last executing test programs: 11.490880411s ago: executing program 0 (id=516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) 9.886318355s ago: executing program 3 (id=524): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x6, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x400, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x8001, 0x4c74, 0x80000000, 0x800242, 0x4, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x7, 0x40], [0x1000000a, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x1, 0x1000, 0xfffffffc, 0x0, 0x4, 0x7, 0x5, 0x2f, 0xe, 0x1000312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x40008000, 0x9, 0x273d, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x800, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cd697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x40003, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x7fffffff, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x7, 0xffffffff, 0x7ffffffe, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x13, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x7, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 9.715270604s ago: executing program 3 (id=526): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 9.594732231s ago: executing program 2 (id=529): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, 0x0}, 0x2020) r5 = msgget$private(0x0, 0x0) msgsnd(r5, 0x0, 0x401, 0x0) msgsnd(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(r5, &(0x7f0000000940)={0x0, ""/4081}, 0xff9, 0x3, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x404, &(0x7f0000000200)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl0sESERCJE3aAkUgEXHh0J7ogSNRkpaoToOSINEqAioQN5BAfAA4AB+BIxz4DnAGDlApQjmQcjNae9cxsZ3GrsNGze8njTyzs/bM7njXu5PZSQDH1kREvBIRAxFxLiLG8uVpHuKDesjW29neXPh7e3MhiWr19T+TSPJlxWcl+eup/AMm04j0oyQeb1Pu+q3bN+YrlaW1PD29sfL29Pqt288ur8xfX7q+dHP2ufMXLl584dLs833b1q2V5JOnvrn822cfL37+0x/fj2f1PZ3nNW9Hv0zERGOf7HWp34WV7ERTPBkssSIAAOwrza/9B2vX/2MxELsXb2Px6Y+lVg4AAADoi2q1eO3aQC9vAgAAAMqQuI0HAACAh1wxDmBne3OhCCUOR+A/tjUXEeP19r+Xh3rOYOOZ3qE9z/f200REvHbiymwW4pCewwYAAAA4zn6Yq0/819r/l8YjTeudjIjRYm6/PprYk27t/0nv9rlImmzNRbwUEfda+v/SYpXxgTz1v1pX4VBybbmydC4izkTEZAyNZOmZfcp474kb33bKa+7/+/LXN2ay8rPX3TXSu4Mj/37P4vzG/INsM7u27kQ8Ntiu/ZNGn2/zPJm9eHN55+VOeVn7Z+1dhNb25zBVv4p4uu3xvztzabL//KzTtfPBdH5WGGkt45fTX3/Yqfzm4z8LWfnF3wI4fFt36g29T/vX5sltzNe73n0Z3/115edOefdv//bn/+Hkaq2Cw/myd+c3NtZmIoaTy63LfZsaiv1R7K/s/D/5ZPvf/+L6L8l/+880zQ/djVffP3u1U57jv1xZ+y92dfx3H3lr9NHJTuUf7Pi/UKtM8SGu/+7voA1Udj0BAAAAAAAA6I+0NrYvSaca8TSdmqqP8/1/jKaV1fWNZ66tvnNzsT4GcDyG0mL851jTeNCZ+mPkjfTsnvT5iDgbEV+MnaylpxZWK4tlbzwAAAAcE6c63P9nfu/lYQ8AAADgaBovuwIAAADAoXP/DwAAAA+1B5nXv7K0VvyLoB7fLiLSW2Qg/+IdlfocKPLi0ajGwSIlnpQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiH8CAAD//+0Iugw=") chdir(0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) sched_setattr(r2, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) capset(0x0, 0x0) 9.560330073s ago: executing program 3 (id=530): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 8.59253955s ago: executing program 0 (id=531): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) 8.532802713s ago: executing program 4 (id=532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 7.699805362s ago: executing program 2 (id=533): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000140)=[0x7f, 0x57f6, 0x7fffffff, 0x1, 0xd, 0x6, 0x3, 0x31c6]) 7.501926713s ago: executing program 0 (id=535): mkdir(&(0x7f0000000000)='./file1\x00', 0x146) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40000000) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) unlink(0x0) 7.234233979s ago: executing program 0 (id=537): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_stored_link_key={{}, {0x9, 0x40, 0x6}}}}, 0xb) syz_emit_vhci(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xf8) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000200)={0xa, {0x2, 0x6, 0x7, 0x9, 0x4dcc, 0xb}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0xe4, &(0x7f0000000380)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0x7e, 0x0, [], "bb67e2776451bf52d04fcd91e6d8a56a3fa604933a0f9ab8d0b7f45f484d301f70062aa0fd5cf6f01413184b290535299e2891940a7424accfc0395f8f105eba2ddd57916867d3322ca7602275f97e8567223c17e4d7c6b0185ea420b089203605a103655ed972ae8ec1370474c2d27f1d59efeaa561ab90ffb2cfd2ffdb"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) syz_pidfd_open(0x0, 0x0) chdir(0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) ptrace$poke(0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) 6.343918401s ago: executing program 1 (id=538): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdir(0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000740)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1103, 0xff}) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 6.18009465s ago: executing program 0 (id=539): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000740)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1103, 0xff}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 6.110191264s ago: executing program 4 (id=540): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b00)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r4 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 5.432586004s ago: executing program 1 (id=541): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdir(0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000005e00), 0x20000, 0x0) fsetxattr$system_posix_acl(r6, 0x0, &(0x7f0000007080)={{}, {0x1, 0x2}, [], {0x4, 0x3}, [], {0x10, 0x1}}, 0x24, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 5.31520721s ago: executing program 2 (id=542): epoll_create(0x8) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 4.426419252s ago: executing program 1 (id=543): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) 4.342507508s ago: executing program 3 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.342156498s ago: executing program 4 (id=545): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 4.305511779s ago: executing program 1 (id=546): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 3.064438362s ago: executing program 3 (id=547): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000380)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) shutdown(r3, 0x0) sendfile(r3, r4, 0x0, 0xdc) 3.006600055s ago: executing program 4 (id=548): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000200)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="3d46d80f7e2ba80c"}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap$IORING_OFF_SQ_RING(&(0x7f00001fb000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x21c480, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, 0x0) sendfile(r0, r0, 0x0, 0x800000a1e) 2.199122682s ago: executing program 1 (id=549): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000740)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1103, 0xff}) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000005e00), 0x20000, 0x0) fsetxattr$system_posix_acl(r6, 0x0, &(0x7f0000007080)={{}, {0x1, 0x2}, [], {0x4, 0x3}, [], {0x10, 0x1}}, 0x24, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 2.168058464s ago: executing program 3 (id=550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 1.990344735s ago: executing program 2 (id=551): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdir(0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000740)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1103, 0xff}) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 1.799226555s ago: executing program 4 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") 870.317399ms ago: executing program 1 (id=553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 840.843851ms ago: executing program 0 (id=554): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) write$nbd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='gDf'], 0x1c) 794.427194ms ago: executing program 2 (id=555): socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f00000009c0)={'erspan0\x00', 0x0, 0x8, 0x20, 0x4, 0x4, {{0x7, 0x4, 0x1, 0x19, 0x1c, 0x66, 0x0, 0xf3, 0x29, 0x0, @loopback, @empty, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0x6, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x44, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000a80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xe, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000007c0)=0x1, 0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_procfs(0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0xff, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x24, 0x19, "a9b39ba517c50901"}) write(r6, &(0x7f0000000180), 0x0) 669.437461ms ago: executing program 4 (id=556): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 