last executing test programs: 10.665570367s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20008000) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f0000000b00)=""/41, 0x29}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003700)=ANY=[], 0x9c0}}, 0x0) 9.793042992s ago: executing program 3: syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = dup(0xffffffffffffffff) ftruncate(r0, 0xad1) write$binfmt_script(r1, &(0x7f000000ac40)={'#! ', './bus', [], 0xa, "b01f5e088c7a113705af8c686512ca63e6799cc6ab244538a9475ccfedd8fb1d88937c52f030f315809c6739ce23410369e8a19afc72cbfcbd9f5a587eee5b4ce55db19f9448277b0802c09d"}, 0xdd6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 9.717092924s ago: executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}, {@huge_within_size}]}) 9.256225505s ago: executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='alloc_mode=default,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',background_gc=off,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\b'], 0x1, 0x5501, &(0x7f0000005880)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x1e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000700)='ext4_free_blocks\x00', r3}, 0x45) nanosleep(&(0x7f00000000c0)={0x0, 0xfffffffffffffff7}, 0x0) io_setup(0x0, &(0x7f0000000100)) creat(&(0x7f00000006c0)='./bus\x00', 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x14113e, 0x0) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ftruncate(r8, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r7, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f00000001c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100), 0x1001) 7.817729158s ago: executing program 2: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000740)=ANY=[@ANYBLOB="63726561746f723df617ff662c756d61736b3d30303030303030303030303030303030303030303031332c747970653decaaf1c82c626172726965722c747970653deca51a3d2c666f7263652c666f7263652c6e6f6465636f6d706f73652c6e6c733d63703836352c747970653dd3268d712c00"], 0x81, 0x6d9, &(0x7f0000000d00)="$eJzs3UtoHOcdAPD/rFYrrQq2nPjVEoiIS1oqaksWTute6pZSdAglpIeeF1uOhddykJSihNIofdx7yKmn9KBbTiW9G9JzQ6HkqmOgkEtOgkIVZnZmNZJmH7Kejn8/MzPfzPec/+zMeHYRE8Bza3466k8iifnp19fS9c2NufbmxtxYnt2OiEZE1CLqnUUkSxHJpxF3ojPFt9ONefmkVz8fLt5+8/OvNr/orNXzKStf61evQmP/pvV8iqmIGMmX+432aPGTvd3vau9uz/aGlXT3MA3YtSJw8ddDtQqHtr3Pejfv4/8MrH6Q8xY4o5LOfXOfyYiJiBiPiOz/BPnVoXayoxvG9vmDlF4/voEAAADA8WgevMr5rdiKtTh3HMMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAb6r8/f9JPtWK9FQkxfv/G/m2yNPpyjP3Gv1/j3WWT057IAAAAAAAAABwBF7eiq1Yi3PF+naS/eb/Suk3/m/FO7ESC7Ec12MtWrEaq7EcsxExWWqosdZaXV2ezWpGXOxT82Z8VlHzZu8x3jnifQYAAAAAAACAM258QP7D0f3b/hDzO7//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAWZBEjHQW2XSxSE9GrR4R4xHRSMutR3xWpJ8RSdXGJyc/DgAAADiU8QHrVc6/H1uxFueK9e0ke+a/nD0vj8c7sRSrsRir0Y6FuJc/Q6dP/bXNjbn25sbco3Ta3+7PvjzQ0LMWo/PdQ3XPV7MSzbgfi9mW63E3Hkc77kUtq5m6urkxly4fVY/rg3RMyU9zfUYzUkrfS2dXPsnSf9n9LUL9QLv4lGo9cyaz3NFuRGbysaU1LhQRqI7EwKNT79vTbNS63/xc7N9Tdcw/6N/7xJ5Sld/cnIq9kbhZ+vRd7h+JiO/94+PfPGgvPXxwf2X67OxSpfcHltgbiblSJK58gyIx2EwWiUvd9fn4Zfw6puPLsTdiORbjt9GK1ViYKvJb+ec5nU8OilTZG4NG0siPS+f6VTWmqdg1ppiKX2SpVryS1T0Xi5HE44hYiNeyfzdjtns12DnCl4Y462tDXGlLrn0/W3TDFM3h6p2ANK4XSnEtX3Mns7zylp0ovVAZpeJeN/z9qKT+nTyRtvDHvveHk7Y3ErOlSLzY6/PSCenfttP5Snvp4fKD1ttD9vdqvkzPoz+fqbtEeoRfiPF85y5k8yQ7p2ayvBe7d9jd8Wrkv7h01PblXerW65ypv4rHcW/Xmfqj0q31clZ6dN8dK23pSrel3dfwNO9qKa/q/1sAnHkTP5hoNP/b/Ffzo+afmg+ar4//fOzHYy81YvSfoz+pz4y8Wnsp+Xt8FL/fef4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe3sq77z1stdsLy9WJWnVW0r9Wq72dv0isV5mJ/0Xs2pLkr8oZMJ40kQxRZlBiLN/9w7YzRCJZ73TVq0zxtsbBDU4d41CLUR6oVvGWp6fqNK08ROF6jFUMrOj5OA/c4RNTwxduj/SPRvGBPdR4mlXHayQi9hT+f5oYcOEYOYqrD3Cabqw+evvGyrvv/XDxUeuthbcWlkZv3bo9c/vWa3M37i+2F2Y681KFE3n5LXASdm765a21iJcH1z07L2oFAAAAAAAAAACA58tB/oogieSp/mDmtPcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeLbNT0f9SSQxO3N9Jl3f3Jhrp1OR3ilZj4haRCS/i0g+jbgTnSkmS80lvfr5cPH2m59/tfnFTlsd380aXe9Zbzjr+RRTETGSL4+qvbuD22vsJMcqspNuZNKAXSsCB6ft6wAAAP//xNzksw==") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 7.598171732s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f900001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimes(&(0x7f0000000200)='./file0\x00', 0x0) 6.700062072s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) openat$full(0xffffffffffffff9c, 0x0, 0x20100, 0x0) socket(0x10, 0x80002, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000011c0)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000540)="8326705d4dc215df0051d933fd48a0e9c1035681545705897a3748cb3da8f4ae7ef5cb0b9e5304", 0x27}], 0x1, &(0x7f0000001ec0)=ANY=[@ANYRESHEX, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0], 0xb8, 0x4090}}], 0x1, 0x4000) sendfile(0xffffffffffffffff, r2, 0x0, 0x1000000211005) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f1a000214100a0002000000000000000000000000000000031000b9e94e945c738fa6fe723abbad04d8b4c447f70ec3f8b06cb701d1db6689ac522d13400db68392048ce754bff6c0506f021534d76cbe88cf6de55fe7653cdc90b89cd5fe000ff8eeb1e76b4046a8d62981be0c7d221d62c9ea3b9387f9f18eed702a0f53c50cd7081bf8a887b28f75cd64374d7c5af13defe29597a95a8698b16e67304a64f7195dea9aaa9f00a8d8a0001111a2b4951e3337b0fca1fbc5b6d57d094e23ddd8caba3999fff6cff8cec4218571c3"]}) 5.376011777s ago: executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x401, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {@multicast2}, {@private}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000003c0)={{}, "46066445acd7695929254804e4a96638aebcaa4fdec6ad6e8572bcb1ef56e9768c23123e40f99a51b9474bbcdd222c35d4a1e5bd5ee02deafdac4376c5fbb6e757bb7425c7c1bfd912796d0496d789cb2f787cce7b143627263b32287ea2d268f04dcdcf39567a986a9dd953df9172ba2719d5a91b8e9d41710c32395e0e07827ca90bd8e50c762bdcf725118c0cae585b058ecbedbc77db2932e327522f5d6984a1d7123fb914894090f2583a772df78ae84697bdc54b9f9d25343c1169c173d80d152b6812beb0a9eb7617c9e7dc23348c848a4edbd017f5a8f62fca8aac4aa5ebe0900db89de01055c503d6f3da3f6cbaf6dec8ae624a19acc6f9ffc9b4fd831815c6cb7ca591f7d919d6f0449d42a0bf840d4bfca023457053651009ab8a8d3ef60a2fc6c4c1ad0d47acd2df047cdd0bf1c3cd97b50d8c66febaea4c07b2a850741a5c2b32c1e0fc8028cec0896143e6dfacd0af1d224e1e3c1fbc9397304204007f217081b4bcc3cfffe974257d5953754319d58b0e78855f8602f686e0c7324071290e005884fc5e43fc6fd381e53b40977a07edd319a3ba6a2702907b1e0ef489f18c48cb19694a0d85e21b7ac72f542792a649b9c16a8a4b34e2ddc00b328bcc3446a7fdc9a0c92899e2c4d829e51c2809bef149487c702e4b6b91485da511c2b62a036add34558bb7cd037363466540667f8c7298004d6180766a1f4a35531496df49e03e2e0bece98d8ec1e95287c108ef66dc6b01f2e51c769053b466c12c9837580b9393b0b98d60207070f90ef171369f569d1ab9ae2198ca04d5a2c40b7879a77d74f41ea030ded74b79d396f37938b55e7bc01361dcc90ed067a72c8c833a084647962221c923cb46eded54de46cede07267874bf56d2ebb1a06b92b63cb3274555c4413da82e2b5b82acf09e5157f8fd04c873243fb2562a3d5960075939e0ff4d87a75041b1cec0f49adc709e27b36e074c91c8b0574a0bc895fe8d7d0d3fb4579abd6adca79c04dae1dca65bd1871809fcda2737a165408234bd01357fe9ce416d8dfc3afac4ec4eec71ff7e2e052c9dc05ca8ba153787153a58a4f97a08cc038a5987d9ad6ef50891cd10d9e17fe606726a1c56aa0167cfff7eefd3c7a00fc8e118bbcdf99ac5e038f10f08694e4db38ac37a443aaac65c50891caa0f17afab621d90a2fbd836becb808db9dbc3c1293bed1e6ae5db5a638e9a62701ec9ac38959603a67a0bae90ebb47789245d4db69bfc332b74ad5984e3f883a40a908c156e25469f5b4fc8bd922e604df2c0b4ab537f2b89afe1d4abf7c74dca8418d9fa85f041e5c81399111c0531b7765b2f1e8aa663e4d9e110c5f41afde020dc7031d64c7b3dd5d4a35e3ed81763081bb739b721c060638864371a5205b45b290c156840d7970b234a7bc3cc380922530271fbd7b5feca76e2fa4276628bc7fa1f96e7cee18ad690feb76961eb4a4334ca378dd58e69b76e7a28935d015780de4987cf9b04ff1a832a4ceb2787adc511e88b380f64265e41f76bf2faa7390cd32b8109157b4847ad0e0cc191f09b3681afb0f9c49e070c1b226c12e0166d02bb01f03428d6abf8a6c5adea50a351d6fb35ae2a7ab37a37cec01551184daee12ff1e166558a944be51d5293d569ba44612da6cf1d46df695f246a829da7d9f56f35a8c9f3af0a60fa5aa742ea40857fe293990de7cc0bf3997a413da9896cc0bca3c641ab6f86b01fcffd19d260ccbe2803e9a696a34d2886750ff1f415ca8b4d707c7bf4c9ef8cbf0a1127b9a45cad592ed4888d7f89ee3560a3dcca2572ea22a089184c1966cc8b6a7dd6b3148a3e35016c28af7e39d4e15894b5f7dff88af78c65f5f8b23506bb485b0439b8d3df99e84561f7d2a5645a065f09ed5c079693525619344a5eeb4a90e3dcf179d63f3970ecddb1d0907fcfc24965668a6ba40385390a809e4c750124b33923b9f8ece9c1745a517e81ad5f76c42cd9246af2e5c416c6e648ac15fcaef8066121b6fd2fe27ba5e199c43f11416edbaf7f78d1f40d90c460bf42b79f1ef0eb0f57829cb6987096e85d94e6bb5de942a45a5f4f2c1a2830118d4717a22966f5b532adc90e733fc374d6e43409a4b2f69d766b5c4b3d720eec35fe9df143073e5142078b3ff8c4fba77e79d0606b01d8748328758653b4c5ca72489d88477da90e819bcd1a402b307c31f247dd505e97d3933467af67d8b8a3ed530e7840966dcd5be71341314386b55816bd6af363ae09ee14fdebae5086388fdec9aed6c92b42f67f5a99054e2dce3315d4cd44d2593f7c41d05fcf57babf3ba6217d872cab50b1ce9f6e3a120f98e955baef29b7113a7b3ad7357090105f509905d7ac62ebb487e97cdb70fc262a0da6ee0c67a1f3ae9a2d8a28b1ec912029e1724d1e03ffcb4ab5fa81a406546367cc5dda0c31d0027c593d9ea7cd996c94563bab694839e5f6315b84da45a3e38cc415d7b77b7e426414dcbaefd9944d0822c9515c37885f58bacc89f20c8f54cb9f5ec15cc6a4e52a3776c0e7c2b8aab1de742b08adec19f9020b0820619c92d566e118c98526327a425871e081d69f03e21217da6a31f8a0525c6a980d6e5bf115da8388318a8298e63584bdad3850a4e5d5c87b1a1c52669c6e2bc037de05c27d132952b29350b4e1a1fb231d9b4734ffa03e4b1b866ec9bb77d2cbf70739f9108879123c238a483bc62cd32f0bc1ceef11034b2ef1ca0d5ad3bf7bd288e305b5f40b37b54f48bb1e7dcf3189317089f8f07ef044926d84da66fb158f9d62b1a8b13597836a8a37efb97fbaae86f2afdcce818d45558afb6942ff13011f18ee41b6b26f95215e4fe8161f9aa12beb8fa1c1c4d0bddca0f96143bf3695ba2e1248330ac037e607d72aaed91ab76c4e97823f7cb247d5fb67c7ee0f317eab163f989ad2154a524778482e263150722ad9ec080b7fbf3a59e04350cbb0a4f6ad8337ebb6c9d107a763fc9d9adda6faa4598e061e8ac682cd8a23262d48b954b6ca754641c9538ea07bdb22c1e08502504e60055ba6fcc015ec82fbe126539acd3a7cdcf09de2ee19a3316bdeaa839af48d0789c8107f0a7f715c7df86f5ae563d88c590466f938e0de0a458210010b17c1ce64cad462f846c716b7821e5f5864855dc635514a830fae55393552cf4ed908d226386142d41b58d75df392ca476f4869ccf8399f80d0c4d29fb390246170b1f31962145b49a948ccc3871cc1cc38927ead2965c36b76cd838af4abc7b5e3108595520ebf0331bdd1ab53df6e1ad41af45d4bae824a5255a56695ddcbea406d7b43031a4f304878d4cc096bd434feeeeec4bf86fe029e6ebdfe40a445f2ffcf4c8947ee523060622f8690a76cfbc543b75062e42facad0401e40ef0016406943ea14fefb66c88a287e443237c17d7b63079cfe0cd2f3b5744f3dc63fdf29daf4c93b75acedb8f6c009b03ec19df8b0a678a11f99b02a265a6e03ba5a7aa8a49ae54d51e834c9e7c4c3606baee07ce95d5f8b77d68b3ac276811daa0b9a68d63259c1150d7b84dcb2527042d5a0947ea904c387585cc1d571e0331239d8b155f596d17262b698d2a98911a8618076625a5fe501863a305c7c59bf5104d31553182fc9e6df731f051337e9f834929678cc2ba2dd678493a20765166026561c9b1e876ea90030c45bc98a47a97fce3d981232db3993cad80318ef367aa96c0c49fb0b2947c629efbffb17c35d55f7404470357497fd559088a1109a04714bb9248833402aaba2a1474f311158c9c17a39e2f11b69a41fde5d0d1ad159495a6f0c4be3bf88e1a270f7fa80fa4805aaa76d49b035d8862763e8b0a9a79aae6bd391a108614d87b688cc58bd429f4fa5e74ff8fef1e28ad23c87a9f0e178bbc3f562e9a309eb33e7e9f2f224a382d3a86e10a40163af43ff05b7e3604d288c74f964e74595cb77f043e79d417738c080164a1b95dd3105e0b4898701ba11c9130c8358a6fd2b310a96b1b7f48b95469b1b7b3f7b84de8f007df458a69d16fd223323ab2fa1c6faa94a2117e69e33049d5aa337de0b08a10d4d1175b4b359ef96c94cc9b86420fe3e5f54cf515102876cf52424dd91757e8d96b7f89a628fc8b438589dd556609830617da3664e80f61e8d687a5cee385f40d80b9da89eee077dc841fe2322b06ca8975ba9dda18eac89395de887ec2f691b995cc7de8b4ea725979c35ee3f2b0b9c3d96e119a41e5a6ac01f16a726b4384286d8da99ac52a5801f3b3a1deded49535c64f5fe23193a294f586a76a106ce279d5e422feae3620d7352e9ef77009cfce5d5b1a39f1eb685359fed98652f8ba226ae45a0fbc1b36924a12f68e7c575dfd8895cf76d590245fc59e2d41ed3a66bdd1d42d5ae873fbf615dc4f080925a03dd2056d8f962c781a0ec386ea70a13bc7ebc115b08d80bc5f3403a09407dbf39efe69a976d14da560923acbec9ea5b2e8adbbe7ea265d5acc00d53eeb460f88d82a9ffd292a7226f2cf47440a2bde53be278d2b9c674e712b99befe905fe6923ac9185e5421ebc4505ea74c96cc68b34abb04ae0485afab8d3345911cfa24948cb84748b2bd145f77a07d1ba762c709c14dea77b1e156a039f584256c1d256e989d619ebf266141fca022c4587820d17b0698fc7477c73a9258b4c2a0f92b93f1f87ef4c77e08e197acd131fc80d3800e5a67f693e4d7a8a16d6984ee5ece6046e7f6b98304b779ab92d90114b62a7b257727a4e60292cf7b8e60ceccf52bb806ecf31e668822fadc0056f38afd4816fcbb08093f185e7b0e68831ce3a2f0a67941bfd8883c95812000ed6174a565e73b376f844b93637e6e951caa9d9faf4f1e032d03a13f900f117ff78e8cd43716681eb509cf98fc96592c82426079d673f5d0a6f70eccb0231b5e169fae1b70ba6352246494f31a57591cf92d8fa5af4ea996b01abe2cfb7efecf801fa974e3fe000b42ee71af4857e4007ed281b1e6ce219b844f60c0433e76c09b5208f11232ee5278eb8da09d3ec51b8355f05e42a94735a373155f3f5bd071e03284968ae429be7666a9b2f1615b5a0ab424ac3996597d6b0137788a84a992d7dcf031e3f7ced491907ead5db96c5e33b8e0e94c5f4274d60ad57aa426c50136cade39d8a48eeb0ff2cd9ca9fa300a9e4e6393cc177357d542fb2a80b1d50d42096fdb5d12105e9bcf95a37328cb32f77bdecb02626fd006e65adbb8c2430dc35e97d8056c20f23088eb153a8625eecf0097b17574e96e8b459ffb1016a51cb36db202b59d5eb6e556848e890f571effaba78a0e0eb9cdfb9b36e2997aea93e8e5cc345897fb647e9b401b86c77fd40e6c65b8fdbb299f096b18e3d63b272c4588fe6004a5f6aec620b7ae316ed835bf2cb2ef834cfc06b1cd0c7864ed9c6d68192158128c654be3a8f8c40bcc8e1603fd2da92b169d71072923bd126802d876b216ebb6fae444f41ce28d19c47a2eb844f915a07c942f7351b6e0ee59598e238b3000bbc766db714b819db4377f79c4d6c40acdca9d0cdfd771d57d40a6013c9ace3713da71da4d6827d2d3221f3e9230683d3ca3fa07171ed44c1d1ebaa5340c32084727da9774ede8ecaa3351a3db9053c2910c58141197110e0f17877be159fde0c77130f278cb5dfe771f7f28399610a2a92fdf1e8f6e931a10a910458073500c724a462952472e99600810063d85847b84769b29681fdad12b984777629a419dcf66dadea8d804157a2f68a96ea502d4d3fa759ca5d5ed68d2"}) 5.260323684s ago: executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private}, {@rand_addr=0x64010101}, {@broadcast}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.022385991s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1700000007"], 0xd) 4.770543111s ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000440)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4103092cc1f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 4.753412893s ago: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000040), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) unshare(0x68040200) syz_io_uring_setup(0x0, &(0x7f00000009c0), &(0x7f0000000180), &(0x7f0000000380)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") mknod(0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x0, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7c}, {0x3}, {0x6}]}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)="4480502ac1216c3f00", 0x9}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x4b, &(0x7f0000000240)=0x7ff, 0x4) recvmsg$can_j1939(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @alu={0x7, 0x59c632caec89de1c, 0xd, 0x4, 0x1, 0xffffffffffffffff}, @initr0, @exit={0x95, 0x0, 0x70}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 4.649547059s ago: executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x51) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x0, 0x0, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000180), 0x20000000}, 0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="13f7e55708e0e545813a7dd50d2c4071b4618f9b0df1aeb1c4ca8cfed23c65792d382c7cd4d7c482c5cc0230919b2b4808fa5066afb6bcfa3c54d23f0878a5dd2a07cd3577dabe870c8af0a94d4191359f1b2088462c94f76171e20d8cb2dbe478da2c8bd9ff56732ff44bd440ba0d2dbd04fa095131372a083b7d794cd7b2b93a94ca77ff8fad9036140575fef6a790fc7699cb562c2711bbf2a58c57a8df467ef472536b186444617d78d478dad2d55d5f93e953fdf6788b950cf45f0f5c056df5f4c25d52d41b0325a80ff6d9d18fe5800099a5940a7818e0f1960a", 0xdd}, {&(0x7f0000000300)="bfc04d10731ff182c1c919fbb54de0b735929b57a9ff03eed56d3db8497581cb632dd6565e68a712458dd7ea36beba78d269", 0x32}, {&(0x7f0000000880)="af966403ccc3fee577b917437ea5d2486d1d95d119029aa87df750060e236b812867a764da399edd225e2afffce7ca4cfa78c86b261cfe6f484402b2588ab0d146aba61a163c9a2227a58e2d938c5bc9b2132ccf5fa4f1b7bdec778cd6e2c1309f0e40bddae7de616c7c176c6e5fb6893842a04d809e48b55e826e394867a683c845a6670dd8e7f1ef18b323686253119d6ad7f109219ca5067716f0c2cf0b4ff400d5e607ed82a6bc2aa6d6a12c7c6a91ee14724b3b9f40ad79fde7ac9f135f6aed635fb47c97f9a7dbacfb", 0xcc}, {&(0x7f0000000a00)="ac82143d86701bae1159224d2720946c6a2718c293477cf7fea98e86019536e7ea1dc9267a3c529b8551dfe745d44cda4fe590b6ccccaa8e7f3e67341de4adb1bafb2e95dc871d472a86c95d77856c784fb2d8463e7f673d7b3fb0d67565aa3f96e491a699ba416001cb9fea9214e7670a7ec04e64223f423e352557f998b09290b68c2de197eb4ac6639859f0bd2e994d7763d8f65c5d762d1d3619afb952b799f422d30dc00b79798cb58511bdd50f6c46337ef420bfa6c05b3cac76067edf80414f523157b725288325b8cf43f1a87fa595cc49d317ad4f80ebeff11c4da90ba668", 0xe3}], 0x4, 0x0, 0x0, 0x4054}, 0x810) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.603142057s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2810000, &(0x7f0000000740)={[{@user_xattr}, {@noquota}, {@jqfmt_vfsold}, {@jqfmt_vfsv1}, {@block_validity}, {@nobh}, {@noquota}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@delalloc}, {@noinit_itable}, {@quota}]}, 