last executing test programs: 8.535194697s ago: executing program 0 (id=3717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000f5ffffff0000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a58000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x80000001, &(0x7f0000000180)=0x1032}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f00000029c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r8, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.019721961s ago: executing program 3 (id=3721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000280)={0x51, 0x12, 0x0, {0x0, 0x2}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7, 0x0, 0x8001}, 0x0, 0x0}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x2, 0x83, 0x4003}) gettid() syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x6c}) dup3(r2, r1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x6, 0xf3, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 6.61435093s ago: executing program 2 (id=3723): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008666604880000000000010902240001000000000904000001030000000921000000013307000905"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.446167294s ago: executing program 0 (id=3725): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000240), 0x208400, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f00006cf000/0x4000)=nil, 0x4000, 0x100000c, 0x1010, r2, 0x44050000) read$FUSE(r5, &(0x7f0000000e00)={0x2020}, 0x2020) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) read(r5, &(0x7f0000000000)=""/239, 0xef) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r6 = syz_io_uring_setup(0x241d, &(0x7f0000000380)={0x0, 0x100000, 0x13090, 0x0, 0x100}, &(0x7f0000000100), &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r6, 0x1, 0x0, 0x1, 0x0, 0x0) 5.444864259s ago: executing program 0 (id=3730): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}}, 0x0) 4.84565273s ago: executing program 0 (id=3732): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156d79b", 0x40}], 0x1}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.845117559s ago: executing program 3 (id=3733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000300000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f0000000400)='./file1\x00', 0x0) fsync(r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.734487378s ago: executing program 2 (id=3734): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0xc0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) write(r0, &(0x7f0000000340)="050000", 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000700000000000000000085009cf57f800000850001e89e17c253b8b22d64b0bfd0054d8875963ee98b5b9653390752a0cd9e759e9ca5a5dcee72e2230716f46e3084cdee9cd38b23a5bb5fa16af0f44a0b96cbfb10da54c8a683e227826b0d0ef97e0fc957e2434753ebdc0254658779359e7b16cb544b38a49749"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000d80), 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.619850918s ago: executing program 0 (id=3736): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.996366501s ago: executing program 2 (id=3737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0300002000"}) 3.980780523s ago: executing program 0 (id=3738): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r3, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000000c0)=0x9) fcntl$setpipe(r3, 0x407, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000001010000000000e50000000200000014000000030a010100aa3154e4eee979000000000000000200000014000000110001010000000000"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000000000000000000000000a3c000000030a03000000000000000000020000000c00024000000000000000010900010073797a3000000000100008800c0001400000000000000001140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0x6c, 0x24, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0x2}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xfffc, 0x100, 0x0, 0xfffffffd, 0x1912fb1a}}, {0x4}}, {{0x1c, 0x1, {0x7f, 0x2, 0x200, 0x1, 0x1, 0xffffffff, 0x5, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x6c}}, 0x4000801) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e0800050000000000ec010880800000801400040002000000e000000100000000000000001400040002000000e0000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00000000000000fe880000000000000000000000000001000000000800030000000000060005000000000068010080fc00098070000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff01000000000000000000000000000105000300000000000600010002000000080002000000000005000300000000000600010002000000080002000a010102050003000200000088000080060001000200000008000200e00000020500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6200004000a00000000000000fe8000000000000000000000000000aa0000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080007000000000008000100", @ANYRES32=r9], 0x23c}}, 0x0) 3.814090127s ago: executing program 3 (id=3741): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="8dfcd728c5e7", @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x65, 0x0, 0x5, 0x2, 0x0, @remote, @multicast2}, {0x14, 0xe7, 0x0, @loopback}}}}}, 0x0) 3.278516462s ago: executing program 4 (id=3742): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) 3.243230435s ago: executing program 2 (id=3743): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=virtio,noextend,access=any,cache=fscache,version=9p2000.u']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000180)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40002, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) 3.124417105s ago: executing program 3 (id=3744): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008666604880000000000010902240001000000000904000001030000000921000000013307000905"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.95446201s ago: executing program 2 (id=3745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bind$x25(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r2, 0x0, 0xee01) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000880)={0x0, 0x80000000, [0x3ff, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff8, 0xc, 0xab]}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x0, @val=@netfilter}, 0x40) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x4000)=nil) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendto$packet(r6, &(0x7f00000003c0)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a8", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = dup(r8) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="acc925bd70fe49362137da67d5330e20fb3f5e98cc135004ebb487e2c806fc1d3a5b655e13edd6dfba9963dc5793ae708ac06666b9620bb00565c6b1c8d9d5a59a795d065815fa746c10d82e357f916534670e1106e8183a72a22a572aead866a32c8758ddcd9b7d0521ff7519b01484860938ca421253f3298b00c57b919a47edb40dca1e7e5169f2b29fa971c8fe25abb971062ad4ffe9174a", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000004733d900600"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, &(0x7f0000000300), 0x40f00, 0x15, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xd}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r11 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRESHEX=r10, @ANYRES32=r11, @ANYBLOB="ae23b65ed50800e8", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000000000"], 0x5c, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 2.740122587s ago: executing program 4 (id=3747): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0xc0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) write(r0, &(0x7f0000000340)="050000", 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000700000000000000000085009cf57f800000850001e89e17c253b8b22d64b0bfd0054d8875963ee98b5b9653390752a0cd9e759e9ca5a5dcee72e2230716f46e3084cdee9cd38b23a5bb5fa16af0f44a0b96cbfb10da54c8a683e227826b0d0ef97e0fc957e2434753ebdc0254658779359e7b16cb544b38a49749"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000d80), 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2.610417808s ago: executing program 1 (id=3748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x341200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket(0xc8448176dddb7e68, 0x400, 0xf8000000) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x8000000, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xfc) 1.954436924s ago: executing program 4 (id=3749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.835779574s ago: executing program 2 (id=3750): socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000008963c544f51d0fb4fa529df214bea8c81a1a4aa1a37bca3fdb19476621", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xa02a, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 1.794997698s ago: executing program 1 (id=3751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000300000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000400)='./file1\x00', 0x0) fsync(r4) close_range(r1, 0xffffffffffffffff, 0x0) 1.702233786s ago: executing program 4 (id=3752): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.497621303s ago: executing program 1 (id=3753): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 1.244787734s ago: executing program 4 (id=3754): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105511, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x8000) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010003b0c221be8e10000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000180012800b00030065727370616e0000080002"], 0x44}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x19d0}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x78, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, {0x4, 0x234, 0xfffffffffffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f0000012400)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"a7ef6aaa43523bc46961d90d9b290a7a", 0x0, 0x0, {0xa311, 0xffffffff}, {0x4, 0x10}, 0x9, [0x8, 0x1, 0x0, 0xd1d0d60, 0x7, 0xff, 0x8, 0xc4a, 0x8001, 0x7, 0x200000000000000, 0x20, 0x4, 0x8, 0x2, 0x2]}) timerfd_settime(0xffffffffffffffff, 0x7, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) writev(r0, &(0x7f0000001780), 0x1c) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000440)=0x20) 1.191081749s ago: executing program 1 (id=3755): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000061bd465b4bdeba03ed5701dcb496d51fbc913123caea6bfabdfa5d5db28585e7dc4eff5e4776e5982457c48563f65c6fd104bdbed79666f15d5a78b38ff25396eefd611088fa93cee2c261dbc8e483d2b6"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x23, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e4, 0xcc, 0xcc, 0x274, 0x1ac, 0x274, 0x41c, 0x41c, 0x41c, 0x41c, 0x41c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x540) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r7], 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) 844.948978ms ago: executing program 3 (id=3756): userfaultfd(0x801) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 561.759582ms ago: executing program 1 (id=3757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001280000000000900"}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x8000451a, 0x0) 428.693713ms ago: executing program 3 (id=3758): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156d79b", 0x40}], 0x1}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 226.4819ms ago: executing program 1 (id=3759): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0xc0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) write(r0, &(0x7f0000000340)="050000", 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000700000000000000000085009cf57f800000850001e89e17c253b8b22d64b0bfd0054d8875963ee98b5b9653390752a0cd9e759e9ca5a5dcee72e2230716f46e3084cdee9cd38b23a5bb5fa16af0f44a0b96cbfb10da54c8a683e227826b0d0ef97e0fc957e2434753ebdc0254658779359e7b16cb544b38a49749"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000d80), 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 0s ago: executing program 4 (id=3760): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): 1579][T13551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.949220][T13551] device hsr_slave_0 entered promiscuous mode [ 605.986940][T13551] device hsr_slave_1 entered promiscuous mode [ 606.032931][T13551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.048557][T13551] Cannot create hsr debugfs directory [ 606.429292][ T48] Bluetooth: hci9: command tx timeout [ 606.562794][ T1010] block nbd1: Possible stuck request ffff8880252a0000: control (read@0,4096B). Runtime 30 seconds [ 606.927846][T13693] loop1: detected capacity change from 0 to 512 [ 607.029084][T13693] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 607.048904][T13693] EXT4-fs (loop1): orphan cleanup on readonly fs [ 607.058288][T13693] EXT4-fs error (device loop1): ext4_quota_enable:6988: comm syz.1.3269: Bad quota inum: 1, type: 1 [ 607.099617][T13693] EXT4-fs warning (device loop1): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 607.388928][T13693] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 607.594705][T13693] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 607.724845][T13551] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.821422][T13551] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 608.069385][T13393] EXT4-fs (loop1): unmounting filesystem. [ 608.159421][T13551] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.198246][T13551] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 608.395057][T13551] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.473149][T13551] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 608.508387][ T48] Bluetooth: hci9: command tx timeout [ 608.536614][T13720] syz.3.3275[13720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.536728][T13720] syz.3.3275[13720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.698703][T13551] bond0: (slave netdevsim0): Releasing backup interface [ 608.754193][T13551] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.828297][T13551] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 609.095621][T13730] 9pnet_fd: Insufficient options for proto=fd [ 610.425772][T13551] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 610.535092][T13748] 9pnet_fd: Insufficient options for proto=fd [ 610.598277][ T48] Bluetooth: hci9: command tx timeout [ 610.932044][T13551] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 611.369700][T13551] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 611.441890][T13551] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 611.514442][T13752] loop4: detected capacity change from 0 to 512 [ 611.584955][T13752] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 611.606363][T13752] EXT4-fs (loop4): orphan cleanup on readonly fs [ 611.628606][T13752] EXT4-fs error (device loop4): ext4_quota_enable:6988: comm syz.4.3283: Bad quota inum: 1, type: 1 [ 611.720476][T13752] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 611.883033][T13752] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 611.926259][T13752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 612.598257][T13769] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 612.672144][T13551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.821814][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 612.835813][T13769] siw: device registration error -19 [ 612.849371][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 612.901751][T13551] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.010334][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 613.031457][T11399] libceph: connect (1)[c::]:6789 error -101 [ 613.039007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 613.039235][T11399] libceph: mon0 (1)[c::]:6789 connect error [ 613.065321][T11399] libceph: connect (1)[c::]:6789 error -101 [ 613.071553][T11399] libceph: mon0 (1)[c::]:6789 connect error [ 613.094829][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.102032][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.112045][T12638] EXT4-fs (loop4): unmounting filesystem. [ 613.222215][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 613.231933][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 613.277120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 