2 (id=557): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x154, 0x1, 0x9, 0x301, 0x70bd27, 0x25dfdbff, {0x3, 0x0, 0x3}, [@generic="502f894e37f09386d3911df06b9fd80fdf15121ade1fc7772183ac232c193abf153db8f3e3129ad70283c33bb0f04a2c0023afc6d66e950c1ea244881d2a132f9249ca4df0745515fb91366134d80a9dcfb3121d01cf91f395e3a8c15e535c", @generic="c4995039633e58262a20642a37a3b7250b1a18816f73d0940062a8b75cff570d271b40f5d09796e3f553185ef34097430cae4ab07b467677aa65e430cef57ccb00a4b9619274221df5a8bf2dfedfe145e66349d39e9193370364ec73e3e0ece80acb5e550d4e5939a6767c3d32394b36992fceab74d744ea6d429591acef86c6759ca57e12557d7bf58b5c01deef7c8f3dd4459dd72d48623e0025213b2ec01d0a114d4a64bea9723cd523d14a06b52888a4e585ee6ab869de39700174d0088e32a5cc82bbef498aa3acc49d096325b9fa7ff0a8a43b3811db6bbbbcb5eac29e4e"]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x4008040) r0 = gettid() process_vm_readv(r0, &(0x7f0000001140)=[{0x0}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0), 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000580)={@default, @default, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @bcast, @bcast]}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x69) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000007f9159d72b9e8737759bac986a9554194a0f9b007d3a5e2a3c4fa288741f462f484a40b71880203d80b2407251e3b1daacb1fea20000000000004c931fd9157bceef46748316e0de9250327970c17de1d3934b37dbd58e1bdc27068a3c919ead5d00"/112, @ANYRES16=r2, @ANYBLOB="080027bd7000fddbdf250000000014000c00"/34], 0x28}}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 53.952194][ T4253] cgroup: Unknown subsys name 'net' [ 54.086671][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.349562][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.618289][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.633342][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.641119][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.648944][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.657049][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.660750][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.665465][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.671804][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.679301][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.692108][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.692874][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.700173][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.706998][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.714525][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.720770][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.735556][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.735734][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.743323][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.750314][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.757205][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.764309][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.772148][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.778184][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.786069][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.791799][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.806870][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.828728][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.830465][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.846423][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.846428][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.200620][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 57.244264][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 57.290209][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 57.308639][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 57.354690][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 57.423418][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.430522][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.439045][ T4266] device bridge_slave_0 entered promiscuous mode [ 57.478555][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.485764][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.494027][ T4266] device bridge_slave_1 entered promiscuous mode [ 57.518629][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.525809][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.534067][ T4267] device bridge_slave_0 entered promiscuous mode [ 57.547755][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.555338][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.563520][ T4267] device bridge_slave_1 entered promiscuous mode [ 57.578947][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.586218][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.594027][ T4273] device bridge_slave_0 entered promiscuous mode [ 57.607478][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.614725][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.622658][ T4273] device bridge_slave_1 entered promiscuous mode [ 57.639267][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.646426][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.654853][ T4271] device bridge_slave_0 entered promiscuous mode [ 57.664539][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.675693][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.699953][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.709272][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.718151][ T4271] device bridge_slave_1 entered promiscuous mode [ 57.747619][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.767834][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.775211][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.783271][ T4265] device bridge_slave_0 entered promiscuous mode [ 57.797012][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.804151][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.812083][ T4265] device bridge_slave_1 entered promiscuous mode [ 57.823463][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.834301][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.850314][ T4266] team0: Port device team_slave_0 added [ 57.858448][ T4266] team0: Port device team_slave_1 added [ 57.865802][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.877599][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.894477][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.938439][ T4267] team0: Port device team_slave_0 added [ 57.950346][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.957612][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.983606][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.001752][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.008814][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.035024][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.048386][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.058918][ T4267] team0: Port device team_slave_1 added [ 58.077350][ T4271] team0: Port device team_slave_0 added [ 58.088516][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.104582][ T4273] team0: Port device team_slave_0 added [ 58.111569][ T4271] team0: Port device team_slave_1 added [ 58.144300][ T4273] team0: Port device team_slave_1 added [ 58.150441][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.157820][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.184039][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.209769][ T4265] team0: Port device team_slave_0 added [ 58.221383][ T4266] device hsr_slave_0 entered promiscuous mode [ 58.228513][ T4266] device hsr_slave_1 entered promiscuous mode [ 58.253180][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.260263][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.286251][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.308370][ T4265] team0: Port device team_slave_1 added [ 58.329005][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.336390][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.362397][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.379790][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.387005][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.416274][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.431533][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.438700][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.464725][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.476550][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.483585][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.509499][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.550788][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.557796][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.584110][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.596193][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.603450][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.629687][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.665376][ T4267] device hsr_slave_0 entered promiscuous mode [ 58.672042][ T4267] device hsr_slave_1 entered promiscuous mode [ 58.678517][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.686385][ T4267] Cannot create hsr debugfs directory [ 58.742584][ T4265] device hsr_slave_0 entered promiscuous mode [ 58.749141][ T4265] device hsr_slave_1 entered promiscuous mode [ 58.755911][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.763570][ T4265] Cannot create hsr debugfs directory [ 58.778861][ T4271] device hsr_slave_0 entered promiscuous mode [ 58.785599][ T4271] device hsr_slave_1 entered promiscuous mode [ 58.792249][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.799926][ T4271] Cannot create hsr debugfs directory [ 58.830112][ T4273] device hsr_slave_0 entered promiscuous mode [ 58.837143][ T4273] device hsr_slave_1 entered promiscuous mode [ 58.844723][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.852372][ T4273] Cannot create hsr debugfs directory [ 58.892793][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 58.899057][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 58.905284][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 58.905303][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 58.905438][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 59.135041][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.148359][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.157791][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.167666][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.231533][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.241561][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.263091][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.289031][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.318452][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.340294][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.364270][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.373228][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.411769][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.426324][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.448674][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.477357][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.491599][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.508116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.518299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.536069][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.550198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.559040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.571330][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.578503][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.591056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.604418][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.614238][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.623117][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.630165][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.653227][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.663816][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.685565][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.699665][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.709870][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.727384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.764993][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.781198][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.790116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.799218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.808400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.817525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.827123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.835839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.844501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.853515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.861731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.886373][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.900380][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.908999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.937771][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.947908][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.959225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.968192][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.008861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.018338][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.033403][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.040503][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.054721][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.066665][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.076288][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.083456][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.092882][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.100861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.130973][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.143234][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.158549][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.167930][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.175096][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.190558][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.200722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.215026][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.222172][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.232795][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.241660][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.263017][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.273451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.284729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.294000][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.303803][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.321207][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.347867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.356400][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.365419][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.373554][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.381771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.390653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.399656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.409500][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.418555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.427456][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.435921][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.444391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.453471][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.463236][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.475783][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.488851][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.510403][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.518441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.531668][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.546550][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.556222][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.571309][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.580755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.600880][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.628882][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.641674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.658020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.668693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.680601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.695356][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.702506][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.715560][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.725846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.740891][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.748021][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.756642][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.765615][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.774234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.816554][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.827298][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.838922][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.852528][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.859650][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.872796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.887095][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.898087][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.910878][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.919989][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.927102][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.934844][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.943863][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.952565][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.959995][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.967483][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.972304][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 