0x1, 0x54f, &(0x7f0000001080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioperm(0x0, 0x3, 0x2) keyctl$setperm(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x59455247}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f00000004c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.117622607s ago: executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000d00)='bic\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='w', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)="86d911aedf692bf8135c216745849018e734bf97dc1dc38e4cc390b6a6", 0x1d}, {&(0x7f0000000c40)="57c1ff69754594f0a3b8208aa0c51dc1818635f31c38366a75f493b49f3a25a65cf9bffae16c00fdf15820ee7ed1d6eb81ad65c9f88dc79d86b57911469c5419a312157e4a724ca4292b3da29671f359098fceefcbf5cac43ca9a7146bcf48dd85ccbe4850703a08935e4c7c91ea169c040c1e1a220780981ebc04592997031b9d155d2fc7d0a08f", 0x88}, {&(0x7f0000000280)="ea33f6177f549b350a63c0af2c92e0d2da448b211fac12b6f5cede435fb881e431943a5442d7f2f64dd053a4", 0x2c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000ec0)="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", 0x125}], 0x1}}], 0x3, 0x0) 3.007433594s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r2, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x581, 0x400, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x8100000018000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x2000, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0x10}, {}, {0x0, 0xb}}}, 0x24}}, 0x1000000000000000) 2.876652354s ago: executing program 4: syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = dup(0xffffffffffffffff) ftruncate(r0, 0xad1) write$binfmt_script(r1, &(0x7f000000ac40)={'#! ', './bus', [], 0xa, "b01f5e088c7a113705af8c686512ca63e6799cc6ab244538a9475ccfedd8fb1d88937c52f030f315809c6739ce23410369e8a19afc72cbfcbd9f5a587eee5b4ce55db19f9448277b0802c09d"}, 0xdd6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 2.828666431s ago: executing program 1: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000740)=ANY=[@ANYBLOB="63726561746f723df617ff662c756d61736b3d30303030303030303030303030303030303030303031332c747970653decaaf1c82c626172726965722c747970653deca51a3d2c666f7263652c666f7263652c6e6f6465636f6d706f73652c6e6c733d63703836352c747970653dd3268d712c00"], 0x81, 0x6d9, &(0x7f0000000d00)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 2.739731055s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lstat(0x0, &(0x7f0000000440)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0xe, 0x0}}], 0x300, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x6, 0xbffffbff) capset(&(0x7f0000000300)={0x20080522}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f00000020c0)=ANY=[@ANYBLOB="04040a00000000000054673b20"], 0xd) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b3, &(0x7f00000000c0)="$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") getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0)=0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80300, 0x800}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x50}}, 0x0) 2.71165718s ago: executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = dup(0xffffffffffffffff) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 2.389763159s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f900001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimes(&(0x7f0000000200)='./file0\x00', 0x0) 2.375497471s ago: executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x0, 0x3, 0xff) connect$inet(r4, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r6 = dup(r5) getsockname$netlink(r6, 0x0, &(0x7f0000000080)) syz_open_dev$media(0x0, 0x0, 0x101002) sendmmsg$unix(r4, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x104) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.323516219s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1700000007"], 0xd) 2.06368634s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x6020400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x3, "445aa1"}, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x457, 0x8000000000000001}) openat$cgroup_pressure(r2, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='batadv_slave_1\x00', 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x8000001c, 0x4}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a000100e2ffffffffffffff1c000000f7"], 0x1c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(0xffffffffffffffff, 0x80) 1.733823181s ago: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}}}, 0xe8) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000005c0)={0x6, 'bond_slave_0\x00', {0x9}, 0x1f}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200000c4, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x20000080) 1.634461737s ago: executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)="9b", 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000000), 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x3a, &(0x7f0000000100)={0xd, 0x9, 0x8000}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000780)='./file0\x00', 0x210008, &(0x7f0000000540)=ANY=[], 0xff, 0xc42, &(0x7f0000002f00)="$eJzs3U9sHNd9B/DfGy7Fld1WTOwoThoXm7ZIZcVS9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spC3THnroIUAR9JATgdYokKKB0bRBj0zrAsnFhyKnnogWNoKiB7YIkFPAYGbfikuKtGmTlCjr87HJ7+7MezPvzaxmJIJvXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/30sVTp9ODbgUAcD9dHv3yqTPu/wDwSLnq3/8AAAAAAAAAAAAAAHDQpSjiiUgxe3k1jVfvO+qX2v2374wNj2xd7XCqavZV5cuv+ukzZ8994bmh89281J5+j/p77dPxyujVi40XZ27Nzk3Oz09ONMam29dnJiZ3vIXd1t/seHUAGrdevT1x48Z848zJsxtW3xl8d+Dxo4MXhp458XS37NjwyMjoepF6b/nah25Ix3YjPA5FEScixbPf/UlqRUQRuz8W9ft77jc7XHXieNWJseGRqiNT7db0QrnySvdAFBGNnkrN7jHa+lxErf++9mF7zYjFsvllg4+X3Rudbc21rk1NNq605hbaC+2Z6Sup09qyP40o4nyKWIqIlYF7N9cfRdQixbePrKZrEdHXPQ6frwYGb9+OYh/7uANlOxv9EUvFQ3DODrCBKOLlSPHTt47F9Xydqa41n4t4uczvR7xR5gsRqfxgnIt4Z4vPEQ+nWhTxl+X5v7CaJqrrQfe6cukrjS9N35jpKdu9rnzA+8M9V4r7f384fPdbT94fB/zaVI8iWtUVfzV9+L/sAAAAAAAAAAAAAAAAALDXDkcRn4oUL/3HH1XjiqMal37kwtDvD/5y75jxp95nO2XZkxGxWOxsTO6hPDDwSrqS0gMeS/woq0cRf5zH/33jQTcGAAAAAAAAAAAAAAAAAADgkVbEjyPF828fS0vRO6d4e/pm42rr2lRnVtju3L/dOdPX1tbWGqmTzZzjORdzLuVczrmSM4pcP2cz53jOxZxLOZdzruSMvlw/ZzPneM7FnEs5l3Ou5Ixarp+zmXM852LOpZyv/Hmnzyv5fRyQuXsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5Kiiji55Him19bTZEiohkxHp1cHnjQrQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASgOpiO9FisYfNO8uq0VEqv7vOFZ+OxfNQ2V+PJpDZb4QzYs5W1XWmt94AO1nd/pTET+KFAP1N++e8Hz++zvv7n4M4o2vr7/7dK2Tfd2Vg+8OPH70yIWhkV97arvXaasGHL/Unr59pzE2PDIy2rO4lvf+8Z5lg3m/xd50nYiYf+31V1tTU5NzH/5F+RHYRfWH6EWqPSo99aJ6EbUPWuufv/Wg27xnfecRUN7/34kUv/32f3Zv+J37fz1+qfPu7h0+fvYn6/f/5zdvaIf3/9rmevn+X97Tt7r/P9Gz7Pn8t5H+WkR94dZs/9GI+vxrr59o32rdnLw5OX3u1KkvDg198eyp/kMR9RvtqcmeV3tyuAAAAAAAAAAAAAAAAADumxRF/G6kaP1oNTUi4k41XmvwwtAzJ57ui75qvNWGcduvjF692Hhx5tbs3OT8/OREY2y6fX1mYnKn+6tXw73Ghkf2pTfv6/A+t/9w/cWZ2dfm2jf/cGHL9Y/VL16bX5hrXd96dRyOIqLZu+R41eCx4ZGq0VPt1nRV9cqWg+k/uP5UxH9FiuvnGumzeVke/795hP+G8f+Lmze0T+P/P9azrNxnSkX8LFL81l89FZ+t2vlY3HPMcrm/jRTHz38ml4tDZbluGzrPFeiMDCzL/l+k+MefbyzbHQ/5xHrZ0zs+sA+J8vwfiRTf+4vvxK/nZRuf/7D1+X9s84b26fw/2bPssQ3PK9h118nn/0SkeOGJN+M38rL3ev5H99kbx3Lhu8/n2Kfz/4meZYN5v7+5N10HAAAAAAAAAAB4qPWnIv4uUvxgpJaey8t28vt/E5s3tE+///XJnmUT289X1Bd7OP3Jrg8qAAAAABwQ/amIH0eKmwtv3h1DvXH8d8/4z99ZH/85nDatrX7O9yvVcwP28ud/vQbzfsd3320AAAAAAAAAAAAAAAAAAAA4UFIq4rk8n/p4NZ5/Ytv51JcjxUv/82wul46W5brzwA9W3+uXZ6ZPXJyamrneWmhdm5psjM62rk+WdZ+MFKt/85lct6jmV+/ON9+Z4319Lva5SDHy992ynbnYu3OTP7le9nRZ9mOR4r//YWPZ7jzWn1gve6Ys+9eR4qv/snXZo+tlz5ZlvxMpfvjVRrfsY2XZ7vNRP7le9uT1mWIfzgoAAAAAAAAAAAAAAAAAAACPmv5UxJ9Fiv+9tXR3LH+e/7+/523lja/3zPe/yZ1qnv/Bav7/7V5vPf//n8Z7zf9fPVdgcbu9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAR1OKIl6PFLOXV9PyQPm+o36pPX37ztjwyNbVDqeqZl9Vvvyqnz5z9twXnhs63833rr/XPhWvjF692Hhx5tbs3OT8/OREY2y6fX1mYnLHW9ht/c2OVwegcevV2xM3bsw3zpw8u2H1ncF3Bx4/Onhh6JkTT3fLjg2PjIz2lKn1f+i93yNts/xQFPGtSPHsd3+SfjAQUcTuj8X7fHb22+GqE8erTowNj1QdmWq3phfKlVe6B6KIaPRUanaP0X04F7vSjFgsm182+HjZvdHZ1lzr2tRk40prbqG90J6ZvpI6rS3704gizqeIpYhYGbh3c/1RxKuR4ttHVtO/DkT0dY/D5y+PfvnUme3bUexjH3egbGejP2KpeAjO2QE2EEX8U6T46VvH4t8GImrR+YrPRbxc5vcj3mic7BQuPxjnIt7Z4nPEw6kWRfx/ef4vrKa3BsrrQfe6cukrjS9N35jpKdu9rjz094f76YBfm+pRxA+rP9ir6d/9uQYAAAAAAAAAAAAAAAA4QIr41Ujx/NvHUjU++O6Y4vb0zcbV1rWpzrC+7ti/7pjptbW1tUbqZDPneM7FnEs5l3Ou5Iwi18/ZLLO+tjae3y/mXMq5nHMlZ/Tl+jmbOcdzLuZcyrmccyVn1HL9nM2c4zkXcy7lXM65kjMOyNg9AAAAAAAAAAAAAAAAAADgo6Wo/kvxza+tprWBzvzS49HJZfOBfuT9IgAA///MXvRq") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000080)={0x0, @output}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 959.618511ms ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = memfd_secret(0x0) ftruncate(r4, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) 611.558515ms ago: executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) r3 = syz_io_uring_complete(0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000c80)={0x2, 0x100, 0x6, 0x0, 0x8, 0x8}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f0000000500)=""/82, 0x52}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000580)=""/251, 0xfb}, {&(0x7f00000009c0)=""/49, 0x31}, {&(0x7f0000000a00)=""/214, 0xd6}, {&(0x7f0000000b00)=""/137, 0x89}], 0x9) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4008, 0x3, 0x2d0, 0x0, 0x32, 0x148, 0x0, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x8000001}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x2, @pix={0x3, 0x0, 0x34324948, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r7 = epoll_create(0x4000100) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000300)={0xb0000004}) epoll_pwait2(r7, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 30.859185ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x2}) 0s ago: executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) socket$inet_dccp(0x2, 0x6, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000080)="ee", 0x27, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r2}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={'sha512-ssse3\x00'}}) kernel console output (not intermixed with test programs): 56.338249][ T3576] device hsr_slave_1 entered promiscuous mode [ 56.345086][ T3576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.352708][ T3576] Cannot create hsr debugfs directory [ 56.384484][ T3571] device hsr_slave_0 entered promiscuous mode [ 56.391595][ T3571] device hsr_slave_1 entered promiscuous mode [ 56.399692][ T3571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.407696][ T3571] Cannot create hsr debugfs directory [ 56.417526][ T3573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.425121][ T3573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.451463][ T3573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.462696][ T3584] Bluetooth: hci1: command tx timeout [ 56.501994][ T3573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.508958][ T3573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.535887][ T3573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.541202][ T3584] Bluetooth: hci4: command tx timeout [ 56.546781][ T3574] Bluetooth: hci3: command tx timeout [ 56.552135][ T3585] Bluetooth: hci0: command tx timeout [ 56.557313][ T3583] Bluetooth: hci2: command tx timeout [ 56.643933][ T3573] device hsr_slave_0 entered promiscuous mode [ 56.650693][ T3573] device hsr_slave_1 entered promiscuous mode [ 56.657930][ T3573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.665634][ T3573] Cannot create hsr debugfs directory [ 56.878308][ T3568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.896255][ T3568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.909383][ T3568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.918689][ T3568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.967463][ T3578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.986262][ T3578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.998092][ T3578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.017893][ T3578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.047709][ T3571] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.072856][ T3571] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.097282][ T3571] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.130562][ T3571] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.175106][ T3576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.198623][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.207143][ T3576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.216479][ T3576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.242985][ T3576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.287618][ T3578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.313686][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.323818][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.335850][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.354110][ T3573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.366243][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.374249][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.386238][ T3578] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.395557][ T3573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.406258][ T3573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.426910][ T3573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.441582][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.450787][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.460681][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.467935][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.477124][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.486179][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.495079][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.502196][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.522764][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.531645][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.540090][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.548992][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.557645][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.564786][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.572915][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.583567][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.592190][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.600850][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.609591][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.618316][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.626810][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.634057][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.643284][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.690452][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.702047][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.710597][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.722601][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.730877][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.743943][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.753016][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.779246][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.787830][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.796933][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.805677][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.817290][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.833436][ T3576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.848228][ T3578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.859808][ T3578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.882581][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.897727][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.907268][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.916380][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.925985][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.934828][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.945202][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.979751][ T3576] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.008704][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.023489][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.047978][ T3571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.103882][ T3571] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.111525][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.120215][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.134754][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.141922][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.149637][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.158653][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.167659][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.174822][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.182867][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.190691][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.198805][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.221570][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.229587][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.252241][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.272601][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.280114][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.294736][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.308388][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.320032][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.356261][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.370640][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.379391][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.388583][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.397075][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.404169][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.434529][ T3573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.441628][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.449630][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.458555][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.467165][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.474297][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.482128][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.490402][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.498861][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.507731][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.516234][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.526798][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.541362][ T3583] Bluetooth: hci1: command tx timeout [ 58.559783][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.571819][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.585761][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.596197][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.609396][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.621246][ T3583] Bluetooth: hci4: command tx timeout [ 58.626670][ T3583] Bluetooth: hci0: command tx timeout [ 58.632267][ T3574] Bluetooth: hci2: command tx timeout [ 58.632492][ T3583] Bluetooth: hci3: command tx timeout [ 58.665159][ T3578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.690413][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.699896][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.708191][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.715844][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.724427][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.733081][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.741387][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.750872][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.758850][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.776190][ T3573] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.790217][ T3568] device veth0_vlan entered promiscuous mode [ 58.800963][ T3571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.818269][ T3571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.835273][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.846674][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.858429][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.867405][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.875606][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.884480][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.893557][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.900599][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.908519][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.917222][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.926470][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.935350][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.957917][ T3568] device veth1_vlan entered promiscuous mode [ 58.989643][ T3576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.013904][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.031740][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.040430][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.068241][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.075423][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.087765][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.096959][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.106604][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.115952][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.126883][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.136909][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.146400][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.155782][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.174916][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.199125][ T3573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.212313][ T3573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.251560][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.267649][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.288580][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.327170][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.335945][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.347428][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.359725][ T3578] device veth0_vlan entered promiscuous mode [ 59.378559][ T3568] device veth0_macvtap entered promiscuous mode [ 59.401611][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.409519][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.431832][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.440605][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.477833][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.488561][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.502279][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.510181][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.523027][ T3578] device veth1_vlan entered promiscuous mode [ 59.533123][ T3568] device veth1_macvtap entered promiscuous mode [ 59.540211][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.551834][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.559684][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.569783][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.594893][ T3571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.618000][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.648024][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.656645][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.665482][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.674586][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.688412][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.710842][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.723104][ T3568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.733703][ T3568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.745716][ T3568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.754858][ T3568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.784228][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.793018][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.810254][ T3576] device veth0_vlan entered promiscuous mode [ 59.828444][ T3578] device veth0_macvtap entered promiscuous mode [ 59.847381][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.858470][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.867183][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.876026][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.890277][ T3576] device veth1_vlan entered promiscuous mode [ 59.906356][ T3578] device veth1_macvtap entered promiscuous mode [ 59.918440][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.928262][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.936952][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.945334][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.954247][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.962552][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.971114][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.004375][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.015007][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.022950][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.030388][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.039331][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.049470][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.059117][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.077151][ T3571] device veth0_vlan entered promiscuous mode [ 60.087790][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.099157][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.110934][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.128203][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.138918][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.153330][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.163738][ T3573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.172318][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.181684][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.190353][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.200121][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.231292][ T3578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.240020][ T3578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.249114][ T3578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.258362][ T3578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.272618][ T3571] device veth1_vlan entered promiscuous mode [ 60.285060][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.293816][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.319320][ T3576] device veth0_macvtap entered promiscuous mode [ 60.334372][ T3576] device veth1_macvtap entered promiscuous mode [ 60.380783][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.383168][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.398265][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.405971][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.407409][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.422699][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.431820][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.439956][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.450390][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.458661][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.466583][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.483585][ T3573] device veth0_vlan entered promiscuous mode [ 60.516804][ T3573] device veth1_vlan entered promiscuous mode [ 60.562096][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.574642][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.584705][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.595783][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.607071][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.621862][ T3583] Bluetooth: hci1: command tx timeout [ 60.625136][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.637855][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.648793][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.659286][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.672017][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.679831][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.688960][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.697188][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.705368][ T3583] Bluetooth: hci2: command tx timeout [ 60.712056][ T3580] Bluetooth: hci3: command tx timeout [ 60.712352][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.717450][ T3580] Bluetooth: hci0: command tx timeout [ 60.725478][ T3583] Bluetooth: hci4: command tx timeout [ 60.737360][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.746062][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.754994][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.763670][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.773766][ T3571] device veth0_macvtap entered promiscuous mode [ 60.793232][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.800764][ T3576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.811877][ T3576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.820617][ T3576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.820625][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.820645][ T3576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.854292][ T3571] device veth1_macvtap entered promiscuous mode [ 60.870661][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.878824][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.887160][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.924129][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.926925][ T3573] device veth0_macvtap entered promiscuous mode [ 60.948116][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.971682][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.980295][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.992988][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.001639][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.013278][ T3573] device veth1_macvtap entered promiscuous mode [ 61.060745][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.068528][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.089679][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.108914][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.113186][ T3650] loop1: detected capacity change from 0 to 256 [ 61.124002][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.140249][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.152981][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.165062][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.176558][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.209816][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.230534][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.277783][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.295773][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.306507][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.316395][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.326947][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.337809][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.368445][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.385378][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.414899][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.426649][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.441751][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.452648][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.461609][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.479862][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.500228][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.517086][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.527675][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.541447][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.554297][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.577858][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.609249][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.619493][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.632086][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.634043][ T3571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.640046][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.676132][ T3571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.686013][ T3571] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.695308][ T3571] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.720622][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.737563][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.749568][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.760839][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.771168][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.782031][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.792544][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.803688][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.816155][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.836901][ T3573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.852666][ T3573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.868252][ T3573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.880148][ T3656] loop0: detected capacity change from 0 to 4096 [ 61.886662][ T3573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.888071][ T3654] loop1: detected capacity change from 0 to 32768 [ 61.918191][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.919099][ T3656] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 61.936880][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.953997][ T3654] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (3654) [ 61.973955][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.012732][ T3654] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 62.031281][ T3654] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 62.046643][ T3654] BTRFS info (device loop1): using free space tree [ 62.109645][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.164682][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.181466][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.189444][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.208398][ T3648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.244390][ T3648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.268412][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.312798][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.320755][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.391591][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.405202][ T3654] BTRFS info (device loop1): enabling ssd optimizations [ 62.417383][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.435832][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.448224][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.464785][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.492461][ T3654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 62.509990][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.526450][ T3678] loop4: detected capacity change from 0 to 256 [ 62.598860][ T3568] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 62.680116][ T3683] loop4: detected capacity change from 0 to 64 [ 62.706155][ T3583] Bluetooth: hci1: command tx timeout [ 62.717381][ T3684] loop2: detected capacity change from 0 to 1024 [ 62.730194][ T3680] loop3: detected capacity change from 0 to 1024 [ 62.792993][ T3574] Bluetooth: hci0: command tx timeout [ 62.793096][ T3583] Bluetooth: hci3: command tx timeout [ 62.798409][ T3574] Bluetooth: hci2: command tx timeout [ 62.813557][ T3648] hfsplus: b-tree write err: -5, ino 4 [ 62.944031][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.006187][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.027445][ T3695] loop1: detected capacity change from 0 to 64 [ 63.036502][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.085589][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.150212][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.214868][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.243869][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.289410][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.329065][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.361504][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.370778][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.397750][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.430200][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.456468][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.494766][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.558255][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.601606][ T3648] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.631443][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.644429][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.671194][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.694489][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.706980][ T3648] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.734803][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.755183][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.785378][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.823245][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.829889][ T3648] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.830632][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.955981][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 63.963661][ T3648] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.067955][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 64.091832][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 64.099194][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 64.185641][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 64.246642][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 64.298455][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 64.344048][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 64.391180][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 64.398636][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 64.456991][ T3680] hfsplus: request for non-existent node 16777216 in B*Tree [ 64.501122][ T26] audit: type=1800 audit(1717837210.899:2): pid=3680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 64.718929][ T3583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.730631][ T3583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.739275][ T3583] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.748422][ T3583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.756451][ T3583] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.772041][ T3583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.842038][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 64.991231][ T3699] loop2: detected capacity change from 0 to 32768 [ 65.025395][ T3699] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 65.067038][ T3699] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 65.110163][ T3735] loop1: detected capacity change from 0 to 4096 [ 65.148924][ T3739] loop3: detected capacity change from 0 to 2048 [ 65.149312][ T3742] loop4: detected capacity change from 0 to 64 [ 65.170541][ T3699] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 65.200603][ T14] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 65.209536][ T14] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 65.277600][ T3739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.366769][ T3735] NILFS (loop1): invalid segment: Checksum error in segment payload [ 65.378765][ T14] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 169ms [ 65.388702][ T3735] NILFS (loop1): trying rollback from an earlier position [ 65.407405][ T14] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 65.439294][ T3699] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 65.494990][ T3735] NILFS (loop1): recovery complete [ 65.555375][ T3754] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.655778][ T3725] chnl_net:caif_netlink_parms(): no params data found [ 65.731412][ T3617] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.030884][ T3648] device hsr_slave_0 left promiscuous mode [ 66.073202][ T3648] device hsr_slave_1 left promiscuous mode [ 66.091598][ T3617] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 66.101689][ T3770] loop1: detected capacity change from 0 to 1024 [ 66.164078][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.178305][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.213820][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.227336][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.249460][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.251975][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.258554][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.281288][ T3617] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 66.286501][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.305107][ T3617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.315042][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.322940][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.330499][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.338075][ T3617] usb 4-1: Product: syz [ 66.338119][ T3617] usb 4-1: Manufacturer: syz [ 66.338133][ T3617] usb 4-1: SerialNumber: syz [ 66.365088][ T3648] device bridge_slave_1 left promiscuous mode [ 66.376921][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.381182][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.394004][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.403796][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.404687][ T3617] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 66.411446][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.454748][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.470834][ T3648] device bridge_slave_0 left promiscuous mode [ 66.481867][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.498695][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.514735][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.523714][ T3648] device veth1_macvtap left promiscuous mode [ 66.530228][ T3648] device veth0_macvtap left promiscuous mode [ 66.531308][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.537010][ T3648] device veth1_vlan left promiscuous mode [ 66.558446][ T3648] device veth0_vlan left promiscuous mode [ 66.577255][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.605423][ T3614] usb 4-1: USB disconnect, device number 2 [ 66.617983][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.634959][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.651529][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.673911][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.711520][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.726526][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.751593][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.763839][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.789018][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.823673][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.850573][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.861379][ T3574] Bluetooth: hci4: command tx timeout [ 66.883700][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.914088][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.946861][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 66.987019][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 67.003325][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 67.022218][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 67.044779][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 67.067138][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 67.095573][ T3770] hfsplus: request for non-existent node 16777216 in B*Tree [ 67.137904][ T3648] team0 (unregistering): Port device team_slave_1 removed [ 67.171461][ T26] audit: type=1800 audit(1717837213.539:3): pid=3770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 67.209575][ T3571] EXT4-fs (loop3): unmounting filesystem. [ 67.267829][ T3648] team0 (unregistering): Port device team_slave_0 removed [ 67.355846][ T3648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.392848][ T3648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.627905][ T3648] bond0 (unregistering): Released all slaves [ 67.776480][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.866670][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.933994][ T3787] device bridge_slave_0 left promiscuous mode [ 67.959620][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.016611][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.041197][ T3725] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.084142][ T3725] device bridge_slave_0 entered promiscuous mode [ 68.119102][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.141293][ T3725] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.149447][ T3725] device bridge_slave_1 entered promiscuous mode [ 68.312969][ T3725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.345161][ T3792] loop1: detected capacity change from 0 to 256 [ 68.371699][ T3725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.533857][ T26] audit: type=1326 audit(1717837214.939:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3789 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003327cf69 code=0x0 [ 68.559171][ T3725] team0: Port device team_slave_0 added [ 68.658967][ T3725] team0: Port device team_slave_1 added [ 68.786875][ T3725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.805792][ T3725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.875891][ T3803] loop4: detected capacity change from 0 to 4096 [ 68.925703][ T3725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.941372][ T3574] Bluetooth: hci4: command tx timeout [ 68.956529][ T3803] NILFS (loop4): invalid segment: Checksum error in segment payload [ 68.985071][ T3803] NILFS (loop4): trying rollback from an earlier position [ 69.039223][ T3725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.052013][ T3725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.129634][ T3803] NILFS (loop4): recovery complete [ 69.144755][ T3725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.173986][ T3812] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.416377][ T3725] device hsr_slave_0 entered promiscuous mode [ 69.466832][ T3725] device hsr_slave_1 entered promiscuous mode [ 69.480020][ T3725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.535823][ T3725] Cannot create hsr debugfs directory [ 69.558647][ T3819] loop2: detected capacity change from 0 to 2048 [ 69.656039][ T3819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.181124][ T3617] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.541769][ T3617] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 70.742264][ T3617] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 70.771137][ T3617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.779209][ T3617] usb 3-1: Product: syz [ 70.806963][ T3617] usb 3-1: Manufacturer: syz [ 70.818475][ T3617] usb 3-1: SerialNumber: syz [ 70.883222][ T3617] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 71.021379][ T3574] Bluetooth: hci4: command tx timeout [ 71.055363][ T3848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.086073][ T3688] usb 3-1: USB disconnect, device number 2 [ 71.138333][ T3725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.177753][ T3725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.250465][ T3725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.264794][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.277730][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.324665][ T3725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.635131][ T3725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.677997][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 71.746350][ T3725] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.753238][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.845276][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.853663][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.875846][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.908387][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.931582][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.938754][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.975359][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.005055][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.033388][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.040733][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.049600][ T3861] loop2: detected capacity change from 0 to 4096 [ 72.115607][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.131335][ T3861] NILFS (loop2): invalid segment: Checksum error in segment payload [ 72.135947][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.161114][ T3861] NILFS (loop2): trying rollback from an earlier position [ 72.161333][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.203095][ T3861] NILFS (loop2): recovery complete [ 72.215811][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.229974][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.254944][ T3866] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.257943][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.277197][ T14] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.318356][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.344746][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.380181][ T14] usb 5-1: config 0 descriptor?? [ 72.391657][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.417297][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.504813][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.526348][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.550719][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.589623][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.620133][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.658284][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.879084][ T14] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 72.953760][ T14] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 73.101663][ T3574] Bluetooth: hci4: command tx timeout [ 73.131882][ T3855] loop3: detected capacity change from 0 to 32768 [ 73.190455][ T3855] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 73.206431][ T14] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 73.221184][ T3855] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 73.291005][ T14] usb 5-1: USB disconnect, device number 2 [ 73.303116][ T3855] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 73.333202][ T3693] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 73.340043][ T3693] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 73.537947][ T3693] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 197ms [ 73.568497][ T3693] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 73.586568][ T3855] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 73.598375][ T3725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.626068][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.645864][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.732158][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.757258][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.854283][ T3725] device veth0_vlan entered promiscuous mode [ 73.930068][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.953137][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.015754][ T3725] device veth1_vlan entered promiscuous mode [ 74.079690][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.115365][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.170067][ T3870] loop2: detected capacity change from 0 to 40427 [ 74.206584][ T3725] device veth0_macvtap entered promiscuous mode [ 74.264866][ T3725] device veth1_macvtap entered promiscuous mode [ 74.290144][ T3870] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.334437][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.351911][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.360549][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.420046][ T3725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.484614][ T3870] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 74.493405][ T3725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.529625][ T3907] loop4: detected capacity change from 0 to 1024 [ 74.558202][ T3725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.630721][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.658304][ T3725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.673292][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.675582][ T3725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.709099][ T3725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.723162][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.730050][ T3725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.756153][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.760646][ T3725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.782480][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.803193][ T3725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.807156][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.833749][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.841302][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.841321][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.841352][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.841362][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.841390][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.841401][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.841432][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.841442][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.841524][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.861651][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.878782][ T3911] syz-executor.2: attempt to access beyond end of device [ 74.878782][ T3911] loop2: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 74.919923][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.943402][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.957009][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.963212][ T3725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.970555][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 74.982196][ T3725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.982213][ T3725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.006405][ T3911] syz-executor.2: attempt to access beyond end of device [ 75.006405][ T3911] loop2: rw=2049, sector=49152, nr_sectors = 584 limit=40427 [ 75.019105][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.021674][ T3725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.042962][ T3725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.056299][ T3725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.060302][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.068941][ T3725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.088553][ T3725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.091956][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.101904][ T3725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.124000][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.132723][ T3573] syz-executor.2: attempt to access beyond end of device [ 75.132723][ T3573] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.137281][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.167242][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.169599][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.192206][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.204474][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.215810][ T3725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.230281][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.233515][ T3725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.266339][ T3725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.281250][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.309605][ T3725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.309694][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.424479][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.482303][ T3907] hfsplus: request for non-existent node 16777216 in B*Tree [ 75.489865][ T26] audit: type=1800 audit(1717837221.889:5): pid=3907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 75.536317][ T3919] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 75.610064][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.640090][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.696049][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.726204][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.751262][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.761459][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.848435][ T3923] loop4: detected capacity change from 0 to 4096 [ 75.927073][ T3923] NILFS (loop4): invalid segment: Checksum error in segment payload [ 75.981030][ T3923] NILFS (loop4): trying rollback from an earlier position [ 76.073490][ T3923] NILFS (loop4): recovery complete [ 76.136555][ T3937] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.162079][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.339194][ T3939] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.383787][ T2904] cfg80211: failed to load regulatory.db [ 76.556332][ T3939] device bridge_slave_1 left promiscuous mode [ 76.563869][ T3939] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.839882][ T3950] device veth0_vlan left promiscuous mode [ 76.859600][ T3950] device veth0_vlan entered promiscuous mode [ 77.408173][ T3965] loop2: detected capacity change from 0 to 256 [ 77.428902][ T3967] loop3: detected capacity change from 0 to 1024 [ 77.490960][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.536205][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.566681][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.601157][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.624209][ T26] audit: type=1326 audit(1717837224.029:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3960 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f646c27cf69 code=0x0 [ 77.632999][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.730153][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.767485][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.805346][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.821443][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.847238][ T3934] loop0: detected capacity change from 0 to 32768 [ 77.858395][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.882120][ T3934] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 77.915996][ T3934] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 77.941943][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.971068][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.986678][ T3934] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 5ms [ 78.016316][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.016894][ T3690] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 78.037595][ T3690] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 78.051071][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.104434][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.169498][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.171047][ T3690] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 133ms [ 78.220729][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.225192][ T3690] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 78.276764][ T3934] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 78.277924][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.470596][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.485853][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.561328][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.751602][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.751756][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.751769][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.751802][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.751811][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.751840][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.751850][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.751886][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.751896][ T3967] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.752259][ T26] audit: type=1800 audit(1717837225.159:7): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 78.806158][ T3984] loop2: detected capacity change from 0 to 2048 [ 78.873022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.891038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.895230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.899236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.907398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.915569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.923677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.931808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.939948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.948071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.956169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 79.154697][ T3574] Bluetooth: unknown link type 32 [ 79.166266][ T3985] loop4: detected capacity change from 0 to 1024 [ 79.179327][ T3985] hfsplus: failed to load root directory [ 79.228597][ T3984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.542011][ T4002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.584631][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.632332][ T4010] loop3: detected capacity change from 0 to 64 [ 79.702013][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.841168][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.876510][ T3574] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 79.887518][ T3574] CPU: 1 PID: 3574 Comm: kworker/u5:3 Not tainted 6.1.92-syzkaller #0 [ 79.895798][ T3574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 79.905870][ T3574] Workqueue: hci4 hci_rx_work [ 79.910602][ T3574] Call Trace: [ 79.913892][ T3574] [ 79.916840][ T3574] dump_stack_lvl+0x1e3/0x2cb [ 79.921555][ T3574] ? nf_tcp_handle_invalid+0x642/0x642 [ 79.927060][ T3574] ? panic+0x764/0x764 [ 79.931173][ T3574] sysfs_create_dir_ns+0x2c6/0x390 [ 79.936412][ T3574] ? sysfs_warn_dup+0xa0/0xa0 [ 79.941127][ T3574] kobject_add_internal+0x6df/0xd10 [ 79.947469][ T3574] kobject_add+0x14e/0x210 [ 79.947530][ T3574] ? device_add+0x3c2/0xfd0 [ 79.947556][ T3574] ? kobject_init+0x1d0/0x1d0 [ 79.947590][ T3574] ? __raw_spin_lock_init+0x41/0x100 [ 79.947614][ T3574] ? get_device_parent+0x128/0x400 [ 79.947642][ T3574] device_add+0x476/0xfd0 [ 79.947678][ T3574] hci_conn_add_sysfs+0xe4/0x1f0 [ 79.947705][ T3574] le_conn_complete_evt+0xcc6/0x1320 [ 79.947734][ T3574] ? trace_contention_end+0x61/0x170 [ 79.947763][ T3574] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 79.947787][ T3574] ? __mutex_unlock_slowpath+0x218/0x750 [ 79.947816][ T3574] ? mutex_unlock+0x10/0x10 [ 79.947832][ T3574] ? skb_pull_data+0x10e/0x220 [ 79.947859][ T3574] hci_le_enh_conn_complete_evt+0x181/0x410 [ 79.947889][ T3574] hci_event_packet+0xa40/0x1510 [ 79.947920][ T3574] ? hci_remote_host_features_evt+0x210/0x210 [ 79.947954][ T3574] ? bis_list+0x290/0x290 [ 79.947975][ T3574] ? do_raw_spin_unlock+0x137/0x8a0 [ 79.947999][ T3574] ? kcov_remote_start+0x4b5/0x7d0 [ 79.948022][ T3574] ? get_cpu_entry_area+0x10/0x20 [ 79.948046][ T3574] ? hci_send_to_monitor+0x99/0x4d0 [ 79.948068][ T3574] hci_rx_work+0x3cd/0xce0 [ 79.948086][ T3574] ? do_raw_spin_unlock+0x137/0x8a0 [ 79.948113][ T3574] ? process_one_work+0x7a9/0x11d0 [ 79.948134][ T3574] process_one_work+0x8a9/0x11d0 [ 79.948174][ T3574] ? worker_detach_from_pool+0x260/0x260 [ 79.948202][ T3574] ? _raw_spin_lock_irqsave+0x120/0x120 [ 79.948225][ T3574] ? kthread_data+0x4e/0xc0 [ 79.948258][ T3574] ? wq_worker_running+0x97/0x190 [ 79.948290][ T3574] worker_thread+0xa47/0x1200 [ 79.948318][ T3574] ? __sched_text_start+0x8/0x8 [ 79.948366][ T3574] kthread+0x28d/0x320 [ 79.948383][ T3574] ? worker_clr_flags+0x190/0x190 [ 79.948403][ T3574] ? kthread_blkcg+0xd0/0xd0 [ 79.948423][ T3574] ret_from_fork+0x1f/0x30 [ 79.948465][ T3574] [ 79.952317][ T3574] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 79.952350][ T3574] Bluetooth: hci4: failed to register connection device [ 80.413224][ T22] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 80.449811][ T4031] device sit0 entered promiscuous mode [ 80.467238][ T4031] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 80.467263][ T4031] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.504780][ T4032] loop3: detected capacity change from 0 to 256 [ 80.571452][ T22] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 80.571485][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.571505][ T22] usb 3-1: Product: syz [ 80.571527][ T22] usb 3-1: Manufacturer: syz [ 80.571542][ T22] usb 3-1: SerialNumber: syz [ 80.614262][ T22] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 80.776421][ T26] audit: type=1326 audit(1717837227.179:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4025 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32eba7cf69 code=0x0 [ 80.816339][ T3688] usb 3-1: USB disconnect, device number 3 [ 81.291416][ T3574] Bluetooth: hci3: command tx timeout [ 81.963336][ T4051] loop4: detected capacity change from 0 to 512 [ 81.994784][ T4027] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 82.055562][ T3574] Bluetooth: hci4: command tx timeout [ 82.314381][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 82.552646][ T4059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.654951][ T4051] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.711283][ T4051] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 83.781195][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.817012][ T4051] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 83.826765][ T4051] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 83.885063][ T4073] loop3: detected capacity change from 0 to 64 [ 83.901251][ T4051] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 13 (err -117) [ 83.918797][ T4051] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.027085][ T3583] Bluetooth: unknown link type 32 [ 84.035417][ T3576] EXT4-fs (loop4): unmounting filesystem. [ 84.045673][ T4070] device hsr_slave_0 left promiscuous