613.288306][T13777] ceph: No mds server is up or the cluster is laggy [ 613.319313][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.326549][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.369458][ T3688] libceph: connect (1)[c::]:6789 error -101 [ 613.375516][ T3688] libceph: mon0 (1)[c::]:6789 connect error [ 613.381934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 613.450184][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 613.465374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 613.516015][T13796] fuse: Bad value for 'rootmode' [ 613.552496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 613.620373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 613.666966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.711899][T13551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.743792][T13551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.782774][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.796749][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 613.827880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.857295][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.888861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.928596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 615.425699][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.443926][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 615.462206][T13551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.546338][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 615.566806][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 615.602592][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 615.629499][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 615.666221][T13551] device veth0_vlan entered promiscuous mode [ 615.681177][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 615.706427][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 615.746932][T13551] device veth1_vlan entered promiscuous mode [ 615.796444][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 615.810284][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 615.824205][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 615.854600][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 615.877231][T13551] device veth0_macvtap entered promiscuous mode [ 615.888850][T13551] device veth1_macvtap entered promiscuous mode [ 615.946696][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.958291][T11409] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 615.986711][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.021316][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.053103][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.081150][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.108263][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 616.116060][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.167894][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.236279][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.273897][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.303829][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.327023][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.346672][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.368489][T11409] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.387626][T11409] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 616.404482][T13551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.421002][T11409] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 616.432409][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 616.444112][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 616.460943][T11409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.484267][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 616.533707][T11409] usb 3-1: config 0 descriptor?? [ 616.563212][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 616.586962][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.600362][T11409] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 616.606994][T11409] dvb-usb: bulk message failed: -22 (3/0) [ 616.637347][T11409] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 616.646461][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.658649][T11409] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 616.665709][T11409] usb 3-1: media controller created [ 616.679088][T11409] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.710245][T11409] dvb-usb: bulk message failed: -22 (6/0) [ 616.728679][T11409] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 616.752463][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.770532][T11409] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input97 [ 616.788161][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.802578][T11409] dvb-usb: schedule remote query interval to 150 msecs. [ 616.810095][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.826372][T11409] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 616.844843][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.859408][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.870134][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.888216][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.898992][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.914187][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.924964][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.938195][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.949191][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.968325][T13551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.968347][T13551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.978396][ T3724] dvb-usb: bulk message failed: -22 (1/0) [ 616.997632][T13551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.011811][ T3724] dvb-usb: error while querying for an remote control event. [ 617.020415][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 617.031774][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 617.049159][T13551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.058271][T13551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.067369][T13551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.077125][T13551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.198210][ T3689] dvb-usb: bulk message failed: -22 (1/0) [ 617.204117][ T3689] dvb-usb: error while querying for an remote control event. [ 617.265687][ T6787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.294059][ T6787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.347898][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 617.363703][ T9766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.388906][ T3724] dvb-usb: bulk message failed: -22 (1/0) [ 617.395543][ T3724] dvb-usb: error while querying for an remote control event. [ 617.411975][T13839] fuse: Bad value for 'rootmode' [ 617.417549][ T9766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.462323][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 617.590849][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 617.612397][ T7] dvb-usb: error while querying for an remote control event. [ 617.798361][ T3689] dvb-usb: bulk message failed: -22 (1/0) [ 617.806383][ T3689] dvb-usb: error while querying for an remote control event. [ 618.008346][ T3689] dvb-usb: bulk message failed: -22 (1/0) [ 618.015651][ T3689] dvb-usb: error while querying for an remote control event. [ 618.190909][ T3689] dvb-usb: bulk message failed: -22 (1/0) [ 618.217464][ T3689] dvb-usb: error while querying for an remote control event. [ 618.521344][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 618.544038][ T7] dvb-usb: error while querying for an remote control event. [ 619.618289][T13855] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3306'. [ 620.275304][ T1010] block nbd0: Possible stuck request ffff8880564c8000: control (read@0,4096B). Runtime 30 seconds [ 620.302615][ T3688] usb 3-1: USB disconnect, device number 59 acpid: input device has been disconnected, fd 10 [ 620.459448][ T3688] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 620.540856][T13862] fuse: Bad value for 'rootmode' [ 620.766287][T13866] loop2: detected capacity change from 0 to 512 [ 620.832035][T13866] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 620.849462][T13866] EXT4-fs (loop2): orphan cleanup on readonly fs [ 620.855971][T13866] EXT4-fs error (device loop2): ext4_quota_enable:6988: comm syz.2.3311: Bad quota inum: 1, type: 1 [ 620.896472][ T48] Bluetooth: hci6: unexpected event for opcode 0x041a [ 620.961579][T13866] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 621.009073][T13866] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 621.027477][T13866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 621.342652][T12847] EXT4-fs (loop2): unmounting filesystem. [ 621.444267][ T3659] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 621.488395][ T3659] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 621.499107][ T3659] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 621.513530][ T3659] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 621.521519][ T3659] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 621.530354][ T3659] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 621.780001][T13893] fuse: Unknown parameter 'use00000000000000000000' [ 621.858235][ T3724] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 622.009035][T13883] chnl_net:caif_netlink_parms(): no params data found [ 622.418892][ T3724] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 622.508729][ T3724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.548783][ T3724] usb 3-1: config 0 descriptor?? [ 622.652241][T13883] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.660530][T13883] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.676528][T13883] device bridge_slave_0 entered promiscuous mode [ 622.718873][T13883] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.727083][T13883] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.794441][T13883] device bridge_slave_1 entered promiscuous mode [ 623.050879][T13883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.083626][T13883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.323432][T13883] team0: Port device team_slave_0 added [ 623.333771][T13883] team0: Port device team_slave_1 added [ 623.383222][T13883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.408611][T13883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.436192][T13883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.451824][T13883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.468149][T13883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.507693][T13883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.549905][ T3659] Bluetooth: hci10: command tx timeout [ 623.630856][T13883] device hsr_slave_0 entered promiscuous mode [ 623.646318][T13883] device hsr_slave_1 entered promiscuous mode [ 623.662068][T13883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.713566][T13883] Cannot create hsr debugfs directory [ 623.738374][ T3724] pegasus: probe of 3-1:0.0 failed with error -32 [ 623.821007][T13917] loop3: detected capacity change from 0 to 512 [ 623.874521][T13917] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 623.893032][T13917] EXT4-fs (loop3): orphan cleanup on readonly fs [ 623.914597][T13917] EXT4-fs error (device loop3): ext4_quota_enable:6988: comm syz.3.3329: Bad quota inum: 1, type: 1 [ 623.929901][T13917] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 623.944896][T13917] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 623.953980][T13917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 624.066208][T13883] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.162614][ T9044] EXT4-fs (loop3): unmounting filesystem. [ 624.252433][T13883] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.273016][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.279532][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.465025][T13883] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.706974][T13883] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.719514][T13937] fuse: Unknown parameter 'use00000000000000000000' [ 625.207615][T13883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 625.227108][T13883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 625.245468][T13883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 625.383922][T13883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 625.638252][ T3659] Bluetooth: hci10: command tx timeout [ 626.000049][ T7] usb 3-1: USB disconnect, device number 60 [ 626.522694][T13883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.731718][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 626.759943][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 626.784345][T13883] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.849421][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 626.889696][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 626.990966][ T9766] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.998168][ T9766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.008938][ T7] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 627.107840][T13971] fuse: Unknown parameter 'use00000000000000000000' [ 627.179811][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 627.207467][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 627.229392][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.252431][ T9766] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.259668][ T9766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.330661][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 627.368245][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.387978][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 627.400019][ T7] usb 3-1: config 0 has no interfaces? [ 627.440196][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 627.532546][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 627.558311][ T7] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 627.574590][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.602643][ T7] usb 3-1: Product: syz [ 627.606833][ T7] usb 3-1: Manufacturer: syz [ 627.626429][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 627.670226][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 627.696965][ T7] usb 3-1: SerialNumber: syz [ 627.710047][ T3659] Bluetooth: hci10: command tx timeout [ 627.756360][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 627.765099][ T7] usb 3-1: config 0 descriptor?? [ 627.810793][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 627.821141][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 627.832408][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 627.913756][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 628.738393][ T3659] block nbd4: Receive control failed (result -32) [ 628.751394][T13982] block nbd4: shutting down sockets [ 629.016468][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 629.030003][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 629.056172][T13883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.582665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 629.612169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.634559][T13997] loop3: detected capacity change from 0 to 512 [ 629.692432][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 629.725252][T13997] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 629.726766][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.750950][T13997] EXT4-fs (loop3): orphan cleanup on readonly fs [ 629.764494][T13883] device veth0_vlan entered promiscuous mode [ 629.774220][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 629.782584][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 629.790040][ T3659] Bluetooth: hci10: command tx timeout [ 629.799130][T13997] EXT4-fs error (device loop3): ext4_quota_enable:6988: comm syz.3.3351: Bad quota inum: 1, type: 1 [ 629.811210][T13997] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 