60.976339][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.980843][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 60.988251][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 60.994156][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 60.999994][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 61.029252][ T4266] device veth0_vlan entered promiscuous mode [ 61.041180][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.052773][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.061339][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.071297][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.080064][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.093894][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.116374][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.135374][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.151815][ T4266] device veth1_vlan entered promiscuous mode [ 61.161450][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.182596][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.190286][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.199223][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.208413][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.217859][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.226288][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.312217][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.330968][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.341836][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.358552][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.370531][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.379397][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.387907][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.396491][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.407846][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.417056][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.435982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.444776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.454779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.464874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.474540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.483201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.493468][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.509123][ T4271] device veth0_vlan entered promiscuous mode [ 61.521129][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.553652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.563107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.582727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.598177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.625659][ T4266] device veth0_macvtap entered promiscuous mode [ 61.667464][ T4271] device veth1_vlan entered promiscuous mode [ 61.702463][ T4266] device veth1_macvtap entered promiscuous mode [ 61.750315][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.779937][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.791442][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.816004][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.835926][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.854411][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.873130][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.891518][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.900118][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.916137][ T4271] device veth0_macvtap entered promiscuous mode [ 61.931750][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.944766][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.960152][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.983264][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.005678][ T4271] device veth1_macvtap entered promiscuous mode [ 62.025744][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.045032][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.063355][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.098549][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.126778][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.135456][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.146889][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.156915][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.175860][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.189876][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.202224][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.215910][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.226695][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.238098][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.261072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.270906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.280492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.289314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.298808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.306589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.320457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.329353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.361347][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.372506][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.381221][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.390808][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.425917][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.443602][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.457002][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.480105][ T4267] device veth0_vlan entered promiscuous mode [ 62.513083][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.521290][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.530253][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.539436][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.548050][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.556316][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.565080][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.573291][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.596431][ T4273] device veth0_vlan entered promiscuous mode [ 62.611284][ T4267] device veth1_vlan entered promiscuous mode [ 62.626635][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.636823][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.647764][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.671248][ T4273] device veth1_vlan entered promiscuous mode [ 62.680359][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.688770][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.730960][ T4273] device veth0_macvtap entered promiscuous mode [ 62.739631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.747978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.756247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.765246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.773456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.782099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.790548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.818750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.829884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.843590][ T4273] device veth1_macvtap entered promiscuous mode [ 62.865496][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.865858][ T4267] device veth0_macvtap entered promiscuous mode [ 