_invalid_op+0x2f/0x40 [ 301.862641][ T6703] ? asm_exc_invalid_op+0x16/0x20 [ 301.867677][ T6703] ? __dump_page_owner+0x414/0x620 [ 301.872801][ T6703] ? unaccount_page_cache_page+0x79d/0x8b0 [ 301.878622][ T6703] ? rcu_is_watching+0x11/0xa0 [ 301.883402][ T6703] __delete_from_page_cache+0xd1/0x860 [ 301.888878][ T6703] ? __rwlock_init+0x140/0x140 [ 301.893656][ T6703] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 301.900692][ T6703] ? _raw_spin_lock_irq+0xdb/0x110 [ 301.905813][ T6703] ? _raw_spin_lock_irqsave+0x120/0x120 [ 301.911370][ T6703] ? page_mapping+0x312/0x440 [ 301.916065][ T6703] delete_from_page_cache+0x126/0x190 [ 301.921453][ T6703] truncate_inode_page+0x8d/0xb0 [ 301.926406][ T6703] shmem_undo_range+0x535/0x1b50 [ 301.931358][ T6703] ? shmem_truncate_range+0xa0/0xa0 [ 301.936580][ T6703] ? __lock_acquire+0x1ff0/0x1ff0 [ 301.941613][ T6703] ? do_raw_spin_lock+0x14a/0x370 [ 301.946654][ T6703] shmem_evict_inode+0x21b/0xa00 [ 301.951610][ T6703] ? _raw_spin_unlock+0x24/0x40 [ 301.956468][ T6703] ? inode_wait_for_writeback+0x21f/0x280 [ 301.962202][ T6703] ? shmem_free_in_core_inode+0xb0/0xb0 [ 301.967756][ T6703] ? bit_waitqueue+0x30/0x30 [ 301.972349][ T6703] ? do_raw_spin_unlock+0x137/0x8b0 [ 301.977561][ T6703] ? shmem_free_in_core_inode+0xb0/0xb0 [ 301.983124][ T6703] evict+0x529/0x930 [ 301.987037][ T6703] ? mode_strip_sgid+0x210/0x210 [ 301.991995][ T6703] ? _raw_spin_unlock+0x24/0x40 [ 301.996858][ T6703] ? iput+0x6f5/0x8b0 [ 302.000857][ T6703] __dentry_kill+0x436/0x650 [ 302.005475][ T6703] dentry_kill+0xbb/0x290 [ 302.009816][ T6703] dput+0xd8/0x1a0 [ 302.013554][ T6703] __fput+0x636/0x8e0 [ 302.017560][ T6703] task_work_run+0x129/0x1a0 [ 302.022173][ T6703] exit_to_user_mode_loop+0x106/0x130 [ 302.027551][ T6703] exit_to_user_mode_prepare+0xb1/0x140 [ 302.033107][ T6703] syscall_exit_to_user_mode+0x5d/0x240 [ 302.038674][ T6703] do_syscall_64+0x47/0xb0 [ 302.043105][ T6703] ? clear_bhb_loop+0x15/0x70 [ 302.047793][ T6703] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.053697][ T6703] RIP: 0033:0x7f374866cf19 [ 302.058118][ T6703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.077724][ T6703] RSP: 002b:00007ffe65265858 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 302.086144][ T6703] RAX: 0000000000000000 RBX: 00007f3748834ba0 RCX: 00007f374866cf19 [ 302.094121][ T6703] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 302.102093][ T6703] RBP: 00007f3748834ba0 R08: 00000000000000a4 R09: 00007ffe65265b3f [ 302.110067][ T6703] R10: 00000000003ffd3c R11: 0000000000000246 R12: 0000000000049bd0 [ 302.118213][ T6703] R13: 00007ffe65265960 R14: 0000000000000032 R15: ffffffffffffffff [ 302.126222][ T6703] [ 302.129243][ T6703] Modules linked in: [ 302.133169][ T6703] ---[ end trace ffdc2c65b34b94e7 ]--- [ 302.138639][ T6703] RIP: 0010:unaccount_page_cache_page+0x79d/0x8b0 [ 302.145065][ T6703] Code: e8 b8 77 d8 ff 4c 89 f7 48 c7 c6 c0 14 b3 8a e8 c9 c9 0e 00 0f 0b e8 a2 77 d8 ff 4c 89 f7 48 c7 c6 00 15 b3 8a e8 b3 c9 0e 00 <0f> 0b 48 85 ed 75 62 e8 87 77 d8 ff 4c 89 eb eb 60 e8 7d 77 d8 ff [ 302.164672][ T6703] RSP: 0018:ffffc900033df610 EFLAGS: 00010046 [ 302.170842][ T6703] RAX: 62ecb994df636a00 RBX: 0000000000000000 RCX: ffff88801e990000 [ 302.179086][ T6703] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 302.187075][ T6703] RBP: 0000000000000000 R08: ffffffff81d10e84 R09: ffffed10171e4f24 [ 302.195058][ T6703] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd4000296869 [ 302.203047][ T6703] R13: ffffea00014b4348 R14: ffffea00014b4340 R15: dffffc0000000000 [ 302.211112][ T6703] FS: 0000555580f3c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 302.220051][ T6703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.226636][ T6703] CR2: 000000002000e030 CR3: 000000006003d000 CR4: 00000000003506e0 [ 302.234620][ T6703] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.242754][ T6703] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.250749][ T6703] Kernel panic - not syncing: Fatal exception [ 302.257043][ T6703] Kernel Offset: disabled [ 302.261368][ T6703] Rebooting in 86400 seconds..