629.838336][T13997] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 629.842514][T13883] device veth1_vlan entered promiscuous mode [ 629.860495][T13997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 629.912150][T13883] device veth0_macvtap entered promiscuous mode [ 629.937647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 630.020574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 630.058545][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 630.089855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 630.109528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 630.140328][T13883] device veth1_macvtap entered promiscuous mode [ 630.211914][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.248191][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.278150][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.308171][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.390497][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.422791][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.454244][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.486373][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.496490][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.507275][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.518335][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.531578][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.549125][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.569937][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.583571][ T9044] EXT4-fs (loop3): unmounting filesystem. [ 630.584708][T13883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.602695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 630.613918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 630.641255][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.667549][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.732775][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.781347][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.809655][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.842795][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.987408][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.125977][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.393076][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.463594][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.474606][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.487134][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.499411][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.510691][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.521359][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.533419][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.548215][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.559362][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.579373][ T7] usb 3-1: USB disconnect, device number 61 [ 631.582160][T13883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.635477][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 631.647928][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 631.691540][T13883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.708179][T13883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.717504][T13883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.729406][T13883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.920573][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.951589][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.993324][ T6787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 632.058021][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.078520][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.118732][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 632.848293][ T3693] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 633.260513][ T3659] block nbd2: Receive control failed (result -32) [ 633.278017][T14033] block nbd2: shutting down sockets [ 633.528232][ T3693] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.538560][ T3693] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 633.577466][ T3693] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 633.622361][ T3693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.720556][ T3693] usb 5-1: config 0 descriptor?? [ 633.780408][ T3693] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 633.780445][ T3693] dvb-usb: bulk message failed: -22 (3/0) [ 633.782525][ T3693] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 633.798888][ T3693] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 633.798919][ T3693] usb 5-1: media controller created [ 633.799739][ T3693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.802043][ T3693] dvb-usb: bulk message failed: -22 (6/0) [ 633.802162][ T3693] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 633.849448][ T3693] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input98 [ 633.851004][ T3693] dvb-usb: schedule remote query interval to 150 msecs. [ 633.851024][ T3693] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 634.008261][ T3693] dvb-usb: bulk message failed: -22 (1/0) [ 634.008291][ T3693] dvb-usb: error while querying for an remote control event. [ 634.179423][ T3693] dvb-usb: bulk message failed: -22 (1/0) [ 634.179449][ T3693] dvb-usb: error while querying for an remote control event. [ 634.338391][ T3688] dvb-usb: bulk message failed: -22 (1/0) [ 634.338423][ T3688] dvb-usb: error while querying for an remote control event. [ 634.498159][ T3688] dvb-usb: bulk message failed: -22 (1/0) [ 634.498200][ T3688] dvb-usb: error while querying for an remote control event. [ 634.679830][ T3693] dvb-usb: bulk message failed: -22 (1/0) [ 634.679862][ T3693] dvb-usb: error while querying for an remote control event. [ 634.858809][ T3693] dvb-usb: bulk message failed: -22 (1/0) [ 634.858841][ T3693] dvb-usb: error while querying for an remote control event. [ 635.034613][ T3688] dvb-usb: bulk message failed: -22 (1/0) [ 635.174651][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3371'. [ 635.190174][ T3688] dvb-usb: error while querying for an remote control event. [ 635.245047][T14070] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.376356][ T3688] dvb-usb: bulk message failed: -22 (1/0) [ 635.406454][ T3688] dvb-usb: error while querying for an remote control event. [ 635.615984][ T3693] dvb-usb: bulk message failed: -22 (1/0) [ 635.638962][ T3693] dvb-usb: error while querying for an remote control event. [ 635.732523][T11399] usb 5-1: USB disconnect, device number 60 acpid: input device has been disconnected, fd 3 [ 635.829367][T11399] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 635.868332][ T3688] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 636.088212][ T3688] usb 3-1: device descriptor read/64, error -71 [ 636.398264][ T3688] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 636.628160][ T3688] usb 3-1: device descriptor read/64, error -71 [ 636.758516][ T3688] usb usb3-port1: attempt power cycle [ 637.069870][ T1010] block nbd1: Possible stuck request ffff8880252a0000: control (read@0,4096B). Runtime 60 seconds [ 637.198317][ T3688] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 637.308874][ T3688] usb 3-1: device descriptor read/8, error -71 [ 637.385595][ T3659] block nbd4: Receive control failed (result -32) [ 637.418523][T14090] block nbd4: shutting down sockets [ 637.588238][ T3688] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 637.700070][ T3688] usb 3-1: device descriptor read/8, error -71 [ 637.818393][ T3688] usb usb3-port1: unable to enumerate USB device [ 641.149283][T11399] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 641.294787][T14173] loop0: detected capacity change from 0 to 512 [ 641.317014][T14173] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 641.326593][T14173] EXT4-fs (loop0): orphan cleanup on readonly fs [ 641.333140][T14173] EXT4-fs error (device loop0): ext4_quota_enable:6988: comm syz.0.3406: Bad quota inum: 1, type: 1 [ 641.345801][T14173] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 641.361017][T14173] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 641.368758][T14173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 641.408195][T11399] usb 3-1: Using ep0 maxpacket: 8 [ 641.466319][T13551] EXT4-fs (loop0): unmounting filesystem. [ 641.474014][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'. [ 641.496838][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'. [ 641.539096][T11399] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 641.552503][T11399] usb 3-1: config 179 has no interface number 0 [ 641.572878][T11399] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 641.596564][T11399] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 641.623936][T11399] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 641.635860][T11399] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 641.648566][T11399] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 641.662452][T11399] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 641.683629][T11399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.718489][T14160] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 642.089571][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3414'. [ 642.113955][T14192] device bridge_slave_1 left promiscuous mode [ 642.127004][T14192] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.174847][ T3688] usb 3-1: USB disconnect, device number 66 [ 642.180924][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 642.180979][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 643.251912][T14212] loop4: detected capacity change from 0 to 512 [ 643.298305][T14212] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 643.771604][T14212] EXT4-fs (loop4): orphan cleanup on readonly fs [ 643.777969][T14212] EXT4-fs error (device loop4): ext4_quota_enable:6988: comm syz.4.3419: Bad quota inum: 1, type: 1 [ 643.822001][T14212] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 643.888313][T14212] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 643.936599][T14212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 644.079444][T12638] EXT4-fs (loop4): unmounting filesystem. [ 645.276301][ T48] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 645.291033][ T48] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 645.300191][ T48] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 645.309203][ T48] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 645.316866][ T48] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 645.325196][ T48] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 645.888147][T11399] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 646.064083][T14249] chnl_net:caif_netlink_parms(): no params data found [ 646.098307][T11399] usb 4-1: device descriptor read/64, error -71 [ 646.135068][T14270] loop4: detected capacity change from 0 to 512 [ 646.198841][T14270] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 646.219941][T14270] EXT4-fs (loop4): orphan cleanup on readonly fs [ 646.238344][T14270] EXT4-fs error (device loop4): ext4_quota_enable:6988: comm syz.4.3437: Bad quota inum: 1, type: 1 [ 646.289975][T14270] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 646.367067][T14270] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 646.376711][T14249] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.396747][T14270] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 646.406019][T11399] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 646.414634][T14249] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.442310][T14249] device bridge_slave_0 entered promiscuous mode [ 646.493876][T14249] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.514351][T14249] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.540865][T14249] device bridge_slave_1 entered promiscuous mode [ 646.608455][T11399] usb 4-1: device descriptor read/64, error -71 [ 646.658645][T12638] EXT4-fs (loop4): unmounting filesystem. [ 646.728432][T11399] usb usb4-port1: attempt power cycle [ 646.752174][T14249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.811999][T14249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.178264][T11399] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 647.289541][T11399] usb 4-1: device descriptor read/8, error -71 [ 647.388574][ T3659] Bluetooth: hci11: command tx timeout [ 647.473052][T14249] team0: Port device team_slave_0 added [ 647.527099][T14249] team0: Port device team_slave_1 added [ 647.558622][T11399] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 647.659036][T11399] usb 4-1: device descriptor read/8, error -71 [ 647.779225][T11399] usb usb4-port1: unable to enumerate USB device [ 648.138144][T14249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.166027][T14249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.241331][T14249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.259065][T14249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.276546][T14249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.327196][T14249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.497447][T14249] device hsr_slave_0 entered promiscuous mode [ 648.508836][T14289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3441'. [ 648.564639][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3441'. [ 648.565172][T14249] device hsr_slave_1 entered promiscuous mode [ 648.648707][T14249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.658421][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'. [ 648.678444][T14249] Cannot create hsr debugfs directory [ 648.698184][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'. [ 649.094801][T14249] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.233875][T14303] bond2 (unregistering): Released all slaves [ 649.360183][T14249] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.468832][ T3659] Bluetooth: hci11: command tx timeout [ 649.593682][T14249] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.688756][ T3688] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 649.907583][T14249] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.268846][ T3688] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 650.280057][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 650.290565][ T3688] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 650.399024][T14316] ALSA: mixer_oss: invalid OSS volume '' [ 650.524707][ T1010] block nbd0: Possible stuck request ffff8880564c8000: control (read@0,4096B). Runtime 60 seconds [ 650.588597][ T3688] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 650.605856][ T3688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.788204][ T3688] usb 4-1: Product: syz [ 650.793064][ T3688] usb 4-1: Manufacturer: syz [ 650.797792][ T3688] usb 4-1: SerialNumber: syz [ 650.833522][ T3688] usb 4-1: config 0 descriptor?? [ 650.870889][T14305] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.139654][ T3688] option 4-1:0.0: GSM modem (1-port) converter detected [ 651.187772][T14249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 651.240263][T14249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 651.268211][ T14] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 651.279693][T14249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 651.326458][T14249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 651.458362][ T14] usb 3-1: device descriptor read/64, error -71 [ 651.501418][T14249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.547554][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 651.559343][ T3659] Bluetooth: hci11: command tx timeout [ 651.581435][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 651.656406][T14249] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.680818][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 651.712171][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 651.728848][ T14] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 