62.879840][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.899264][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.912860][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.923320][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.934286][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.949282][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.958200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.967493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.976862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.984988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.995681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.007101][ T4267] device veth1_macvtap entered promiscuous mode [ 63.029586][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.040644][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.052374][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 63.058580][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 63.064777][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 63.064911][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 63.070770][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 63.085892][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.096705][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.109288][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.147212][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.158151][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.168521][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.178998][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.188884][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.199739][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.210620][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.219255][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.228143][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.236820][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.245462][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.254324][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.263304][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.271767][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.284100][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.300394][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.336036][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.345061][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.356257][ T4265] device veth0_vlan entered promiscuous mode [ 63.380181][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.396565][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.409381][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.411930][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.425605][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.439160][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.449359][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.465913][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.478396][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.493343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.514819][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.548648][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.562796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.585180][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.626534][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.636959][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.646460][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.655222][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.668048][ T4265] device veth1_vlan entered promiscuous mode [ 63.713829][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.721789][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.785124][ T4265] device veth0_macvtap entered promiscuous mode [ 63.800182][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.816091][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.827345][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.836757][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.863230][ T4265] device veth1_macvtap entered promiscuous mode [ 63.906703][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.925921][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.938092][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.949554][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.964098][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.977989][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.990148][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.011548][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.023476][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.039945][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.055923][ T4391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.058163][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.103490][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.116476][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.130888][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.145955][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.163723][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.180863][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.193610][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.210213][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.220835][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.231749][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.241770][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.252592][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.266156][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.288859][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.311462][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.327651][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.331143][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.347231][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.350896][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.396602][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.410802][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.422527][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.431244][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.474987][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.490488][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.711602][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.729620][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.741876][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.849739][ T4406] loop3: detected capacity change from 0 to 764 [ 64.869594][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.925535][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.961881][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.992089][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.097265][ T4407] Bluetooth: hci5: Frame reassembly failed (-84) [ 65.346859][ T4412] mmap: syz.3.4 (4412) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.627004][ T4407] loop0: detected capacity change from 0 to 32768 [ 66.040363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 66.047372][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 66.048693][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 66.054619][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 66.054644][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 66.060596][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 66.062067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 66.134027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.142455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 66.150976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 66.239638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 66.247997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 66.257103][ T4366] Bluetooth: hci5: Frame reassembly failed (-84) [ 66.286631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.299835][ T4259] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.383865][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.008594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.082143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 67.091034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.293120][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 67.494471][ T4429] loop1: detected capacity change from 0 to 256 [ 67.547656][ T4433] fuse: Unknown parameter '0x0000000000000004' [ 67.557655][ T26] audit: type=1326 audit(1770135731.047:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.13" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f804b19aeb9 code=0x0 [ 67.856935][ T4440] syz.4.15 uses obsolete (PF_INET,SOCK_PACKET) [ 68.002275][ T4440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.297131][ T4442] loop3: detected capacity change from 0 to 32768 [ 68.345547][ T4442] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.16 (4442) [ 68.539634][ T4442] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 68.550154][ T4442] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 68.558962][ T4442] BTRFS info (device loop3): enabling disk space caching [ 68.566036][ T4442] BTRFS info (device loop3): force clearing of disk cache [ 68.574760][ T4442] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 68.584710][ T4442] BTRFS info (device loop3): use zstd compression, level 3 [ 68.591969][ T4442] BTRFS info (device loop3): disk space caching is enabled [ 68.622486][ T4440] Zero length message leads to an empty skb [ 69.296193][ T4468] loop2: detected capacity change from 0 to 32768 [ 69.406930][ T4259] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.418547][ T4442] BTRFS info (device loop3): enabling ssd optimizations [ 69.443667][ T4442] BTRFS info (device loop3): rebuilding free space tree [ 69.472253][ T4442] BTRFS info (device loop3): disabling free space tree [ 69.479199][ T4442] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.489041][ T4442] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.812938][ T4273] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 70.924207][ T4485] loop0: detected capacity change from 0 to 1024 [ 70.997009][ T4485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.087079][ T4485] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.226335][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.232906][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.476735][ T4485] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.485582][ T26] audit: type=1326 audit(1770135735.987:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.1.28" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f993d59aeb9 code=0x0 [ 72.735983][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 73.326052][ T4515] loop2: detected capacity change from 0 to 32768 [ 73.539308][ T4517] loop0: detected capacity change from 0 to 1024 [ 73.556563][ T4517] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.33: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 73.575091][ T4517] EXT4-fs error (device loop0): ext4_quota_enable:7046: comm syz.0.33: Bad quota inode: 4, type: 1 [ 73.586191][ T4517] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.602026][ T4517] EXT4-fs (loop0): mount failed [ 73.631523][ T4257] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.758636][ T4520] loop1: detected capacity change from 0 to 32768 [ 73.779916][ T4520] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.34 (4520) [ 73.796066][ T4520] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 73.806305][ T4520] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 73.815042][ T4520] BTRFS info (device loop1): enabling disk space caching [ 73.822114][ T4520] BTRFS info (device loop1): force clearing of disk cache [ 73.829230][ T4520] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 73.838642][ T4520] BTRFS info (device loop1): use zstd compression, level 3 [ 73.846791][ T4520] BTRFS info (device loop1): disk space caching is enabled [ 73.888487][ T4259] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.240006][ T4538] random: crng reseeded on system resumption [ 74.275735][ T4520] BTRFS info (device loop1): enabling ssd optimizations [ 74.283387][ T4520] BTRFS info (device loop1): rebuilding free space tree [ 74.295229][ T4520] BTRFS info (device loop1): disabling free space tree [ 74.302513][ T4520] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.312187][ T4520] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.952490][ T4265] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 75.007126][ T4552] Bluetooth: hci5: Frame reassembly failed (-84) [ 75.032226][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 75.159076][ T4552] loop3: detected capacity change from 0 to 32768 [ 75.302634][ T4258] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.387887][ T14] cfg80211: failed to load regulatory.db [ 77.052031][ T4281] Bluetooth: hci5: command 0x1003 tx timeout [ 77.059424][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 78.159758][ T26] audit: type=1326 audit(1770135741.647:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.4.44" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b0f59aeb9 code=0x0 [ 78.336256][ T4255] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop1 scanned by udevd (4255) [ 79.345410][ T4590] loop2: detected capacity change from 0 to 32768 [ 79.462066][ T4258] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 79.736318][ T4592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'. [ 79.975748][ T4594] ======================================================= [ 79.975748][ T4594] WARNING: The mand mount option has been deprecated and [ 79.975748][ T4594] and is ignored by this kernel. Remove the mand [ 79.975748][ T4594] option from the mount to silence this warning. [ 79.975748][ T4594] ======================================================= [ 80.010628][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.153857][ T4594] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.037286][ T4607] loop2: detected capacity change from 0 to 256 [ 81.057410][ T4607] FAT-fs (loop2): Directory bread(block 64) failed [ 81.088481][ T4607] FAT-fs (loop2): Directory bread(block 65) failed [ 81.172182][ T4607] FAT-fs (loop2): Directory bread(block 66) failed [ 81.178892][ T4607] FAT-fs (loop2): Directory bread(block 67) failed [ 81.221669][ T4607] FAT-fs (loop2): Directory bread(block 68) failed [ 81.290081][ T4607] FAT-fs (loop2): Directory bread(block 69) failed [ 81.512816][ T4607] FAT-fs (loop2): Directory bread(block 70) failed [ 81.687363][ T4607] FAT-fs (loop2): Directory bread(block 71) failed [ 81.937708][ T4607] FAT-fs (loop2): Directory bread(block 72) failed [ 81.983101][ T4607] FAT-fs (loop2): Directory bread(block 73) failed [ 82.042455][ T26] audit: type=1326 audit(1770135745.537:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.0.58" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c3079aeb9 code=0x0 [ 82.356042][ T4627] fuse: Unknown parameter '0x0000000000000004' [ 83.043833][ T4639] loop3: detected capacity change from 0 to 1024 [ 83.175179][ T4639] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.64: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 83.193068][ T4639] EXT4-fs error (device loop3): ext4_quota_enable:7046: comm syz.3.64: Bad quota inode: 4, type: 1 [ 83.204078][ T4639] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.219464][ T4639] EXT4-fs (loop3): mount failed [ 83.550626][ T4644] loop0: detected capacity change from 0 to 32768 [ 83.580878][ T4644] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 83.665709][ T4534] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.337010][ T4652] random: crng reseeded on system resumption [ 85.286659][ T4662] loop1: detected capacity change from 0 to 1024 [ 85.328296][ T4662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.368178][ T4662] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.460150][ T4662] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.773150][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 86.090614][ T26] audit: type=1326 audit(1770135749.577:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.75" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f804b19aeb9 code=0x0 [ 86.282061][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.565621][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.588938][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.630396][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.697974][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.744128][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.772828][ T4693] loop0: detected capacity change from 0 to 1024 [ 86.797522][ T4693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.866887][ T14] usb 2-1: config 0 descriptor?? [ 86.890551][ T4693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.033384][ T4693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 87.285903][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 87.336816][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 87.348992][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 87.407883][ T14] usb 2-1: USB disconnect, device number 2 [ 87.618084][ T4707] loop0: detected capacity change from 0 to 1024 [ 87.646930][ T4707] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.87: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 87.671382][ T4707] EXT4-fs error (device