mode [ 84.090564][ T4056] loop1: detected capacity change from 0 to 1024 [ 84.102921][ T4056] hfsplus: failed to load root directory [ 84.391298][ T3561] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.431942][ T4070] device hsr_slave_1 left promiscuous mode [ 85.169299][ T4064] loop0: detected capacity change from 0 to 32768 [ 85.393025][ T4098] loop2: detected capacity change from 0 to 2048 [ 85.481494][ T4064] XFS (loop0): Mounting V5 Filesystem [ 85.528172][ T4098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.560379][ T4094] loop1: detected capacity change from 0 to 2048 [ 85.570729][ T4094] UDF-fs: bad mount option "uid=00000000000000060929" or missing value [ 85.828189][ T4064] XFS (loop0): log mount failed [ 85.873047][ T4094] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.061116][ T3583] Bluetooth: hci0: command tx timeout [ 86.261353][ T2904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.951322][ T2904] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 87.171425][ T2904] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 87.196263][ T2904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.213729][ T4116] loop3: detected capacity change from 0 to 64 [ 87.251180][ T2904] usb 3-1: Product: syz [ 87.255397][ T2904] usb 3-1: Manufacturer: syz [ 87.260015][ T2904] usb 3-1: SerialNumber: syz [ 87.362270][ T2904] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 87.376836][ T4121] 9pnet_fd: Insufficient options for proto=fd [ 88.825466][ T4130] Zero length message leads to an empty skb [ 89.585717][ T3614] usb 3-1: USB disconnect, device number 4 [ 89.619452][ T4137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.682180][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 89.692326][ T26] audit: type=1326 audit(1717837236.099:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4127 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003327cf69 code=0x0 [ 89.804279][ T4139] loop4: detected capacity change from 0 to 1024 [ 90.345845][ T4155] loop2: detected capacity change from 0 to 64 [ 92.053666][ T4163] device veth0_vlan left promiscuous mode [ 92.061808][ T4163] device veth0_vlan entered promiscuous mode [ 92.553959][ T4177] loop2: detected capacity change from 0 to 4096 [ 92.576491][ T4175] loop1: detected capacity change from 0 to 2048 [ 92.633713][ T4177] NILFS (loop2): invalid segment: Checksum error in segment payload [ 92.643161][ T4177] NILFS (loop2): trying rollback from an earlier position [ 92.658619][ T4177] NILFS (loop2): recovery complete [ 92.664985][ T4186] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.670835][ T4175] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.006314][ T4189] 9pnet_fd: Insufficient options for proto=fd [ 93.224435][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.232644][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.266182][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.366624][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.373762][ T4198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.381169][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.388246][ T4198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.440127][ T4198] device bridge0 entered promiscuous mode [ 93.723066][ T4210] loop3: detected capacity change from 0 to 1024 [ 94.322789][ T22] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 94.622921][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.661331][ T22] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 94.679464][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.724532][ T22] usb 2-1: Product: syz [ 94.749062][ T22] usb 2-1: Manufacturer: syz [ 94.782760][ T22] usb 2-1: SerialNumber: syz [ 94.853136][ T22] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 94.881295][ T11] hfsplus: b-tree write err: -5, ino 4 [ 95.110531][ T4226] syz-executor.2[4226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.110638][ T4226] syz-executor.2[4226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.210770][ T4222] loop3: detected capacity change from 0 to 4096 [ 95.375449][ T4222] NILFS (loop3): invalid segment: Checksum error in segment payload [ 95.392522][ T4222] NILFS (loop3): trying rollback from an earlier position [ 95.536580][ T4222] NILFS (loop3): recovery complete [ 95.566308][ T4232] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.805211][ T4238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.101153][ T4237] loop3: detected capacity change from 0 to 32768 [ 96.182161][ T3617] usb 2-1: USB disconnect, device number 2 [ 96.255961][ T3561] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.256402][ T3568] EXT4-fs (loop1): unmounting filesystem. [ 96.281218][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.153823][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.161082][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.211306][ T4244] device bridge0 entered promiscuous mode [ 97.321584][ T4254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.378972][ T4255] loop4: detected capacity change from 0 to 1024 [ 97.444735][ T3755] hfsplus: b-tree write err: -5, ino 4 [ 97.656273][ T3990] hfsplus: b-tree write err: -5, ino 4 [ 97.892283][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.916085][ T4266] loop2: detected capacity change from 0 to 4096 [ 97.988926][ T4266] NILFS (loop2): invalid segment: Checksum error in segment payload [ 98.009132][ T4266] NILFS (loop2): trying rollback from an earlier position [ 98.104879][ T4266] NILFS (loop2): recovery complete [ 98.189679][ T4281] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.621783][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.647163][ T4288] device bridge0 left promiscuous mode [ 98.733938][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.741120][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.794282][ T4285] loop3: detected capacity change from 0 to 1024 [ 98.831454][ T4285] hfsplus: request for non-existent node 3 in B*Tree [ 98.838479][ T4285] hfsplus: request for non-existent node 3 in B*Tree [ 98.880054][ T4289] device bridge0 entered promiscuous mode [ 98.894349][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.288433][ T4293] loop1: detected capacity change from 0 to 32768 [ 99.472530][ T4300] loop0: detected capacity change from 0 to 1024 [ 99.902623][ T4317] process 'syz-executor.2' launched './file0' with NULL argv: empty string added [ 100.586506][ T11] hfsplus: b-tree write err: -5, ino 4 [ 100.644555][ T4309] mkiss: ax0: crc mode is auto. [ 100.843774][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.851202][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.935393][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.962080][ T4330] loop0: detected capacity change from 0 to 2048 [ 100.989706][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.996954][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.004416][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.011928][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.070925][ T4330] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.098485][ T4334] device bridge0 entered promiscuous mode [ 101.101503][ T4328] loop1: detected capacity change from 0 to 4096 [ 101.207691][ T4328] NILFS (loop1): invalid segment: Checksum error in segment payload [ 101.229616][ T4328] NILFS (loop1): trying rollback from an earlier position [ 101.349242][ T4328] NILFS (loop1): recovery complete [ 101.390521][ T4338] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.651080][ T2904] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.681064][ T4312] loop3: detected capacity change from 0 to 8192 [ 101.981499][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.021189][ T2904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.039477][ T2904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.062455][ T2904] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 102.102574][ T2904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.137503][ T2904] usb 5-1: config 0 descriptor?? [ 102.625036][ T4346] loop1: detected capacity change from 0 to 64 [ 102.646898][ T2904] wacom 0003:056A:00F8.0002: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.4-1/input0 [ 102.913412][ T2904] usb 5-1: USB disconnect, device number 3 [ 103.311294][ T3574] Bluetooth: unknown link type 32 [ 103.456024][ T4350] loop1: detected capacity change from 0 to 1024 [ 103.744316][ T4352] loop4: detected capacity change from 0 to 32768 [ 103.771413][ T4350] hfsplus: failed to load root directory [ 104.449514][ T4359] loop3: detected capacity change from 0 to 256 [ 105.194842][ T4359] FAT-fs (loop3): Directory bread(block 1285) failed [ 105.206729][ T4358] FAT-fs (loop3): Directory bread(block 1285) failed [ 105.215165][ T4358] FAT-fs (loop3): Directory bread(block 1285) failed [ 105.222316][ T4358] FAT-fs (loop3): Directory bread(block 1285) failed [ 105.286496][ T4363] loop1: detected capacity change from 0 to 1024 [ 105.431708][ T3574] Bluetooth: hci0: command tx timeout [ 105.522152][ T4370] loop3: detected capacity change from 0 to 512 [ 105.545822][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.599755][ T4370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.634038][ T4370] ext4 filesystem being mounted at /root/syzkaller-testdir3973962059/syzkaller.DMPqU8/41/bus supports timestamps until 2038 (0x7fffffff) [ 105.669035][ T3648] hfsplus: b-tree write err: -5, ino 4 [ 105.778735][ T4378] loop4: detected capacity change from 0 to 64 [ 105.970388][ T4376] loop2: detected capacity change from 0 to 4096 [ 106.772917][ T4376] NILFS (loop2): invalid segment: Checksum error in segment payload [ 106.827814][ T4376] NILFS (loop2): trying rollback from an earlier position [ 106.907857][ T4376] NILFS (loop2): recovery complete [ 106.922445][ T3571] EXT4-fs (loop3): unmounting filesystem. [ 106.932443][ T4390] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.403764][ T4399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.762593][ T4410] loop3: detected capacity change from 0 to 256 [ 109.486809][ T4410] FAT-fs (loop3): Directory bread(block 1285) failed [ 109.518323][ T4409] FAT-fs (loop3): Directory bread(block 1285) failed [ 109.525090][ T4409] FAT-fs (loop3): Directory bread(block 1285) failed [ 109.531876][ T4409] FAT-fs (loop3): Directory bread(block 1285) failed [ 109.599360][ T4406] loop1: detected capacity change from 0 to 4096 [ 109.719622][ T4413] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.806688][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.084428][ T4400] loop2: detected capacity change from 0 to 32768 [ 110.102047][ T4418] loop1: detected capacity change from 0 to 64 [ 110.124854][ T4400] ======================================================= [ 110.124854][ T4400] WARNING: The mand mount option has been deprecated and [ 110.124854][ T4400] and is ignored by this kernel. Remove the mand [ 110.124854][ T4400] option from the mount to silence this warning. [ 110.124854][ T4400] ======================================================= [ 110.276917][ T4400] XFS: attr2 mount option is deprecated. [ 110.288630][ T4400] XFS: ikeep mount option is deprecated. [ 110.345748][ T4400] XFS: noikeep mount option is deprecated. [ 110.534259][ T4422] loop3: detected capacity change from 0 to 4096 [ 110.618141][ T4422] NILFS (loop3): invalid segment: Checksum error in segment payload [ 110.664310][ T4422] NILFS (loop3): trying rollback from an earlier position [ 110.751873][ T4422] NILFS (loop3): recovery complete [ 110.790946][ T4440] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.258602][ T4453] loop1: detected capacity change from 0 to 64 [ 111.333520][ T4455] loop3: detected capacity change from 0 to 256 [ 111.343946][ T4455] FAT-fs (loop3): Directory bread(block 1285) failed [ 111.356055][ T4455] FAT-fs (loop3): Directory bread(block 1285) failed [ 111.363127][ T4455] FAT-fs (loop3): Directory bread(block 1285) failed [ 111.369948][ T4455] FAT-fs (loop3): Directory bread(block 1285) failed [ 112.225582][ T4463] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.278430][ T4468] vxcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 112.976598][ T3574] Bluetooth: unknown link type 32 [ 112.994809][ T4474] loop4: detected capacity change from 0 to 1024 [ 113.008787][ T4474] hfsplus: failed to load root directory [ 113.046493][ T4475] loop1: detected capacity change from 0 to 4096 [ 113.084856][ T3561] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.110033][ T4475] NILFS (loop1): invalid segment: Checksum error in segment payload [ 113.150500][ T4475] NILFS (loop1): trying rollback from an earlier position [ 113.405644][ T4475] NILFS (loop1): recovery complete [ 113.429476][ T4481] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.522625][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802890f800: rx timeout, send abort [ 113.532743][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802890f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.633254][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.974364][ T4499] loop0: detected capacity change from 0 to 512 [ 114.093386][ T4499] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.167143][ T4505] loop1: detected capacity change from 0 to 256 [ 114.247298][ T4499] ext4 filesystem being mounted at /root/syzkaller-testdir2971091514/syzkaller.6PdyJw/17/bus supports timestamps until 2038 (0x7fffffff) [ 114.269061][ T4505] FAT-fs (loop1): Directory bread(block 1285) failed [ 114.282423][ T4505] FAT-fs (loop1): Directory bread(block 1285) failed [ 114.289316][ T4505] FAT-fs (loop1): Directory bread(block 1285) failed [ 114.296214][ T4505] FAT-fs (loop1): Directory bread(block 1285) failed [ 115.041233][ T3574] Bluetooth: hci3: command tx timeout [ 115.999416][ T4513] loop1: detected capacity change from 0 to 4096 [ 116.074627][ T3725] EXT4-fs (loop0): unmounting filesystem. [ 116.141774][ T4513] NILFS (loop1): invalid segment: Checksum error in segment payload [ 116.195530][ T4513] NILFS (loop1): trying rollback from an earlier position [ 116.306339][ T4513] NILFS (loop1): recovery complete [ 116.332225][ T4532] device hsr0 entered promiscuous mode [ 116.352315][ T4534] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.386282][ T4532] device macsec1 entered promiscuous mode [ 116.604612][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.867171][ T4543] loop1: detected capacity change from 0 to 256 [ 116.971153][ T4543] FAT-fs (loop1): Directory bread(block 64) failed [ 116.972770][ T4538] loop0: detected capacity change from 0 to 4096 [ 116.987294][ T4547] loop2: detected capacity change from 0 to 8 [ 117.043175][ T4538] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 117.086322][ T4543] FAT-fs (loop1): Directory bread(block 65) failed [ 117.138635][ T4543] FAT-fs (loop1): Directory bread(block 66) failed [ 118.471228][ T4543] FAT-fs (loop1): Directory bread(block 67) failed [ 118.641319][ T4543] FAT-fs (loop1): Directory bread(block 68) failed [ 118.709048][ T4543] FAT-fs (loop1): Directory bread(block 69) failed [ 118.768149][ T4543] FAT-fs (loop1): Directory bread(block 70) failed [ 118.827060][ T4543] FAT-fs (loop1): Directory bread(block 71) failed [ 118.872307][ T4543] FAT-fs (loop1): Directory bread(block 72) failed [ 118.916967][ T4543] FAT-fs (loop1): Directory bread(block 73) failed [ 118.984040][ T4563] loop2: detected capacity change from 0 to 256 [ 119.575962][ T4563] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 120.769584][ T4580] loop2: detected capacity change from 0 to 512 [ 120.782307][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.914646][ T4580] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #17: comm syz-executor.2: iget: bogus i_mode (0) [ 120.930056][ T4568] loop0: detected capacity change from 0 to 8192 [ 120.945761][ T4568] REISERFS warning (device loop0): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 120.945761][ T4568] [ 120.989396][ T4580] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 17 (err -117) [ 121.019579][ T3561] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.061938][ T4580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 121.125869][ T3583] Bluetooth: unknown link type 32 [ 121.138224][ T4565] loop0: detected capacity change from 0 to 1024 [ 121.145179][ T4565] hfsplus: unable to parse mount options [ 121.208626][ T3561] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.432031][ T4597] loop3: detected capacity change from 0 to 8 [ 121.700093][ T4596] loop1: detected capacity change from 0 to 4096 [ 121.740254][ T4596] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 122.005317][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 122.638410][ T4607] loop3: detected capacity change from 0 to 1024 [ 123.199553][ T4607] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.208876][ T3583] Bluetooth: hci4: command tx timeout [ 123.247737][ T4607] ext4 filesystem being mounted at /root/syzkaller-testdir3973962059/syzkaller.DMPqU8/60/file1 supports timestamps until 2038 (0x7fffffff) [ 123.428470][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.438003][ T26] audit: type=1804 audit(1717837269.829:10): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3973962059/syzkaller.DMPqU8/60/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 123.445795][ T4621] loop1: detected capacity change from 0 to 64 [ 123.502503][ T4623] loop4: detected capacity change from 0 to 24 [ 123.517410][ T4621] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 123.523850][ T4623] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 123.524526][ T4621] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 123.594190][ T4623] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 123.636569][ T3571] EXT4-fs (loop3): unmounting filesystem. [ 123.698427][ T4628] device vlan2 entered promiscuous mode [ 123.723777][ T4628] device xfrm0 entered promiscuous mode [ 123.911051][ T3688] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.945277][ T4628] team0: Port device vlan2 added [ 124.347373][ T4638] loop4: detected capacity change from 0 to 512 [ 124.496845][ T3688] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.221211][ T3688] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.231640][ T4638] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz-executor.4: iget: bogus i_mode (0) [ 125.244820][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.254257][ T3688] usb 2-1: SerialNumber: syz [ 125.258924][ T4638] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 17 (err -117) [ 125.280862][ T4644] loop2: detected capacity change from 0 to 1024 [ 125.291105][ T4638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.328148][ T4644] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.354965][ T4644] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.385461][ T4644] EXT4-fs error (device loop2): __ext4_get_inode_loc:4495: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 125.411202][ T4644] EXT4-fs (loop2): Remounting filesystem read-only [ 125.418227][ T4644] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 125.430718][ T4644] EXT4-fs error (device loop2): ext4_quota_write:7172: inode #3: comm syz-executor.2: mark_inode_dirty error [ 125.458547][ T4644] Quota error (device loop2): write_blk: dquota write failed [ 125.463228][ T4634] loop3: detected capacity change from 0 to 8192 [ 125.466507][ T4644] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 125.483320][ T4644] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz-executor.2: Failed to acquire dquot type 0 [ 125.497369][ T4644] EXT4-fs (loop2): 1 truncate cleaned up [ 125.507552][ T4644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 125.525166][ T4621] random: crng reseeded on system resumption [ 125.551356][ T4634] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 125.551356][ T4634] [ 125.573109][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 125.946604][ T3576] EXT4-fs (loop4): unmounting filesystem. [ 126.081236][ T3583] Bluetooth: unknown link type 32 [ 126.093695][ T4630] loop3: detected capacity change from 0 to 1024 [ 126.100416][ T4630] hfsplus: unable to parse mount options [ 126.185794][ T4627] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.345414][ T4625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.389195][ T4625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.632393][ T4658] loop4: detected capacity change from 0 to 4096 [ 126.672898][ T4658] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 127.032456][ T4664] bridge0: port 3(team0) entered blocking state [ 127.039293][ T4664] bridge0: port 3(team0) entered disabled state [ 127.049323][ T4664] device team0 entered promiscuous mode [ 127.055000][ T4664] device team_slave_0 entered promiscuous mode [ 127.061815][ T4664] device team_slave_1 entered promiscuous mode [ 127.070489][ T4664] bridge0: port 3(team0) entered blocking state [ 127.078396][ T4664] bridge0: port 3(team0) entered forwarding state [ 129.735001][ T3583] Bluetooth: hci1: command tx timeout [ 129.997058][ T4670] loop0: detected capacity change from 0 to 256 [ 130.010351][ T4670] exfat: Deprecated parameter 'utf8' [ 130.024650][ T4670] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 130.414868][ T3688] cdc_ether: probe of 2-1:1.0 failed with error -110 [ 130.468782][ T4677] loop4: detected capacity change from 0 to 4096 [ 130.881808][ T3688] usb 2-1: USB disconnect, device number 3 [ 130.984063][ T4677] NILFS (loop4): invalid segment: Checksum error in segment payload [ 131.000037][ T4677] NILFS (loop4): trying rollback from an earlier position [ 131.061863][ T4677] NILFS (loop4): recovery complete [ 131.095717][ T4679] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.161537][ T3669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.504939][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.043400][ T4684] loop1: detected capacity change from 0 to 4096 [ 132.075110][ T3669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.091780][ T4684] NILFS (loop1): invalid segment: Checksum error in segment payload [ 132.164932][ T4684] NILFS (loop1): trying rollback from an earlier position [ 132.218753][ T3669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.254077][ T4684] NILFS (loop1): recovery complete [ 132.282377][ T4703] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.322320][ T3669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.704274][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.710606][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.920252][ T4714] loop4: detected capacity change from 0 to 256 [ 133.385164][ T3574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.404198][ T3574] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.423208][ T3574] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.486254][ T3574] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.504760][ T3574] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.516611][ T3574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.811055][ T26] audit: type=1326 audit(1717837279.949:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd7067cf69 code=0x0 [ 133.918263][ T4732] loop3: detected capacity change from 0 to 64 [ 133.955614][ T4730] device veth0_macvtap left promiscuous mode [ 134.031310][ T4732] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 134.037901][ T4732] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 134.434321][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.515767][ T3289] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.891473][ T3289] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.156632][ T3289] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.251720][ T3289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 135.308229][ T3289] usb 4-1: SerialNumber: syz [ 135.581153][ T3583] Bluetooth: hci4: command tx timeout [ 135.618191][ T4732] random: crng reseeded on system resumption [ 135.618308][ T4766] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 135.810528][ T4721] chnl_net:caif_netlink_parms(): no params data found [ 136.969769][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.988454][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.998604][ T4721] device bridge_slave_0 entered promiscuous mode [ 137.008075][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.017435][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.026823][ T4721] device bridge_slave_1 entered promiscuous mode [ 137.088059][ T3669] device hsr_slave_0 left promiscuous mode [ 137.117388][ T3669] device hsr_slave_1 left promiscuous mode [ 137.149480][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.181416][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.223911][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.242355][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.263136][ T3669] device team0 left promiscuous mode [ 137.268466][ T3669] device team_slave_0 left promiscuous mode [ 137.281223][ T3669] device team_slave_1 left promiscuous mode [ 137.287421][ T3669] bridge0: port 3(team0) entered disabled state [ 137.334379][ T3669] device bridge_slave_1 left promiscuous mode [ 137.340636][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.374538][ T4752] loop1: detected capacity change from 0 to 32768 [ 137.430713][ T3669] device bridge_slave_0 left promiscuous mode [ 137.441851][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.481297][ T3289] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 137.553853][ T3289] usb 4-1: USB disconnect, device number 3 [ 137.610376][ T3669] device hsr0 left promiscuous mode [ 137.622281][ T4752] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 137.634713][ T3669] device veth1_macvtap left promiscuous mode [ 137.651062][ T3669] device veth0_macvtap left promiscuous mode [ 137.657206][ T3669] device veth1_vlan left promiscuous mode [ 137.661247][ T3583] Bluetooth: hci4: command tx timeout [ 137.664242][ T3669] device veth0_vlan left promiscuous mode [ 137.721635][ T4752] XFS (loop1): log mount failed [ 139.248059][ T3669] team0 (unregistering): Port device team_slave_1 removed [ 139.289302][ T3669] team0 (unregistering): Port device team_slave_0 removed [ 139.355314][ T3669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.457667][ T3669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.742177][ T3583] Bluetooth: hci4: command tx timeout [ 139.942664][ T4818] loop2: detected capacity change from 0 to 8192 [ 139.971465][ T4818] REISERFS warning (device loop2): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 139.971465][ T4818] [ 140.113187][ T3669] bond0 (unregistering): Released all slaves [ 140.168888][ T3583] Bluetooth: unknown link type 32 [ 140.189344][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.205409][ T4818] loop2: detected capacity change from 0 to 1024 [ 140.212387][ T4818] hfsplus: unable to parse mount options [ 140.243439][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.260231][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.359058][ T4721] team0: Port device team_slave_0 added [ 140.429693][ T4721] team0: Port device team_slave_1 added [ 140.562863][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.587925][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.589807][ T4834] loop3: detected capacity change from 0 to 1024 [ 140.632273][ T4832] loop2: detected capacity change from 0 to 2048 [ 140.770728][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.788589][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.796314][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.797548][ T4832] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.823503][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.102455][ T4721] device hsr_slave_0 entered promiscuous mode [ 141.132947][ T4721] device hsr_slave_1 entered promiscuous mode [ 141.159949][ T4721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.204260][ T4721] Cannot create hsr debugfs directory [ 141.381023][ T3692] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.756379][ T3692] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.821123][ T3583] Bluetooth: hci4: command tx timeout [ 141.824500][ T4864] loop4: detected capacity change from 0 to 64 [ 141.885506][ T4004] hfsplus: b-tree write err: -5, ino 4 [ 141.951404][ T3692] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 141.976074][ T3692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.995561][ T3692] usb 3-1: Product: syz [ 141.999941][ T3692] usb 3-1: Manufacturer: syz [ 142.007326][ T3692] usb 3-1: SerialNumber: syz [ 142.063436][ T3692] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 142.189151][ T4868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.221914][ T3583] Bluetooth: hci2: command tx timeout [ 142.264679][ T151] usb 3-1: USB disconnect, device number 5 [ 142.623924][ T4721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.050890][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 143.075898][ T4721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.380905][ T4721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.483571][ T4721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.566306][ T4885] loop2: detected capacity change from 0 to 64 [ 143.798525][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.863369][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.863824][ T4892] Bluetooth: MGMT ver 1.22 [ 143.877121][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.921566][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.955767][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.971840][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.981229][ T3687] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.020765][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.028000][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.089115][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.107396][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.132962][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.157421][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.164662][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.202358][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.227183][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.270420][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.284573][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.310135][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.320809][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.329705][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.353342][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.371452][ T3687] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 144.385756][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.418603][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.452110][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.476463][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.491367][ T3687] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.500453][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.508083][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.561214][ T3687] usb 3-1: SerialNumber: syz [ 144.618032][ T4902] loop3: detected capacity change from 0 to 256 [ 144.809118][ T26] audit: type=1326 audit(1717837291.209:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32eba7cf69 code=0x0 [ 144.844585][ T4885] random: crng reseeded on system resumption [ 144.980596][ T4918] loop1: detected capacity change from 0 to 64 [ 145.050686][ T4913] loop4: detected capacity change from 0 to 4096 [ 145.146941][ T4913] NILFS (loop4): invalid segment: Checksum error in segment payload [ 145.193460][ T4913] NILFS (loop4): trying rollback from an earlier position [ 145.277313][ T4913] NILFS (loop4): recovery complete [ 145.292360][ T4922] loop1: detected capacity change from 0 to 512 [ 145.325559][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.344918][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.365347][ T4923] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.397646][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.442248][ T4922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 145.452971][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.467078][ T4922] ext4 filesystem being mounted at /root/syzkaller-testdir3354360775/syzkaller.sCSjyH/70/file0 supports timestamps until 2038 (0x7fffffff) [ 145.548991][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.569838][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.578451][ T4922] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 145.669068][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.694152][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.730281][ T4721] device veth0_vlan entered promiscuous mode [ 145.739813][ T3568] EXT4-fs (loop1): unmounting filesystem. [ 145.755500][ T4933] loop4: detected capacity change from 0 to 2048 [ 145.763254][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.775655][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.836795][ T4721] device veth1_vlan entered promiscuous mode [ 145.858609][ T4933] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.084040][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.139259][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.198720][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.848227][ T3687] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 146.908793][ T3687] usb 3-1: USB disconnect, device number 6 [ 146.967604][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.013771][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.058397][ T4721] device veth0_macvtap entered