651.764426][T12174] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.771576][T12174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.808251][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 651.836734][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 651.858560][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 651.884769][T12174] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.892053][T12174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.919076][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 651.928276][ T14] usb 3-1: device descriptor read/64, error -71 [ 651.951867][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 651.962146][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 651.976440][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 651.994964][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 652.004616][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 652.014452][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 652.024868][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 652.034395][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 652.048904][ T14] usb usb3-port1: attempt power cycle [ 652.057453][T14249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 652.069334][T14249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.077858][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 652.089228][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.324644][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 652.346380][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 652.382039][T14249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.431643][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 652.442745][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 652.458195][ T14] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 652.475429][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 652.484811][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 652.497941][T14249] device veth0_vlan entered promiscuous mode [ 652.510872][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 652.525896][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 652.541900][T14249] device veth1_vlan entered promiscuous mode [ 652.551080][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 652.590936][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 652.610880][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 652.618437][ T14] usb 3-1: device descriptor read/8, error -71 [ 652.662982][T14249] device veth0_macvtap entered promiscuous mode [ 652.703537][T14249] device veth1_macvtap entered promiscuous mode [ 652.789866][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.818796][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.849194][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.862439][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.872575][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.883523][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.893561][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.898280][ T14] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 652.919782][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.929853][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.964569][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.978270][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.015875][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.018426][ T14] usb 3-1: device descriptor read/8, error -71 [ 653.038711][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.098268][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.126117][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.136869][T11399] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 653.153298][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.170440][T14249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.180236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 653.188322][ T14] usb usb3-port1: unable to enumerate USB device [ 653.189920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 653.203243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 653.213366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 653.226160][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.264791][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.285133][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.300378][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.300723][ T14] usb 4-1: USB disconnect, device number 40 [ 653.325002][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.333344][ T14] option 4-1:0.0: device disconnected [ 653.342372][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.362847][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.375730][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.385740][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.396401][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.406382][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.417246][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.427201][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.437707][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.447652][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.462087][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.472258][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.482750][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.492672][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.503195][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.529255][T14249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.557166][T11399] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 653.567883][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 653.584479][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 653.594229][T11399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.607162][T11399] usb 5-1: config 0 descriptor?? [ 653.615141][T14249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.631148][T14249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.641550][ T3659] Bluetooth: hci11: command tx timeout [ 653.649181][T14249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.659341][T14249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.813895][ T9766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.838998][ T9766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.884034][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 653.949591][ T6937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.982758][ T6937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.004533][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 654.768393][T11399] pegasus: probe of 5-1:0.0 failed with error -32 [ 655.128406][T14364] netlink: 'syz.3.3463': attribute type 4 has an invalid length. [ 655.269307][T14369] netlink: 'syz.3.3463': attribute type 4 has an invalid length. [ 656.498230][T11399] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 656.699226][T11399] usb 2-1: device descriptor read/64, error -71 [ 656.741635][ T48] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 656.761705][ T48] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 656.770308][ T48] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 656.774128][ T3691] usb 5-1: USB disconnect, device number 61 [ 656.786449][ T48] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 656.794637][ T48] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 656.802343][ T48] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 657.018642][T11399] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 657.220870][T11399] usb 2-1: device descriptor read/64, error -71 [ 657.341251][T11399] usb usb2-port1: attempt power cycle [ 657.788308][T11399] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 657.830000][T14403] debugfs: Directory 'netdev:nicvf0' with parent 'phy24' already present! [ 657.888473][T11399] usb 2-1: device descriptor read/8, error -71 [ 657.898393][T14383] chnl_net:caif_netlink_parms(): no params data found [ 658.162498][T14383] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.178570][T14383] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.187767][T14383] device bridge_slave_0 entered promiscuous mode [ 658.198723][T11399] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 658.227616][T14383] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.257636][T14383] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.306629][T14383] device bridge_slave_1 entered promiscuous mode [ 658.318709][T11399] usb 2-1: device descriptor read/8, error -71 [ 658.433354][T14383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.449293][T11399] usb usb2-port1: unable to enumerate USB device [ 658.505493][T14383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.682797][T14383] team0: Port device team_slave_0 added [ 658.705968][T14383] team0: Port device team_slave_1 added [ 658.799435][T14383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.838712][ T48] Bluetooth: hci12: command tx timeout [ 658.847582][T14383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.885956][ T3659] block nbd4: Receive control failed (result -32) [ 658.893875][T14408] block nbd4: shutting down sockets [ 659.139860][T14383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.259311][T14383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.297639][T14383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.411671][T14383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.671143][T14383] device hsr_slave_0 entered promiscuous mode [ 659.697624][T14383] device hsr_slave_1 entered promiscuous mode [ 659.728621][T14383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.793014][T14383] Cannot create hsr debugfs directory [ 660.315480][T14383] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.637395][T14383] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.908403][ T48] Bluetooth: hci12: command tx timeout [ 661.231679][T14383] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.459676][T14383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.923785][T14383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 661.940800][T14383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 661.989278][T14383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 662.022704][T14383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 662.047474][T14446] debugfs: Directory 'netdev:nicvf0' with parent 'phy24' already present! [ 662.188704][ T3659] Bluetooth: hci7: command 0x0406 tx timeout [ 662.207584][T14383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.226572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 662.265717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.281903][T14383] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.295839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.313397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.334509][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.341732][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.363314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.396879][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 662.406646][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.425827][ T4010] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.433134][ T4010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.469113][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.524003][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.570890][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.592591][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 662.635168][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.678674][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.712907][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 662.750640][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.780295][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.823026][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.841995][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.889466][T14383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 662.988959][ T48] Bluetooth: hci12: command tx timeout [ 663.511736][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.526792][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 663.568769][T14383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.723325][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 663.737125][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 663.785997][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 663.802326][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 663.823269][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 663.846373][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 663.876643][T14383] device veth0_vlan entered promiscuous mode [ 663.909942][T14383] device veth1_vlan entered promiscuous mode [ 664.010950][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 664.037775][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 664.076815][T14471] input: syz1 as /devices/virtual/input/input99 [ 664.102143][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 664.141041][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 664.192875][T14383] device veth0_macvtap entered promiscuous mode [ 664.255834][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 664.276869][T14383] device veth1_macvtap entered promiscuous mode [ 664.358898][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.383349][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.402636][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.438352][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.460571][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.479505][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.505034][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.539628][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.571303][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.649581][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.681830][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.706424][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.727461][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.756263][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.849705][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.896201][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.986096][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.015500][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.062449][T14383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.070570][ T48] Bluetooth: hci12: command tx timeout [ 665.146300][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 665.177458][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 665.207205][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.259676][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.272810][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.285195][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.296864][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.309267][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.319681][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.331224][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.341484][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.352240][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.363353][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.395377][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.416602][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.451265][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.524370][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.578936][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.589296][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.602607][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.612743][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.623422][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.634195][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.645916][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.659329][T14383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.695385][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 