loop0): ext4_quota_enable:7046: comm syz.0.87: Bad quota inode: 4, type: 1 [ 87.684178][ T4707] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.699993][ T4707] EXT4-fs (loop0): mount failed [ 88.014828][ T4714] random: crng reseeded on system resumption [ 88.611500][ T26] audit: type=1326 audit(1770135752.087:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.3.95" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f190c59aeb9 code=0x0 [ 88.807401][ T4734] loop4: detected capacity change from 0 to 1024 [ 88.843803][ T4734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.867542][ T4734] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.915091][ T4734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.035615][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 90.175979][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 90.532570][ T4362] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.724820][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.745172][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.772006][ T4362] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.794224][ T4362] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.803688][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.816102][ T4362] usb 5-1: config 0 descriptor?? [ 92.079152][ T4362] usbhid 5-1:0.0: can't add hid device: -71 [ 92.085396][ T4362] usbhid: probe of 5-1:0.0 failed with error -71 [ 92.104435][ T4362] usb 5-1: USB disconnect, device number 2 [ 92.173323][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 92.378768][ T4795] overlayfs: failed to clone upperpath [ 92.809618][ T4270] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 92.831996][ T4270] Bluetooth: hci4: Injecting HCI hardware error event [ 92.840041][ T4270] Bluetooth: hci4: hardware error 0x00 [ 93.554708][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 93.807618][ T4831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.135'. [ 94.016278][ T4840] overlayfs: missing 'workdir' [ 94.242090][ T4489] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.472070][ T4489] usb 5-1: Using ep0 maxpacket: 16 [ 94.480402][ T4489] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 94.661216][ T4489] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.837387][ T4489] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.848620][ T4489] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.864903][ T4489] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.887609][ T4851] fuse: Unknown parameter 'fd0x0000000000000003' [ 94.892915][ T4489] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.905819][ T4270] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 94.917183][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'. [ 95.067226][ T4489] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.079448][ T4489] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.096035][ T4489] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.112873][ T4489] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 95.627813][ T4865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.147'. [ 95.798016][ T4489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 95.806202][ T4489] usb 5-1: SerialNumber: syz [ 95.814916][ T4489] usb 5-1: config 0 descriptor?? [ 95.827261][ T4489] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 96.039248][ T4837] input: syz0 as /devices/virtual/input/input6 [ 96.933658][ T4891] fuse: Unknown parameter 'fd0x0000000000000003' [ 97.150200][ T3622] bcm5974 5-1:0.0: could not read from device [ 97.164890][ T3622] bcm5974 5-1:0.0: could not read from device [ 97.171598][ T4489] usb 5-1: USB disconnect, device number 3 [ 97.183047][ T3622] bcm5974 5-1:0.0: could not read from device [ 97.357862][ T4904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.163'. [ 97.472645][ T4911] overlayfs: failed to clone upperpath [ 97.708061][ T4917] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.322123][ T4489] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.481708][ T4931] fuse: Unknown parameter 'fd0x0000000000000003' [ 98.572895][ T4489] usb 1-1: Using ep0 maxpacket: 16 [ 98.581501][ T4489] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 98.744044][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.796410][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.857710][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.915846][ T4938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.178'. [ 99.050134][ T4940] overlayfs: failed to clone upperpath [ 99.051875][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.067262][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.078827][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.417393][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.459432][ T4945] overlayfs: failed to clone upperpath [ 99.475926][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.498845][ T4489] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 99.516751][ T4947] overlayfs: failed to clone upperpath [ 99.518352][ T4489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 99.540660][ T4489] usb 1-1: SerialNumber: syz [ 99.562131][ T4489] usb 1-1: config 0 descriptor?? [ 99.584028][ T4489] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 99.817979][ T4926] input: syz0 as /devices/virtual/input/input8 [ 100.620857][ T4967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 100.870847][ T4975] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 100.937240][ T4982] overlayfs: failed to clone upperpath [ 100.939051][ T4980] overlayfs: failed to clone upperpath [ 100.986155][ T3622] bcm5974 1-1:0.0: could not read from device [ 101.016922][ T4489] usb 1-1: USB disconnect, device number 2 [ 101.213332][ T11] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 101.420805][ T4995] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.642355][ T4995] loop0: detected capacity change from 0 to 32768 [ 101.685620][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.753021][ T4534] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.895841][ T5000] tipc: Enabling of bearer rejected, failed to enable media [ 102.965043][ T5014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 103.693405][ T4281] Bluetooth: hci5: command 0x1003 tx timeout [ 103.699790][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.014169][ T5027] tipc: Enabling of bearer rejected, failed to enable media [ 105.319920][ T5054] loop0: detected capacity change from 0 to 128 [ 106.436582][ T5072] tipc: Enabling of bearer rejected, failed to enable media [ 108.841511][ T5110] tipc: Enabling of bearer rejected, failed to enable media [ 108.970116][ T5118] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.017109][ T5136] fuse: Bad value for 'fd' [ 110.105572][ T5135] loop0: detected capacity change from 0 to 4096 [ 110.113251][ T5135] EXT4-fs: Ignoring removed bh option [ 110.118659][ T5135] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.240598][ T5135] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.722501][ T5155] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.801716][ T5158] tipc: Enabling of bearer rejected, failed to enable media [ 110.830830][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 111.726237][ T5177] fuse: Bad value for 'fd' [ 112.837091][ T5208] tipc: Enabling of bearer rejected, failed to enable media [ 115.026215][ T5255] tipc: Enabling of bearer rejected, failed to enable media [ 115.948241][ T5298] tipc: Enabling of bearer rejected, failed to enable media [ 116.671027][ T5332] tipc: Enabling of bearer rejected, failed to enable media [ 118.113960][ T5386] tipc: Enabling of bearer rejected, failed to enable media [ 119.533477][ T5429] tipc: Enabling of bearer rejected, failed to enable media [ 121.488135][ T5474] overlayfs: failed to clone upperpath [ 121.512954][ T5474] capability: warning: `syz.3.383' uses deprecated v2 capabilities in a way that may be insecure [ 130.028588][ T26] audit: type=1326 audit(1770135793.517:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5597 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3079aeb9 code=0x7ffc0000 [ 130.084428][ T26] audit: type=1326 audit(1770135793.517:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5597 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3079aeb9 code=0x7ffc0000 [ 132.654107][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660801][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.944457][ T5701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 134.092420][ T4279] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 134.100927][ T4279] Bluetooth: hci2: Injecting HCI hardware error event [ 134.109346][ T4281] Bluetooth: hci2: hardware error 0x00 [ 