promiscuous mode [ 147.094811][ T4721] device veth1_macvtap entered promiscuous mode [ 147.146032][ T3615] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.147951][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.184517][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.220013][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.248823][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.273941][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.285629][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.305607][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.327243][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.347125][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.369211][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.392242][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.406632][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.427156][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.479000][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.491944][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.502107][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.512943][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.523347][ T3615] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 147.544273][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.560771][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.574597][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.612832][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.626141][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.656927][ T4721] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.675075][ T4721] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.716326][ T3615] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 147.726707][ T4721] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.750382][ T3615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.755366][ T4975] loop3: detected capacity change from 0 to 64 [ 147.770216][ T4721] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.787610][ T4955] loop1: detected capacity change from 0 to 32768 [ 147.807644][ T3615] usb 5-1: Product: syz [ 147.812732][ T3615] usb 5-1: Manufacturer: syz [ 147.823804][ T4977] loop2: detected capacity change from 0 to 256 [ 147.836848][ T3615] usb 5-1: SerialNumber: syz [ 147.837665][ T4955] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4955) [ 147.904256][ T3615] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 147.958528][ T4955] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.964106][ T26] audit: type=1326 audit(1717837294.369:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f646c27cf69 code=0x0 [ 148.018897][ T4955] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 148.049683][ T4955] BTRFS info (device loop1): using free space tree [ 148.105554][ T14] usb 5-1: USB disconnect, device number 4 [ 148.250809][ T4984] loop3: detected capacity change from 0 to 4096 [ 148.258113][ T4004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.290931][ T4004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.308143][ T4984] NILFS (loop3): invalid segment: Checksum error in segment payload [ 148.341311][ T4984] NILFS (loop3): trying rollback from an earlier position [ 148.345618][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.378043][ T4955] BTRFS info (device loop1): enabling ssd optimizations [ 148.394016][ T3755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.409871][ T3755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.415849][ T4984] NILFS (loop3): recovery complete [ 148.422700][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.501913][ T26] audit: type=1804 audit(1717837294.899:14): pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3354360775/syzkaller.sCSjyH/72/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 148.565745][ T5006] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.588568][ T26] audit: type=1804 audit(1717837294.969:15): pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3354360775/syzkaller.sCSjyH/72/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 148.727477][ T3576] EXT4-fs (loop4): unmounting filesystem. [ 148.746710][ T5008] loop0: detected capacity change from 0 to 4096 [ 148.799688][ T5013] devpts: called with bogus options [ 148.823444][ T26] audit: type=1804 audit(1717837295.229:16): pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3354360775/syzkaller.sCSjyH/72/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 148.876060][ T5008] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 149.976115][ T3568] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.994094][ T5025] serio: Serial port pts0 [ 150.738458][ T5058] loop4: detected capacity change from 0 to 2048 [ 150.776700][ T5059] loop2: detected capacity change from 0 to 256 [ 150.851906][ T5058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 150.938877][ T5068] loop0: detected capacity change from 0 to 4096 [ 150.991025][ T26] audit: type=1326 audit(1717837297.369:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5055 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f646c27cf69 code=0x0 [ 151.133650][ T5068] NILFS (loop0): invalid segment: Checksum error in segment payload [ 151.215250][ T5068] NILFS (loop0): trying rollback from an earlier position [ 151.267261][ T5080] loop3: detected capacity change from 0 to 128 [ 151.300134][ T5068] NILFS (loop0): recovery complete [ 151.328698][ T5083] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.351501][ T3615] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.721261][ T3615] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 151.770167][ T5096] loop1: detected capacity change from 0 to 64 [ 152.511483][ T5102] loop0: detected capacity change from 0 to 512 [ 152.551881][ T5102] EXT4-fs: Invalid want_extra_isize 5 [ 152.631279][ T3615] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 152.642684][ T3615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.656364][ T3615] usb 5-1: Product: syz [ 152.664003][ T3615] usb 5-1: Manufacturer: syz [ 152.691868][ T3615] usb 5-1: SerialNumber: syz [ 152.753163][ T3615] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 152.793411][ T5104] loop3: detected capacity change from 0 to 4096 [ 152.846113][ T5110] loop1: detected capacity change from 0 to 1024 [ 152.904208][ T5104] NILFS (loop3): invalid segment: Checksum error in segment payload [ 152.904236][ T5104] NILFS (loop3): trying rollback from an earlier position [ 152.956218][ T151] usb 5-1: USB disconnect, device number 5 [ 152.962920][ T5104] NILFS (loop3): recovery complete [ 152.972157][ T5112] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.019797][ T4004] hfsplus: b-tree write err: -5, ino 4 [ 153.381469][ T5123] loop1: detected capacity change from 0 to 512 [ 153.573278][ T3576] EXT4-fs (loop4): unmounting filesystem. [ 153.573910][ T5122] loop0: detected capacity change from 0 to 4096 [ 153.629414][ T5123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.661267][ T5123] ext4 filesystem being mounted at /root/syzkaller-testdir3354360775/syzkaller.sCSjyH/79/bus supports timestamps until 2038 (0x7fffffff) [ 153.702304][ T5122] NILFS (loop0): invalid segment: Checksum error in segment payload [ 153.710834][ T5122] NILFS (loop0): trying rollback from an earlier position [ 153.881999][ T5122] NILFS (loop0): recovery complete [ 153.906494][ T5136] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.962737][ T5135] loop4: detected capacity change from 0 to 256 [ 154.154622][ T26] audit: type=1326 audit(1717837300.539:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd7067cf69 code=0x0 [ 154.210446][ T3568] EXT4-fs (loop1): unmounting filesystem. [ 155.269681][ T5156] loop2: detected capacity change from 0 to 1024 [ 155.528757][ T5159] loop0: detected capacity change from 0 to 4096 [ 155.637860][ T5159] NILFS (loop0): invalid segment: Checksum error in segment payload [ 155.652567][ T4569] hfsplus: b-tree write err: -5, ino 4 [ 155.683325][ T5159] NILFS (loop0): trying rollback from an earlier position [ 155.750365][ T5159] NILFS (loop0): recovery complete [ 155.780586][ T5169] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.853451][ T5168] loop2: detected capacity change from 0 to 2048 [ 155.930433][ T5168] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.957520][ T5120] loop3: detected capacity change from 0 to 40427 [ 155.995189][ T5120] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 156.019876][ T5120] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 156.208174][ T5176] loop0: detected capacity change from 0 to 4096 [ 156.248738][ T5120] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 156.304213][ T5176] NILFS (loop0): invalid segment: Checksum error in segment payload [ 156.788371][ T5176] NILFS (loop0): trying rollback from an earlier position [ 157.013702][ T5176] NILFS (loop0): recovery complete [ 157.074206][ T5182] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.111059][ T3615] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.471353][ T3615] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 157.671510][ T3615] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 157.690664][ T3615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.729640][ T3615] usb 3-1: Product: syz [ 157.761326][ T3615] usb 3-1: Manufacturer: syz [ 157.765975][ T3615] usb 3-1: SerialNumber: syz [ 157.863259][ T3615] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 157.939443][ T5207] loop4: detected capacity change from 0 to 1024 [ 157.945122][ T5204] loop0: detected capacity change from 0 to 256 [ 157.950991][ T5207] EXT4-fs: Ignoring removed nobh option [ 158.368059][ T5207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.789956][ T26] audit: type=1326 audit(1717837305.189:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e35a7cf69 code=0x0 [ 159.097079][ T3615] usb 3-1: USB disconnect, device number 7 [ 159.214651][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 159.460664][ T3576] EXT4-fs (loop4): unmounting filesystem. [ 159.538122][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.663353][ T5227] loop1: detected capacity change from 0 to 1024 [ 160.147781][ T3583] Bluetooth: unknown link type 32 [ 160.207571][ T46] hfsplus: b-tree write err: -5, ino 4 [ 160.239816][ T5229] loop4: detected capacity change from 0 to 4096 [ 160.377114][ T5229] NILFS (loop4): invalid segment: Checksum error in segment payload [ 160.408939][ T5229] NILFS (loop4): trying rollback from an earlier position [ 160.425874][ T5239] loop3: detected capacity change from 0 to 1024 [ 160.533391][ T5229] NILFS (loop4): recovery complete [ 160.598487][ T5249] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.635979][ T5239] hfsplus: failed to load root directory [ 161.763051][ T5261] loop4: detected capacity change from 0 to 2048 [ 161.940247][ T5261] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 162.117001][ T5261] fuse: Bad value for 'fd' [ 162.251195][ T3583] Bluetooth: hci1: command tx timeout [ 162.684599][ T5269] device veth0_vlan left promiscuous mode [ 267.720910][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 267.728020][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5259/1:b..l [ 267.736368][ C1] (detected by 1, t=10502 jiffies, g=17309, q=115 ncpus=2) [ 267.743655][ C1] task:syz-executor.1 state:R running task stack:24480 pid:5259 ppid:3568 flags:0x00004002 [ 267.755426][ C1] Call Trace: [ 267.758691][ C1] [ 267.761641][ C1] __schedule+0x142d/0x4550 [ 267.766143][ C1] ? mark_lock+0x9a/0x340 [ 267.770462][ C1] ? __sched_text_start+0x8/0x8 [ 267.775293][ C1] ? print_irqtrace_events+0x210/0x210 [ 267.780733][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 267.786012][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 267.791117][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 267.796819][ C1] ? __lock_acquire+0x125b/0x1f80 [ 267.801833][ C1] irqentry_exit+0x53/0x80 [ 267.806229][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 267.812187][ C1] RIP: 0010:lock_is_held_type+0x137/0x180 [ 267.817884][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 267.837495][ C1] RSP: 0018:ffffc9000594f348 EFLAGS: 00000206 [ 267.843553][ C1] RAX: f5245fd3a0512c00 RBX: 0000000000000002 RCX: ffff88807cab1dc0 [ 267.851505][ C1] RDX: ffff88807cab1dc0 RSI: ffffffff8aec1340 RDI: ffffffff8b3d45e0 [ 267.859579][ C1] RBP: 0000000000000000 R08: ffffffff8a8728e3 R09: fffffbfff2093845 [ 267.867565][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246 [ 267.875529][ C1] R13: ffff88807cab1dc0 R14: 00000000ffffffff R15: ffff888022911028 [ 267.883489][ C1] ? xas_start+0x203/0x7b0 [ 267.887921][ C1] xas_start+0x21c/0x7b0 [ 267.892162][ C1] ? xas_load+0x20/0x140 [ 267.896394][ C1] xas_load+0x28/0x140 [ 267.900453][ C1] __filemap_get_folio+0x22c/0xe80 [ 267.905553][ C1] ? __filemap_get_folio+0x150/0xe80 [ 267.910822][ C1] ? page_cache_prev_miss+0x500/0x500 [ 267.916210][ C1] ? __lock_acquire+0x125b/0x1f80 [ 267.921232][ C1] shmem_get_folio_gfp+0x356/0x3470 [ 267.926443][ C1] ? shmem_get_folio+0xa0/0xa0 [ 267.931189][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 267.936473][ C1] shmem_fault+0x235/0x9c0 [ 267.940894][ C1] ? shmem_fallocate+0x11c0/0x11c0 [ 267.946017][ C1] ? filemap_read_folio+0x780/0x780 [ 267.951386][ C1] ? count_memcg_event_mm+0x90/0x410 [ 267.956664][ C1] __do_fault+0x136/0x4f0 [ 267.960995][ C1] handle_mm_fault+0x3412/0x5340 [ 267.965926][ C1] ? follow_page_pte+0x39c/0x1880 [ 267.970956][ C1] ? numa_migrate_prep+0x250/0x250 [ 267.976063][ C1] ? follow_page_mask+0xb8a/0x1420 [ 267.981165][ C1] ? __get_user_pages+0x487/0x1190 [ 267.986347][ C1] __get_user_pages+0x4f3/0x1190 [ 267.991276][ C1] ? populate_vma_page_range+0x2b0/0x2b0 [ 267.996897][ C1] populate_vma_page_range+0x217/0x2b0 [ 268.002347][ C1] __mm_populate+0x275/0x440 [ 268.006920][ C1] ? check_vma_flags+0x4d0/0x4d0 [ 268.011837][ C1] ? xfd_validate_state+0x6a/0x140 [ 268.016952][ C1] vm_mmap_pgoff+0x22b/0x2d0 [ 268.021548][ C1] ? account_locked_vm+0xe0/0xe0 [ 268.026479][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 268.032458][ C1] ? ksys_mmap_pgoff+0xd8/0x6d0 [ 268.037316][ C1] do_syscall_64+0x3b/0xb0 [ 268.041727][ C1] ? clear_bhb_loop+0x45/0xa0 [ 268.046387][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.052260][ C1] RIP: 0033:0x7f003327cf69 [ 268.056660][ C1] RSP: 002b:00007f0033f2a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 268.065061][ C1] RAX: ffffffffffffffda RBX: 00007f00333b3f80 RCX: 00007f003327cf69 [ 268.073012][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 268.080964][ C1] RBP: 00007f00332da6fe R08: ffffffffffffffff R09: 0000000000000000 [ 268.088916][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 268.096866][ C1] R13: 000000000000000b R14: 00007f00333b3f80 R15: 00007ffcce282ff8 [ 268.104825][ C1] [ 268.107829][ C1] rcu: rcu_preempt kthread starved for 9896 jiffies! g17309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 268.118910][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 268.128872][ C1] rcu: RCU grace-period kthread stack dump: [ 268.134742][ C1] task:rcu_preempt state:R running task stack:26816 pid:16 ppid:2 flags:0x00004000 [ 268.145595][ C1] Call Trace: [ 268.148861][ C1] [ 268.151787][ C1] __schedule+0x142d/0x4550 [ 268.156302][ C1] ? _raw_spin_unlock+0x40/0x40 [ 268.161155][ C1] ? __sched_text_start+0x8/0x8 [ 268.166006][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 268.171367][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 268.177240][ C1] ? _raw_spin_unlock+0x40/0x40 [ 268.182099][ C1] schedule+0xbf/0x180 [ 268.186154][ C1] schedule_timeout+0x1b9/0x300 [ 268.190985][ C1] ? console_conditional_schedule+0x40/0x40 [ 268.196859][ C1] ? update_process_times+0x1b0/0x1b0 [ 268.202222][ C1] ? prepare_to_swait_event+0x329/0x350 [ 268.207754][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 268.212592][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 268.218723][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 268.223900][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 268.228642][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 268.234518][ C1] ? finish_swait+0xcf/0x1e0 [ 268.239089][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 268.243662][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 268.248751][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 268.254624][ C1] ? __kthread_parkme+0x168/0x1c0 [ 268.259633][ C1] kthread+0x28d/0x320 [ 268.263678][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 268.268770][ C1] ? kthread_blkcg+0xd0/0xd0 [ 268.273337][ C1] ret_from_fork+0x1f/0x30 [ 268.277825][ C1] [ 268.280820][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 268.287137][ C1] Sending NMI from CPU 1 to CPUs 0: [ 268.292367][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340