665.717387][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 665.801775][T14383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.828609][T14383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.897353][T14383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.917294][T14383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.066041][T14486] fuse: Unknown parameter '0x0000000000000003' [ 666.140759][ T9766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.161751][ T9766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.223542][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 666.387146][ T6937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.419297][ T6937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.462026][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 667.150091][ T1010] block nbd1: Possible stuck request ffff8880252a0000: control (read@0,4096B). Runtime 90 seconds [ 668.221818][T14526] fuse: Unknown parameter '0x0000000000000003' [ 668.318349][T14528] block nbd3: shutting down sockets [ 668.930143][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3511'. [ 669.025462][T14537] device bridge_slave_1 left promiscuous mode [ 669.155255][T14537] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.253862][T14537] bridge1: port 1(bridge_slave_1) entered blocking state [ 669.278868][T14537] bridge1: port 1(bridge_slave_1) entered disabled state [ 669.316313][T14537] device bridge_slave_1 entered promiscuous mode [ 670.380143][T14556] block nbd2: shutting down sockets [ 671.028674][T14563] fuse: Unknown parameter '0x0000000000000003' [ 671.061512][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3519'. [ 671.129656][T14564] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.280486][T14567] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 672.393950][T14592] netlink: 'syz.1.3529': attribute type 1 has an invalid length. [ 672.433048][T14592] bond1 (unregistering): Released all slaves [ 672.470075][T14598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3529'. [ 672.704772][T14608] fuse: Unknown parameter 'fd0x0000000000000003' [ 672.824568][T14610] debugfs: Directory 'netdev:nicvf0' with parent 'phy24' already present! [ 674.490852][ T3659] block nbd4: Receive control failed (result -32) [ 674.490905][ T48] block nbd4: Receive control failed (result -32) [ 674.524740][T14624] block nbd4: shutting down sockets [ 674.628168][ T3689] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 675.018257][ T3689] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 675.038555][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 675.070865][ T3689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 675.428352][ T3689] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 675.467582][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.600743][ T3689] usb 3-1: Product: syz [ 675.605060][ T3689] usb 3-1: Manufacturer: syz [ 675.617948][ T3689] usb 3-1: SerialNumber: syz [ 675.652872][ T3689] usb 3-1: config 0 descriptor?? [ 675.668202][T11399] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 675.938255][T11399] usb 2-1: Using ep0 maxpacket: 8 [ 676.018423][T14643] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 676.079567][ T3689] option 3-1:0.0: GSM modem (1-port) converter detected [ 676.088443][T11399] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.115233][T11399] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 676.157154][T11399] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 676.209738][T11399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.257381][T11399] usb 2-1: config 0 descriptor?? [ 676.720402][T11399] usb 2-1: USB disconnect, device number 50 [ 677.428247][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3548'. [ 677.489495][T14677] device bridge_slave_1 left promiscuous mode [ 677.513513][T14677] bridge1: port 1(bridge_slave_1) entered disabled state [ 677.548673][ T3660] Bluetooth: hci4: command 0x0406 tx timeout [ 677.570989][T14677] bridge2: port 1(bridge_slave_1) entered blocking state [ 677.600440][T14677] bridge2: port 1(bridge_slave_1) entered disabled state [ 677.615531][T14677] device bridge_slave_1 entered promiscuous mode [ 678.065638][T11409] usb 3-1: USB disconnect, device number 71 [ 678.084331][T11409] option 3-1:0.0: device disconnected [ 678.427944][T14702] fuse: Unknown parameter 'fd0x0000000000000003' [ 678.559971][T14709] debugfs: Directory 'netdev:nicvf0' with parent 'phy24' already present! [ 679.879449][T14712] block nbd4: server does not support multiple connections per device. [ 679.919836][T14712] block nbd4: shutting down sockets [ 680.158438][T11399] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 680.428434][T11399] usb 3-1: Using ep0 maxpacket: 8 [ 680.568372][T11399] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.594393][ T1010] block nbd0: Possible stuck request ffff8880564c8000: control (read@0,4096B). Runtime 90 seconds [ 680.626083][T11399] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 680.673934][T11399] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 680.711688][T11399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.760230][T11399] usb 3-1: config 0 descriptor?? [ 680.820935][T11399] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 681.170087][T11399] usb 3-1: USB disconnect, device number 72 [ 681.313318][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3562'. [ 681.387882][T14731] device bridge_slave_1 left promiscuous mode [ 681.401950][T14731] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.430579][T14731] bridge1: port 1(bridge_slave_1) entered blocking state [ 681.489986][T14731] bridge1: port 1(bridge_slave_1) entered disabled state [ 681.558323][T14731] device bridge_slave_1 entered promiscuous mode [ 681.808559][ T14] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 682.154828][ T26] audit: type=1326 audit(1729235872.686:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14743 comm="syz.2.3566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59637dff9 code=0x0 [ 682.168565][ T14] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 682.238224][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 682.284404][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 682.488309][ T14] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 682.503609][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.535662][ T14] usb 2-1: Product: syz [ 682.552982][ T14] usb 2-1: Manufacturer: syz [ 682.567880][ T14] usb 2-1: SerialNumber: syz [ 682.597069][ T14] usb 2-1: config 0 descriptor?? [ 682.629164][T14736] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 682.650765][ T14] option 2-1:0.0: GSM modem (1-port) converter detected [ 683.448184][ T3691] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 683.605818][T14773] block nbd3: shutting down sockets [ 683.858383][ T3691] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.886838][ T3691] usb 3-1: config 0 has no interfaces? [ 684.118253][ T3691] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 684.150915][ T3691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.204140][ T3691] usb 3-1: Product: syz [ 684.230981][ T3691] usb 3-1: Manufacturer: syz [ 684.256911][ T3691] usb 3-1: SerialNumber: syz [ 684.304370][ T3691] usb 3-1: config 0 descriptor?? [ 685.143673][ T3724] usb 2-1: USB disconnect, device number 51 [ 685.161295][ T3724] option 2-1:0.0: device disconnected [ 685.453409][T14784] 9pnet_virtio: no channels available for device syz [ 685.578179][T11409] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 685.709926][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.716353][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.818172][T11409] usb 5-1: Using ep0 maxpacket: 8 [ 685.938426][T11409] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.993242][T11409] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 686.143944][T11409] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 686.202330][T11409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.285515][T11409] usb 5-1: config 0 descriptor?? [ 686.365252][T11409] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 686.417008][ T3659] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 686.433306][ T48] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 686.441591][ T48] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 686.450523][ T48] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 686.460048][ T48] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 686.467487][ T48] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 686.700062][T11399] usb 5-1: USB disconnect, device number 62 [ 687.379522][T14796] chnl_net:caif_netlink_parms(): no params data found [ 687.705754][ T3689] usb 3-1: USB disconnect, device number 73 [ 687.822461][T14796] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.829967][T14796] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.841319][T14796] device bridge_slave_0 entered promiscuous mode [ 687.854473][T14796] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.871249][T14796] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.880852][T14796] device bridge_slave_1 entered promiscuous mode [ 687.962340][T14814] loop2: detected capacity change from 0 to 512 [ 687.980726][T14814] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 687.990542][T14814] EXT4-fs (loop2): orphan cleanup on readonly fs [ 687.997090][T14814] EXT4-fs error (device loop2): ext4_quota_enable:6988: comm syz.2.3584: Bad quota inum: 1, type: 1 [ 688.010725][T14814] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 688.028373][T14814] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 688.035299][T14814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 688.091829][T14796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.134279][T14796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.248169][T12847] EXT4-fs (loop2): unmounting filesystem. [ 688.480967][T14796] team0: Port device team_slave_0 added [ 688.518374][ T3660] Bluetooth: hci13: command tx timeout [ 688.583145][T14796] team0: Port device team_slave_1 added [ 688.609736][T14817] Bluetooth: MGMT ver 1.22 [ 688.739608][T14796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.768880][T14796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.964346][T14796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.081951][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3585'. [ 689.159556][T14796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.166936][T14796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.234003][T14796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.477714][T14796] device hsr_slave_0 entered promiscuous mode [ 689.505982][T14796] device hsr_slave_1 entered promiscuous mode [ 689.524350][T14796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 689.546833][T14796] Cannot create hsr debugfs directory [ 690.149363][T14796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.189930][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3593'. [ 690.238191][ T3691] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 690.305632][T14796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.335882][T14841] device bridge_slave_1 left promiscuous mode [ 690.348596][T14841] bridge1: port 1(bridge_slave_1) entered disabled state [ 690.369941][T14841] bridge2: port 1(bridge_slave_1) entered blocking state [ 690.387774][T14841] bridge2: port 1(bridge_slave_1) entered disabled state [ 690.406838][T14841] device bridge_slave_1 entered promiscuous mode [ 690.494356][T14796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.504819][ T3691] usb 4-1: Using ep0 maxpacket: 8 [ 690.598357][ T3660] Bluetooth: hci13: command tx timeout [ 690.648358][ T3691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.662116][ T3691] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.676356][ T3691] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 690.685949][ T3691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.697573][ T3691] usb 4-1: config 0 descriptor?? [ 690.739791][T14796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.753553][ T3691] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 691.094664][T14796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 691.112544][T14796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 691.129366][T14796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 691.141102][T14796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 691.145062][T11369] usb 4-1: USB disconnect, device number 41 [ 691.360722][T14796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.399597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 691.409614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 691.433202][T14796] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.462518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 691.478637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 691.491053][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.498295][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.531799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 691.544084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 691.557948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 691.569135][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.576246][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.608819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 691.699452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 691.730875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 691.746750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 691.766956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 691.776279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 691.805740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 691.829923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 691.860034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 691.901785][T14796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 691.953842][T14796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 691.977322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 692.053506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 692.668582][ T3660] Bluetooth: hci13: command tx timeout [ 692.841468][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 692.851715][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 692.901947][T14796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.023369][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 693.045632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 693.136675][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 693.159793][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 693.210531][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 693.249697][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 693.377546][T14796] device veth0_vlan entered promiscuous mode [ 693.454298][T14796] device veth1_vlan entered promiscuous mode [ 693.497292][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 693.621736][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 693.644612][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 693.682061][T14796] device veth0_macvtap entered promiscuous mode [ 693.741744][T14796] device veth1_macvtap entered promiscuous mode [ 693.881680][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.927660][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.980293][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.042240][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.057303][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.068848][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.079604][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.090769][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3599'. [ 694.100819][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3599'. [ 