134.516825][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 135.939547][ T5746] overlayfs: failed to clone lowerpath [ 135.998669][ T5747] overlayfs: failed to clone lowerpath [ 136.173568][ T4281] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 136.860977][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 139.155356][ T5787] overlayfs: failed to clone lowerpath [ 139.168098][ T5787] overlayfs: failed to clone lowerpath [ 141.480717][ T5829] overlayfs: failed to clone lowerpath [ 141.537420][ T5830] overlayfs: failed to clone lowerpath [ 142.379809][ T5836] netlink: 'syz.1.518': attribute type 4 has an invalid length. [ 142.633088][ T5841] overlayfs: failed to clone upperpath [ 143.478157][ T5864] overlayfs: failed to clone lowerpath [ 143.890176][ T5865] overlayfs: failed to clone lowerpath [ 145.343935][ T5883] overlayfs: failed to clone upperpath [ 148.622958][ T5918] overlayfs: failed to clone lowerpath [ 148.686029][ T5920] overlayfs: failed to clone lowerpath [ 150.460279][ T4281] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 150.469007][ T4281] Bluetooth: hci3: Injecting HCI hardware error event [ 150.477359][ T4281] Bluetooth: hci3: hardware error 0x00 [ 152.610811][ T4281] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 152.739052][ T5948] [ 152.741416][ T5948] ====================================================== [ 152.748426][ T5948] WARNING: possible circular locking dependency detected [ 152.755455][ T5948] syzkaller #0 Not tainted [ 152.759857][ T5948] ------------------------------------------------------ [ 152.766857][ T5948] syz.1.553/5948 is trying to acquire lock: [ 152.772732][ T5948] ffff888079750158 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 152.782401][ T5948] [ 152.782401][ T5948] but task is already holding lock: [ 152.789750][ T5948] ffff88804f80e140 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 152.800636][ T5948] [ 152.800636][ T5948] which lock already depends on the new lock. [ 152.800636][ T5948] [ 152.811030][ T5948] [ 152.811030][ T5948] the existing dependency chain (in reverse order) is: [ 152.820034][ T5948] [ 152.820034][ T5948] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 152.828717][ T5948] down_write+0x36/0x60 [ 152.833392][ T5948] process_measurement+0x3a2/0x1c30 [ 152.839101][ T5948] ima_file_mmap+0x102/0x150 [ 152.844199][ T5948] __se_sys_remap_file_pages+0x559/0x7b0 [ 152.850345][ T5948] do_syscall_64+0x4c/0xa0 [ 152.855276][ T5948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.861678][ T5948] [ 152.861678][ T5948] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 152.869222][ T5948] __lock_acquire+0x2d07/0x7d10 [ 152.874588][ T5948] lock_acquire+0x1bb/0x4a0 [ 152.879604][ T5948] down_read_killable+0x4c/0x340 [ 152.885054][ T5948] mmap_read_lock_killable+0x1d/0x60 [ 152.890855][ T5948] lock_mm_and_find_vma+0x2b1/0x2f0 [ 152.896560][ T5948] do_user_addr_fault+0x2db/0xb10 [ 152.902097][ T5948] exc_page_fault+0x60/0x100 [ 152.907202][ T5948] asm_exc_page_fault+0x22/0x30 [ 152.912561][ T5948] fault_in_readable+0x13e/0x1f0 [ 152.918017][ T5948] fault_in_iov_iter_readable+0xbb/0x2e0 [ 152.924165][ T5948] generic_perform_write+0x1f1/0x5c0 [ 152.929965][ T5948] __generic_file_write_iter+0x148/0x2a0 [ 152.936113][ T5948] generic_file_write_iter+0xab/0x2e0 [ 152.942000][ T5948] vfs_write+0x4b1/0xa30 [ 152.946764][ T5948] ksys_write+0x14c/0x250 [ 152.951604][ T5948] do_syscall_64+0x4c/0xa0 [ 152.956534][ T5948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.962935][ T5948] [ 152.962935][ T5948] other info that might help us debug this: [ 152.962935][ T5948] [ 152.973143][ T5948] Possible unsafe locking scenario: [ 152.973143][ T5948] [ 152.980572][ T5948] CPU0 CPU1 [ 152.985920][ T5948] ---- ---- [ 152.991265][ T5948] lock(&sb->s_type->i_mutex_key#13); [ 152.996717][ T5948] lock(&mm->mmap_lock); [ 153.003552][ T5948] lock(&sb->s_type->i_mutex_key#13); [ 153.011519][ T5948] lock(&mm->mmap_lock); [ 153.015836][ T5948] [ 153.015836][ T5948] *** DEADLOCK *** [ 153.015836][ T5948] [ 153.023963][ T5948] 3 locks held by syz.1.553/5948: [ 153.028967][ T5948] #0: ffff88807e125c68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 153.038191][ T5948] #1: ffff88807a2fc460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 153.047067][ T5948] #2: ffff88804f80e140 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 153.058375][ T5948] [ 153.058375][ T5948] stack backtrace: [ 153.064258][ T5948] CPU: 1 PID: 5948 Comm: syz.1.553 Not tainted syzkaller #0 [ 153.071527][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.081576][ T5948] Call Trace: [ 153.084849][ T5948] [ 153.087767][ T5948] dump_stack_lvl+0x188/0x24e [ 153.092436][ T5948] ? load_image+0x400/0x400 [ 153.096927][ T5948] ? show_regs_print_info+0x12/0x12 [ 153.102119][ T5948] ? print_circular_bug+0x12b/0x1a0 [ 153.107313][ T5948] check_noncircular+0x296/0x330 [ 153.112246][ T5948] ? add_chain_block+0x940/0x940 [ 153.117177][ T5948] ? lockdep_lock+0xf1/0x1f0 [ 153.121761][ T5948] ? _find_first_zero_bit+0xcf/0x100 [ 153.127036][ T5948] __lock_acquire+0x2d07/0x7d10 [ 153.131889][ T5948] ? verify_lock_unused+0x140/0x140 [ 153.137086][ T5948] ? cgroup_rstat_updated+0xd7/0x350 [ 153.142365][ T5948] ? verify_lock_unused+0x140/0x140 [ 153.147556][ T5948] ? verify_lock_unused+0x140/0x140 [ 153.152745][ T5948] ? mark_lock+0x94/0x320 [ 153.157084][ T5948] lock_acquire+0x1bb/0x4a0 [ 153.161579][ T5948] ? mmap_read_lock_killable+0x1d/0x60 [ 153.167029][ T5948] ? read_lock_is_recursive+0x10/0x10 [ 153.172393][ T5948] ? cmp_ex_search+0x1a/0x70 [ 153.176977][ T5948] ? bsearch+0x8a/0xb0 [ 153.181036][ T5948] ? fault_in_readable+0x13e/0x1f0 [ 153.186141][ T5948] ? search_extable+0x8c/0xd0 [ 153.190810][ T5948] ? trim_init_extable+0x3b0/0x3b0 [ 153.195917][ T5948] ? mmap_read_lock_killable+0x1d/0x60 [ 153.201364][ T5948] down_read_killable+0x4c/0x340 [ 153.206297][ T5948] ? mmap_read_lock_killable+0x1d/0x60 [ 153.211746][ T5948] mmap_read_lock_killable+0x1d/0x60 [ 153.217021][ T5948] lock_mm_and_find_vma+0x2b1/0x2f0 [ 153.222208][ T5948] do_user_addr_fault+0x2db/0xb10 [ 153.227226][ T5948] ? _raw_spin_unlock_irq+0x1f/0x40 [ 153.232423][ T5948] exc_page_fault+0x60/0x100 [ 153.237021][ T5948] asm_exc_page_fault+0x22/0x30 [ 153.241861][ T5948] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 153.247580][ T5948] Code: f8 60 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 d7 60 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 ba 60 [ 153.267176][ T5948] RSP: 0018:ffffc900050efab0 EFLAGS: 00050287 [ 153.273234][ T5948] RAX: ffffffff81be1199 RBX: 0000000000001000 RCX: 0000000000080000 [ 153.281191][ T5948] RDX: ffffc90005902000 RSI: 0000000000032f2a RDI: 0000000000032f2b [ 153.289148][ T5948] RBP: 0000000000000000 R08: ffff88802dfed940 R09: 0000000000000002 [ 153.297108][ T5948] R10: 0000000000000006 R11: 0000000000000002 R12: 00002000001d8000 [ 153.305071][ T5948] R13: 0000000000000000 R14: 00002000001d7000 R15: 00002000001d7000 [ 153.313032][ T5948] ? fault_in_readable+0x139/0x1f0 [ 153.318145][ T5948] fault_in_iov_iter_readable+0xbb/0x2e0 [ 153.323773][ T5948] generic_perform_write+0x1f1/0x5c0 [ 153.329056][ T5948] ? generic_file_direct_write+0x330/0x330 [ 153.334855][ T5948] ? __file_remove_privs+0x5f0/0x5f0 [ 153.340130][ T5948] ? rwsem_write_trylock+0x135/0x1c0 [ 153.345405][ T5948] ? clear_nonspinnable+0x60/0x60 [ 153.350421][ T5948] ? generic_write_checks_count+0x3d9/0x4c0 [ 153.356305][ T5948] __generic_file_write_iter+0x148/0x2a0 [ 153.361945][ T5948] generic_file_write_iter+0xab/0x2e0 [ 153.367314][ T5948] vfs_write+0x4b1/0xa30 [ 153.371550][ T5948] ? file_end_write+0x250/0x250 [ 153.376395][ T5948] ? __fget_files+0x43d/0x4b0 [ 153.381068][ T5948] ? __fdget_pos+0x2ae/0x360 [ 153.385651][ T5948] ? ksys_write+0x71/0x250 [ 153.390062][ T5948] ksys_write+0x14c/0x250 [ 153.394387][ T5948] ? __ia32_sys_read+0x80/0x80 [ 153.399146][ T5948] ? lockdep_hardirqs_on+0x94/0x140 [ 153.404342][ T5948] do_syscall_64+0x4c/0xa0 [ 153.408749][ T5948] ? clear_bhb_loop+0x60/0xb0 [ 153.413416][ T5948] ? clear_bhb_loop+0x60/0xb0 [ 153.418083][ T5948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.423972][ T5948] RIP: 0033:0x7f993d59aeb9 [ 153.428384][ T5948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.447981][ T5948] RSP: 002b:00007f993e4e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.456383][ T5948] RAX: ffffffffffffffda RBX: 00007f993d815fa0 RCX: 00007f993d59aeb9 [ 153.464342][ T5948] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000003 [ 153.472298][ T5948] RBP: 00007f993d608c1f R08: 0000000000000000 R09: 0000000000000000 [ 153.480436][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.488393][ T5948] R13: 00007f993d816038 R14: 00007f993d815fa0 R15: 00007ffdce90bdf8 [ 153.496360][ T5948]