694.114430][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.125525][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.150662][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.172968][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.196657][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.223898][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.241925][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.252667][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.264633][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.277675][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.289400][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.300605][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.313025][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.344574][T14796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.366959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 694.377710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 694.386624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 694.396346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 694.420812][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.441656][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.472712][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.507655][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.535289][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.562772][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.583006][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.599038][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.610636][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.623142][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.758245][ T48] Bluetooth: hci13: command tx timeout [ 694.779109][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.790465][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.800536][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.811436][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.821584][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.833820][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.848581][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.868293][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.898825][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.969075][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.015188][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.051863][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.099946][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.149274][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.234947][T14796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.274735][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 695.300249][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 695.329878][T14796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.347371][T14796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.365297][T14796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.378982][T14796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.597954][ T6938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.626186][ T6938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.702910][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 695.729167][T12174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.755330][T12174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.797179][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 696.438438][ T3724] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 696.552672][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3609'. [ 696.566402][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3609'. [ 696.688169][ T3724] usb 4-1: Using ep0 maxpacket: 8 [ 696.808411][ T3724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.830453][ T3724] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.898384][ T3724] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 696.921410][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.957393][ T3724] usb 4-1: config 0 descriptor?? [ 697.010667][ T3724] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 697.148268][T11399] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 697.231840][ T1010] block nbd1: Possible stuck request ffff8880252a0000: control (read@0,4096B). Runtime 120 seconds [ 697.385036][T11409] usb 4-1: USB disconnect, device number 42 [ 697.558662][T11399] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.589355][T11399] usb 3-1: config 0 has no interfaces? [ 697.788733][T11399] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 697.812116][T11399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.831224][T11399] usb 3-1: Product: syz [ 697.844983][T11399] usb 3-1: Manufacturer: syz [ 697.855594][T11399] usb 3-1: SerialNumber: syz [ 697.888548][T11399] usb 3-1: config 0 descriptor?? [ 698.985705][T14934] delete_channel: no stack [ 699.604474][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3620'. [ 699.651827][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3620'. [ 699.761665][ T48] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 699.772497][ T48] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 699.781456][ T48] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 699.792179][ T48] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 699.803263][ T48] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 699.810728][ T48] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 699.949028][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3622'. [ 699.989876][T14957] device bridge_slave_1 left promiscuous mode [ 699.996337][T14957] bridge2: port 1(bridge_slave_1) entered disabled state [ 700.069628][T14957] bridge3: port 1(bridge_slave_1) entered blocking state [ 700.076779][T14957] bridge3: port 1(bridge_slave_1) entered disabled state [ 700.129657][T14957] device bridge_slave_1 entered promiscuous mode [ 700.425305][T14952] chnl_net:caif_netlink_parms(): no params data found [ 700.458473][T11409] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 700.708186][T11409] usb 4-1: Using ep0 maxpacket: 8 [ 700.828590][T11409] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 700.870947][T11409] usb 4-1: config 179 has no interface number 0 [ 700.878196][T11409] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 700.891830][T11409] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 700.905352][T11409] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 700.917196][T11409] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 700.931115][T11409] usb 4-1: config 179 interface 65 has no altsetting 0 [ 700.938427][T11409] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 700.948143][T11409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.972839][T14952] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.991691][ T14] usb 3-1: USB disconnect, device number 74 [ 701.008427][T14962] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 701.027250][T14952] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.052300][T11409] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input100 [ 701.086745][T14952] device bridge_slave_0 entered promiscuous mode [ 701.105956][T14952] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.165701][T14952] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.201547][T14952] device bridge_slave_1 entered promiscuous mode [ 701.334371][T14952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.351845][T14984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.416832][T14952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.522946][ T14] usb 4-1: USB disconnect, device number 43 [ 701.529114][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 701.561995][ T14] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 701.705135][T14952] team0: Port device team_slave_0 added [ 701.749747][T14952] team0: Port device team_slave_1 added [ 701.845416][T14993] debugfs: Directory 'netdev:nicvf0' with parent 'phy24' already present! [ 701.868382][ T3660] Bluetooth: hci14: command tx timeout [ 701.920871][T14952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.958351][T14952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.108698][T14952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.211083][T14952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.241112][T14952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.322245][T14952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.386471][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 702.578453][T15012] delete_channel: no stack [ 702.629621][T14952] device hsr_slave_0 entered promiscuous mode [ 702.719104][T14952] device hsr_slave_1 entered promiscuous mode [ 702.786394][T14952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 702.811496][T14952] Cannot create hsr debugfs directory [ 702.863757][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3633'. [ 702.982246][T15022] device bridge_slave_1 left promiscuous mode [ 703.012073][T15022] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.075531][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3634'. [ 703.186505][T15030] bond2 (unregistering): Released all slaves [ 703.531183][T14952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.593979][T15035] netlink: 'syz.2.3636': attribute type 1 has an invalid length. [ 703.948534][ T3660] Bluetooth: hci14: command tx timeout [ 704.058140][T15037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 704.091520][T15037] bond1: (slave bond2): making interface the new active one [ 704.118712][T15037] bond1: (slave bond2): Enslaving as an active interface with an up link [ 704.208289][T15040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3636'. [ 704.433780][T14952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.764988][T14952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.076815][T14952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.375385][ T14] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 705.791966][T14952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 705.798739][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 705.815748][T14952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 705.853016][T14952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 705.883429][T14952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 705.910761][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3644'. [ 705.918467][ T14] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 705.932839][ T14] usb 3-1: config 179 has no interface number 0 [ 705.948272][ T14] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 705.963322][T15069] device bridge_slave_1 left promiscuous mode [ 705.970583][T15069] bridge3: port 1(bridge_slave_1) entered disabled state [ 705.981416][ T14] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 705.996607][T15069] bridge4: port 1(bridge_slave_1) entered blocking state [ 706.010321][T15069] bridge4: port 1(bridge_slave_1) entered disabled state [ 706.015769][ T14] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 706.030683][T15069] device bridge_slave_1 entered promiscuous mode [ 706.038553][ T3660] Bluetooth: hci14: command tx timeout [ 706.043424][ T14] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 706.062308][T15074] delete_channel: no stack [ 706.067143][ T14] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 706.081120][ T14] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 706.091247][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.118408][T15052] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 706.306090][T14952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.362823][ T14] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input101 [ 706.383435][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 706.419929][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 706.437537][T15081] Bluetooth: MGMT ver 1.22 [ 706.459316][T14952] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.479940][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 706.494160][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 706.515631][T12174] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.522846][T12174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.555769][ T7] usb 3-1: USB disconnect, device number 75 [ 706.568115][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 706.576458][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 706.597290][ T7] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 706.632665][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 706.642832][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 706.656794][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 706.670703][T12174] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.677892][T12174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.687330][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 706.697798][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 706.724803][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 706.736503][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 706.755002][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 706.783126][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 706.819282][ T3724] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 706.838986][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 706.856552][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 706.880674][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 706.899495][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 706.923978][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 706.944293][T15094] netlink: 'syz.4.3648': attribute type 1 has an invalid length. [ 707.037064][T15096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 707.051996][T15096] bond2: (slave bond3): making interface the new active one [ 707.062301][T15096] bond2: (slave bond3): Enslaving as an active interface with an up link [ 707.073200][T14952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 707.081508][ T3724] usb 4-1: Using ep0 maxpacket: 8 [ 707.103441][T15094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3648'. [ 707.155286][T15094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 707.199081][ T3724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.229644][ T3724] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.274125][ T3724] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 707.308263][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.350162][ T3724] usb 4-1: config 0 descriptor?? [ 707.390716][ T3724] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 708.109006][ T48] Bluetooth: hci14: command tx timeout [ 708.539509][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 708.588345][T15134] 9pnet_fd: Insufficient options for proto=fd [ 708.589519][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 708.809934][T11369] usb 4-1: USB disconnect, device number 44 [ 708.827860][T14952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.941128][ T6787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 708.980438][ T6787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 709.269803][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 709.287888][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 709.330169][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 709.348905][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 709.385289][T14952] device veth0_vlan entered promiscuous mode [ 709.463791][T14952] device veth1_vlan entered promiscuous mode [ 709.525914][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 709.552804][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 709.579418][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 709.619515][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 709.646895][T14952] device veth0_macvtap entered promiscuous mode [ 709.686209][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 709.704539][T14952] device veth1_macvtap entered promiscuous mode [ 709.717237][T15161] netlink: 'syz.2.3660': attribute type 1 has an invalid length. [ 709.847238][T15164] 8021q: adding VLAN 0 to HW filter on device bond4 [ 709.861286][T15164] bond3: (slave bond4): making interface the new active one [ 709.879685][T15164] bond3: (slave bond4): Enslaving as an active interface with an up link [ 709.897582][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.908770][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.919129][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.929818][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.940174][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.951222][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.961408][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.974862][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.998497][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.017521][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.037773][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.061596][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.072146][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.087055][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.097690][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.108823][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.118843][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.131983][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.142119][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.155687][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.165955][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.176711][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.195448][T14952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.207085][T15161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3660'. [ 710.259949][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3664'. [ 710.310728][T15177] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.333389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 710.343684][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 710.400288][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.414977][T15180] 9pnet_fd: Insufficient options for proto=fd [ 710.434309][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.460317][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.568191][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.611377][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.688738][ T1010] block nbd0: Possible stuck request ffff8880564c8000: control (read@0,4096B). Runtime 120 seconds [ 710.692953][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.769218][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.780080][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.792123][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.930785][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.943183][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.950903][ T3724] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 710.954021][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.972274][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.984445][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.995572][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.010180][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.020708][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.031900][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.043473][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.054451][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.065055][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.076198][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.086631][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.097632][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.108902][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.120085][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.141146][T14952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.204112][ T3724] usb 3-1: Using ep0 maxpacket: 8 [ 711.299433][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 711.358477][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 711.370690][T14952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.403812][T14952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.408256][ T3724] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.438209][ T3724] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.440878][T14952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.472190][ T3724] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 711.481879][T14952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.485305][ T3724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.523466][ T3724] usb 3-1: config 0 descriptor?? [ 711.573248][ T3724] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 711.668757][T15086] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 711.718772][ T4010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.751117][ T4010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.800338][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 711.845145][ T9766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.866062][ T9766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.932016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 712.018606][ T3724] usb 3-1: USB disconnect, device number 76 [ 712.907613][T15210] debugfs: Directory 'netdev:nicvf0' with parent 'phy24' already present! [ 713.388382][ T48] Bluetooth: hci8: command 0x0406 tx timeout [ 715.698426][T11369] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 715.698484][T11399] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 715.969926][T11399] usb 4-1: Using ep0 maxpacket: 8 [ 716.109011][T11399] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 716.278792][T11399] usb 4-1: config 179 has no interface number 0 [ 716.285604][T11399] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 716.298144][T11399] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 716.310211][T11399] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 716.322059][T11399] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 716.334735][T11399] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 716.368122][T11399] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 716.398652][T11399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.448418][T15237] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 716.488291][T11369] usb 5-1: Using ep0 maxpacket: 8 [ 716.628450][T11369] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.648093][T11369] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.822328][T11369] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 716.838421][T11369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.970302][T11369] usb 5-1: config 0 descriptor?? [ 717.014032][T11399] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input102 [ 717.057630][T11369] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 717.086451][T11369] usb 4-1: USB disconnect, device number 45 [ 717.092554][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 717.092601][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 717.764590][T11369] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 718.013287][ T3689] usb 5-1: USB disconnect, device number 64 [ 718.205787][T15259] block nbd2: shutting down sockets [ 718.329315][T15261] netlink: 'syz.2.3690': attribute type 10 has an invalid length. [ 718.360812][T15261] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.432188][T15261] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.439603][T15261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.470649][T15261] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 721.736468][T15293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3699'. [ 722.068526][ T22] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 722.358854][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 722.508425][ T22] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 722.522877][ T22] usb 2-1: config 179 has no interface number 0 [ 722.557323][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 722.597041][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 722.631254][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 722.693418][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 722.738411][ T22] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 722.786814][ T22] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 722.822229][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.878440][T15300] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 722.928124][ T3689] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 723.119740][ T22] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input103 [ 723.390088][T11399] usb 2-1: USB disconnect, device number 52 [ 723.418079][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 723.432488][T11399] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 726.158164][T15338] netlink: 'syz.3.3715': attribute type 10 has an invalid length. [ 726.367659][T15338] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 727.377481][ T1010] block nbd1: Possible stuck request ffff8880252a0000: control (read@0,4096B). Runtime 150 seconds [ 727.658328][ T3693] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 728.248303][ T3693] usb 4-1: Using ep0 maxpacket: 8 [ 728.358184][T15086] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 728.369081][ T3693] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 728.393633][ T3693] usb 4-1: config 179 has no interface number 0 [ 728.419385][ T3693] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 728.448155][ T3693] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 728.480060][ T3693] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 728.512698][ T3693] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 728.565408][ T3693] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 728.598215][T15086] usb 3-1: Using ep0 maxpacket: 8 [ 728.601656][ T3693] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 728.614204][ T3693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.648527][T15358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 728.728454][T15086] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 728.749166][ T3660] Bluetooth: hci9: command 0x0406 tx timeout [ 728.760017][T15086] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 728.795022][T15086] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.837573][T15374] block nbd4: shutting down sockets [ 728.861254][T15086] usb 3-1: config 0 descriptor?? [ 728.899975][ T3693] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input104 [ 728.920465][T15086] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 729.090388][ T3693] usb 4-1: USB disconnect, device number 47 [ 729.098083][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 729.106413][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 729.131673][ T3693] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 729.242241][ T3689] usb 3-1: USB disconnect, device number 77 [ 729.300026][T15382] netlink: 'syz.0.3730': attribute type 1 has an invalid length. [ 729.535183][T15384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 729.573665][T15384] bond1: (slave bond2): making interface the new active one [ 729.584578][T15384] bond1: (slave bond2): Enslaving as an active interface with an up link [ 729.694283][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3731'. [ 731.459754][T15419] netlink: 'syz.4.3742': attribute type 1 has an invalid length. [ 731.470433][T15420] 9pnet_virtio: no channels available for device syz [ 731.523013][T15420] overlayfs: overlapping lowerdir path [ 731.732233][T15421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3742'. [ 731.750010][T15421] 8021q: adding VLAN 0 to HW filter on device bond4 [ 731.863619][T15426] loop2: detected capacity change from 0 to 512 [ 731.918559][ T14] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 731.926799][T15426] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 731.975275][T15426] EXT4-fs (loop2): orphan cleanup on readonly fs [ 732.158184][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 732.163389][T15426] EXT4-fs error (device loop2): ext4_quota_enable:6988: comm syz.2.3745: Bad quota inum: 1, type: 1 [ 732.179755][T15426] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 732.196927][T15426] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 732.204545][T15426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 732.708428][ T14] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 732.741648][ T14] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 732.753920][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.778941][ T14] usb 4-1: config 0 descriptor?? [ 732.807808][T12847] EXT4-fs (loop2): unmounting filesystem. [ 732.819943][ T14] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 732.959874][T15440] netlink: 'syz.4.3752': attribute type 1 has an invalid length. [ 733.099476][T15440] 8021q: adding VLAN 0 to HW filter on device bond6 [ 733.212967][ T127] usb 4-1: USB disconnect, device number 48 [ 733.225044][T15440] bond5: (slave bond6): Enslaving as an active interface with an up link [ 733.435844][T15447] block nbd2: shutting down sockets [ 733.550621][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3755'. [ 734.989899][ T28] INFO: task syz.1.3149:13238 blocked for more than 143 seconds. [ 734.997792][ T28] Not tainted 6.1.113-syzkaller #0 [ 735.015316][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.058348][ T28] task:syz.1.3149 state:D stack:25832 pid:13238 ppid:11970 flags:0x00004004 [ 735.068587][ T28] Call Trace: [ 735.072134][ T28] [ 735.075141][ T28] __schedule+0x143f/0x4570 [ 735.082001][ T28] ? release_firmware_map_entry+0x186/0x186 [ 735.104205][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 735.131900][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 735.154399][ T28] schedule+0xbf/0x180 [ 735.172739][ T28] schedule_preempt_disabled+0xf/0x20 [ 735.216696][ T28] __mutex_lock+0x6b9/0xd80 [ 735.248637][ T28] ? __mutex_lock+0x53c/0xd80 [ 735.294459][ T28] ? blkdev_put+0x100/0x750 [ 735.324877][ T28] ? mutex_lock_nested+0x10/0x10 [ 735.332663][ T28] ? __fsnotify_parent+0x50c/0x730 [ 735.339640][ T28] blkdev_put+0x100/0x750 [ 735.345002][ T28] blkdev_close+0x56/0x80 [ 735.355794][ T28] ? blkdev_open+0x2e0/0x2e0 [ 735.360944][ T28] __fput+0x3f6/0x8d0 [ 735.364994][ T28] task_work_run+0x246/0x300 [ 735.378109][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 735.401499][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 735.407011][ T28] exit_to_user_mode_loop+0xde/0x100 [ 735.421070][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 735.426675][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 735.433013][ T28] do_syscall_64+0x47/0xb0 [ 735.437473][ T28] ? clear_bhb_loop+0x45/0xa0 [ 735.442949][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.449392][ T28] RIP: 0033:0x7fc9db17dff9 [ 735.453942][ T28] RSP: 002b:00007ffefb6203c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 735.463752][ T28] RAX: 0000000000000000 RBX: 00007fc9db337a80 RCX: 00007fc9db17dff9 [ 735.472915][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 735.482027][ T28] RBP: 00007fc9db337a80 R08: 0000000000000006 R09: 00007ffefb6206bf [ 735.490527][ T28] R10: 00000000003fd8fc R11: 0000000000000246 R12: 000000000008cd8d [ 735.499019][ T28] R13: 00007ffefb6204d0 R14: 0000000000000032 R15: ffffffffffffffff [ 735.507049][ T28] [ 735.515706][ T28] INFO: task syz.1.3149:13243 blocked for more than 143 seconds. [ 735.524658][ T28] Not tainted 6.1.113-syzkaller #0 [ 735.530539][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.539305][ T28] task:syz.1.3149 state:D stack:27560 pid:13243 ppid:11970 flags:0x00004004 [ 735.548712][ T28] Call Trace: [ 735.552116][ T28] [ 735.555066][ T28] __schedule+0x143f/0x4570 [ 735.560168][ T28] ? release_firmware_map_entry+0x186/0x186 [ 735.566102][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 735.574146][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 735.584127][ T28] schedule+0xbf/0x180 [ 735.593333][ T28] schedule_preempt_disabled+0xf/0x20 [ 735.603876][ T28] __mutex_lock+0x6b9/0xd80 [ 735.608644][ T28] ? __mutex_lock+0x53c/0xd80 [ 735.613355][ T28] ? blkdev_put+0x100/0x750 [ 735.617908][ T28] ? mutex_lock_nested+0x10/0x10 [ 735.623067][ T28] ? __fsnotify_parent+0x50c/0x730 [ 735.629361][ T28] blkdev_put+0x100/0x750 [ 735.633733][ T28] blkdev_close+0x56/0x80 [ 735.638153][ T28] ? blkdev_open+0x2e0/0x2e0 [ 735.642772][ T28] __fput+0x3f6/0x8d0 [ 735.646804][ T28] task_work_run+0x246/0x300 [ 735.651539][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 735.656594][ T28] ? blkdev_ioctl+0x3a9/0x760 [ 735.661381][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 735.666859][ T28] exit_to_user_mode_loop+0xde/0x100 [ 735.672521][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 735.688149][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 735.693745][ T28] do_syscall_64+0x47/0xb0 [ 735.707702][ T28] ? clear_bhb_loop+0x45/0xa0 [ 735.712749][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.719017][ T28] RIP: 0033:0x7fc9db17dff9 [ 735.723544][ T28] RSP: 002b:00007fc9dbfbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.732065][ T28] RAX: 0000000000000000 RBX: 00007fc9db336058 RCX: 00007fc9db17dff9 [ 735.740095][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 735.748166][ T28] RBP: 00007fc9db1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 735.756167][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.764270][ T28] R13: 0000000000000000 R14: 00007fc9db336058 R15: 00007ffefb620268 [ 735.772335][ T28] [ 735.775381][ T28] INFO: task syz.0.3203:13424 blocked for more than 144 seconds. [ 735.783920][ T28] Not tainted 6.1.113-syzkaller #0 [ 735.793044][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.801926][ T28] task:syz.0.3203 state:D stack:25000 pid:13424 ppid:5096 flags:0x00004004 [ 735.811501][ T28] Call Trace: [ 735.814804][ T28] [ 735.817760][ T28] __schedule+0x143f/0x4570 [ 735.824562][ T28] ? release_firmware_map_entry+0x186/0x186 [ 735.838143][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 735.843691][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 735.849173][ T28] schedule+0xbf/0x180 [ 735.853269][ T28] schedule_preempt_disabled+0xf/0x20 [ 735.858731][ T28] __mutex_lock+0x6b9/0xd80 [ 735.863272][ T28] ? __mutex_lock+0x53c/0xd80 [ 735.867979][ T28] ? blkdev_put+0x100/0x750 [ 735.872637][ T28] ? mutex_lock_nested+0x10/0x10 [ 735.877612][ T28] ? __fsnotify_parent+0x50c/0x730 [ 735.882845][ T28] blkdev_put+0x100/0x750 [ 735.887837][ T28] blkdev_close+0x56/0x80 [ 735.892284][ T28] ? blkdev_open+0x2e0/0x2e0 [ 735.896907][ T28] __fput+0x3f6/0x8d0 [ 735.903781][ T28] task_work_run+0x246/0x300 [ 735.908530][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 735.913600][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 735.919165][ T28] exit_to_user_mode_loop+0xde/0x100 [ 735.924482][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 735.930140][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 735.935723][ T28] do_syscall_64+0x47/0xb0 [ 735.940256][ T28] ? clear_bhb_loop+0x45/0xa0 [ 735.944972][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.951010][ T28] RIP: 0033:0x7f3d7b37dff9 [ 735.955456][ T28] RSP: 002b:00007ffc344c8178 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 735.963980][ T28] RAX: 0000000000000000 RBX: 00007f3d7b537a80 RCX: 00007f3d7b37dff9 [ 735.972105][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 735.980190][ T28] RBP: 00007f3d7b537a80 R08: 0000000000000006 R09: 00007ffc344c846f [ 735.988988][ T28] R10: 00000000003fb4c4 R11: 0000000000000246 R12: 000000000008fefb [ 735.997020][ T28] R13: 00007ffc344c8280 R14: 0000000000000032 R15: ffffffffffffffff [ 736.005088][ T28] [ 736.010915][ T28] INFO: task syz.0.3203:13425 blocked for more than 144 seconds. [ 736.020916][ T28] Not tainted 6.1.113-syzkaller #0 [ 736.026607][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.035574][ T28] task:syz.0.3203 state:D stack:25216 pid:13425 ppid:5096 flags:0x00004004 [ 736.045298][ T28] Call Trace: [ 736.048732][ T28] [ 736.051779][ T28] __schedule+0x143f/0x4570 [ 736.056412][ T28] ? release_firmware_map_entry+0x186/0x186 [ 736.062539][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 736.068176][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 736.073492][ T28] schedule+0xbf/0x180 [ 736.077656][ T28] schedule_preempt_disabled+0xf/0x20 [ 736.083249][ T28] __mutex_lock+0x6b9/0xd80 [ 736.087810][ T28] ? __mutex_lock+0x53c/0xd80 [ 736.093364][ T28] ? blkdev_put+0x100/0x750 [ 736.097925][ T28] ? mutex_lock_nested+0x10/0x10 [ 736.102975][ T28] ? __fsnotify_parent+0x50c/0x730 [ 736.108191][ T28] blkdev_put+0x100/0x750 [ 736.112568][ T28] blkdev_close+0x56/0x80 [ 736.116936][ T28] ? blkdev_open+0x2e0/0x2e0 [ 736.124165][ T28] __fput+0x3f6/0x8d0 [ 736.128261][ T28] task_work_run+0x246/0x300 [ 736.132912][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 736.137956][ T28] ? blkdev_ioctl+0x3a9/0x760 [ 736.142730][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 736.148306][ T28] exit_to_user_mode_loop+0xde/0x100 [ 736.153630][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 736.159290][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 736.164892][ T28] do_syscall_64+0x47/0xb0 [ 736.169430][ T28] ? clear_bhb_loop+0x45/0xa0 [ 736.174149][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.180171][ T28] RIP: 0033:0x7f3d7b37dff9 [ 736.184752][ T28] RSP: 002b:00007f3d7c1f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.203813][ T28] RAX: 0000000000000000 RBX: 00007f3d7b535f80 RCX: 00007f3d7b37dff9 [ 736.212245][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 736.220347][ T28] RBP: 00007f3d7b3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 736.231207][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.239359][ T28] R13: 0000000000000000 R14: 00007f3d7b535f80 R15: 00007ffc344c8018 [ 736.247401][ T28] [ 736.250614][ T28] [ 736.250614][ T28] Showing all locks held in the system: [ 736.258519][ T28] 1 lock held by rcu_tasks_kthre/12: [ 736.263829][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 736.276283][ T28] 1 lock held by rcu_tasks_trace/13: [ 736.281729][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 736.292844][ T28] 1 lock held by khungtaskd/28: [ 736.299412][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 736.309490][ T28] 2 locks held by getty/3394: [ 736.314186][ T28] #0: ffff88814b7df098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 736.324039][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 736.334299][ T28] 1 lock held by udevd/3722: [ 736.342454][ T28] #0: ffff8880251314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.352966][ T28] 1 lock held by udevd/9064: [ 736.357587][ T28] #0: ffff8880251a34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.367814][ T28] 1 lock held by syz.1.3149/13238: [ 736.373033][ T28] #0: ffff8880251314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 736.382601][ T28] 1 lock held by syz.1.3149/13243: [ 736.387743][ T28] #0: ffff8880251314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 736.398144][ T28] 1 lock held by syz.0.3203/13424: [ 736.403288][ T28] #0: ffff8880251a34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 736.412873][ T28] 1 lock held by syz.0.3203/13425: [ 736.418085][ T28] #0: ffff8880251a34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 736.427665][ T28] 1 lock held by syz.1.3284/13755: [ 736.433349][ T28] #0: ffff8880251314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.443554][ T28] 1 lock held by syz.1.3284/13759: [ 736.451445][ T28] #0: ffff8880251314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.461625][ T28] 1 lock held by syz.1.3367/14058: [ 736.466759][ T28] #0: ffff8880251314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.476922][ T28] 1 lock held by syz.1.3367/14061: [ 736.482111][ T28] #0: ffff8880251314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.492278][ T28] 1 lock held by syz.0.3436/14271: [ 736.497404][ T28] #0: ffff8880251a34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.518116][ T28] 1 lock held by syz.0.3436/14272: [ 736.523349][ T28] #0: ffff8880251a34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.534339][ T28] 1 lock held by syz.0.3544/14658: [ 736.539990][ T28] #0: ffff8880251a34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.550797][ T28] 1 lock held by syz.0.3544/14661: [ 736.556010][ T28] #0: ffff8880251a34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.568402][ T28] 1 lock held by syz.1.3589/14829: [ 736.573642][ T28] #0: ffff8880251314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.584578][ T28] 1 lock held by syz.1.3589/14831: [ 736.590288][ T28] #0: ffff8880251314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 736.602602][ T28] [ 736.605032][ T28] ============================================= [ 736.605032][ T28] [ 736.615663][ T28] NMI backtrace for cpu 0 [ 736.620022][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.113-syzkaller #0 [ 736.627915][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 736.637960][ T28] Call Trace: [ 736.641231][ T28] [ 736.644167][ T28] dump_stack_lvl+0x1e3/0x2cb [ 736.648846][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 736.654303][ T28] ? panic+0x764/0x764 [ 736.658370][ T28] ? vprintk_emit+0x622/0x740 [ 736.663060][ T28] ? printk_sprint+0x490/0x490 [ 736.667828][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 736.672936][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 736.677877][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 736.684043][ T28] ? _printk+0xd1/0x111 [ 736.688210][ T28] ? panic+0x764/0x764 [ 736.692274][ T28] ? __wake_up_klogd+0xcc/0x100 [ 736.697122][ T28] ? panic+0x764/0x764 [ 736.701190][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 736.707262][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 736.713337][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 736.719328][ T28] watchdog+0xf88/0xfd0 [ 736.723583][ T28] ? watchdog+0x1f8/0xfd0 [ 736.727920][ T28] kthread+0x28d/0x320 [ 736.731987][ T28] ? hungtask_pm_notify+0x50/0x50 [ 736.737013][ T28] ? kthread_blkcg+0xd0/0xd0 [ 736.741601][ T28] ret_from_fork+0x1f/0x30 [ 736.746052][ T28] [ 736.750490][ T28] Sending NMI from CPU 0 to CPUs 1: [ 736.755746][ C1] NMI backtrace for cpu 1 [ 736.755763][ C1] CPU: 1 PID: 3082 Comm: klogd Not tainted 6.1.113-syzkaller #0 [ 736.755781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 736.755792][ C1] RIP: 0010:__stack_depot_save+0x49/0x470 [ 736.755819][ C1] Code: 28 00 00 00 48 89 44 24 28 48 c7 44 24 20 00 00 00 00 e8 ea 74 13 fd 89 c1 31 c0 85 c9 0f 84 de 03 00 00 80 3d 48 36 05 13 00 <0f> 85 d1 03 00 00 41 89 d9 8d 34 09 49 89 c8 44 8d 2c cd 7b 71 f5 [ 736.755838][ C1] RSP: 0018:ffffc9000310f948 EFLAGS: 00000246 [ 736.755854][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 000000000000000e [ 736.755865][ C1] RDX: 0000000000000000 RSI: 000000000000000e RDI: ffffc9000310f9b0 [ 736.755877][ C1] RBP: ffffc9000310fbe0 R08: 0000000000000001 R09: fffffbfff1d34056 [ 736.755889][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000800 [ 736.755901][ C1] R13: ffffffff81f71ed4 R14: 0000000000000000 R15: ffffc9000310f9b0 [ 736.755913][ C1] FS: 00007fa077dab380(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 736.755929][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.755941][ C1] CR2: 00007f7de9708178 CR3: 000000001db5a000 CR4: 00000000003506e0 [ 736.755956][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.755967][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 736.755978][ C1] Call Trace: [ 736.755983][ C1] [ 736.755989][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 736.756008][ C1] ? read_lock_is_recursive+0x10/0x10 [ 736.756037][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 736.756055][ C1] ? nmi_handle+0x25/0x440 [ 736.756089][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 736.756105][ C1] ? nmi_handle+0x12e/0x440 [ 736.756132][ C1] ? nmi_handle+0x25/0x440 [ 736.756158][ C1] ? __stack_depot_save+0x49/0x470 [ 736.756178][ C1] ? default_do_nmi+0x62/0x150 [ 736.756197][ C1] ? exc_nmi+0xa8/0x100 [ 736.756214][ C1] ? end_repeat_nmi+0x16/0x31 [ 736.756241][ C1] ? __dentry_kill+0x4f4/0x650 [ 736.756265][ C1] ? __stack_depot_save+0x49/0x470 [ 736.756287][ C1] ? __stack_depot_save+0x49/0x470 [ 736.756309][ C1] ? __stack_depot_save+0x49/0x470 [ 736.756330][ C1] [ 736.756335][ C1] [ 736.756344][ C1] ? __dentry_kill+0x4f4/0x650 [ 736.756364][ C1] kasan_set_track+0x60/0x70 [ 736.756390][ C1] ? kasan_set_track+0x4b/0x70 [ 736.756415][ C1] ? kasan_save_free_info+0x27/0x40 [ 736.756433][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 736.756449][ C1] ? kmem_cache_free+0x292/0x510 [ 736.756469][ C1] ? __dentry_kill+0x4f4/0x650 [ 736.756487][ C1] ? dentry_kill+0xbb/0x290 [ 736.756506][ C1] ? dput+0xfb/0x1d0 [ 736.756522][ C1] ? __fput+0x62e/0x8d0 [ 736.756541][ C1] ? task_work_run+0x246/0x300 [ 736.756563][ C1] ? exit_to_user_mode_loop+0xde/0x100 [ 736.756579][ C1] ? exit_to_user_mode_prepare+0xb1/0x140 [ 736.756596][ C1] ? syscall_exit_to_user_mode+0x60/0x270 [ 736.756616][ C1] ? do_syscall_64+0x47/0xb0 [ 736.756638][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.756685][ C1] kasan_save_free_info+0x27/0x40 [ 736.756704][ C1] ____kasan_slab_free+0xd6/0x120 [ 736.756722][ C1] kmem_cache_free+0x292/0x510 [ 736.756744][ C1] ? __dentry_kill+0x4f4/0x650 [ 736.756765][ C1] __dentry_kill+0x4f4/0x650 [ 736.756787][ C1] dentry_kill+0xbb/0x290 [ 736.756807][ C1] ? dput+0x37/0x1d0 [ 736.756824][ C1] dput+0xfb/0x1d0 [ 736.756842][ C1] __fput+0x62e/0x8d0 [ 736.756868][ C1] task_work_run+0x246/0x300 [ 736.756893][ C1] ? task_work_cancel+0x2e0/0x2e0 [ 736.756918][ C1] ? exit_to_user_mode_loop+0x39/0x100 [ 736.756936][ C1] exit_to_user_mode_loop+0xde/0x100 [ 736.756953][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 736.756971][ C1] syscall_exit_to_user_mode+0x60/0x270 [ 736.756994][ C1] do_syscall_64+0x47/0xb0 [ 736.757008][ C1] ? clear_bhb_loop+0x45/0xa0 [ 736.757034][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.757058][ C1] RIP: 0033:0x7fa077f000a8 [ 736.757072][ C1] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83 [ 736.757087][ C1] RSP: 002b:00007ffdd11649f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 736.757103][ C1] RAX: 0000000000000000 RBX: ffffffffffffff80 RCX: 00007fa077f000a8 [ 736.757116][ C1] RDX: ffffffffffffff80 RSI: 00007fa077f99bc0 RDI: 0000000000000003 [ 736.757129][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 4247b79009a0f540 [ 736.757140][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fa077f99bc0 [ 736.757151][ C1] R13: 000000000000006f R14: 000000000000006f R15: 0000000000000000 [ 736.757170][ C1] [ 736.761241][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 736.761257][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.113-syzkaller #0 [ 736.761281][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 736.761293][ T28] Call Trace: [ 736.761301][ T28] [ 736.761311][ T28] dump_stack_lvl+0x1e3/0x2cb [ 736.761338][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 736.761362][ T28] ? panic+0x764/0x764 [ 736.761397][ T28] ? llist_add_batch+0x160/0x1d0 [ 736.761435][ T28] ? vscnprintf+0x59/0x80 [ 736.761466][ T28] panic+0x318/0x764 [ 736.761493][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 736.761519][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 736.761550][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 736.761573][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 736.761609][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 736.761635][ T28] watchdog+0xfc7/0xfd0 [ 736.761669][ T28] ? watchdog+0x1f8/0xfd0 [ 736.761700][ T28] kthread+0x28d/0x320 [ 736.761719][ T28] ? hungtask_pm_notify+0x50/0x50 [ 736.761746][ T28] ? kthread_blkcg+0xd0/0xd0 [ 736.761768][ T28] ret_from_fork+0x1f/0x30 [ 736.761809][ T28] [ 736.762618][ T28] Kernel Offset: disabled [ 737.338900][ T28] Rebooting in 86400 seconds..