last executing test programs: 4.61754019s ago: executing program 0 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28010, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xa8c7}]}}}]}, 0x3c}}, 0x0) 4.562095632s ago: executing program 1 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) 4.311254838s ago: executing program 4 (id=151): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='gG\x9e', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x280449c, &(0x7f00000006c0)=ANY=[]) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000103) 4.282887179s ago: executing program 0 (id=152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000180)=@raw=[@generic={0x72, 0xa, 0x0, 0xfffa, 0x3}, @generic={0x72, 0xa, 0x0, 0xfff9, 0x1}, @generic={0x73, 0xa, 0x1, 0xfff8}, @generic={0xb7}, @generic={0x95}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.282255459s ago: executing program 1 (id=153): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) 3.988562136s ago: executing program 0 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000001100)={r4, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000000040)=0x18) 3.280348262s ago: executing program 4 (id=161): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040)) 3.139917485s ago: executing program 2 (id=162): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) 3.124017486s ago: executing program 1 (id=163): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.97513118s ago: executing program 0 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c53931207348", 0xad}], 0x1, &(0x7f00000008c0)=[@iv={0x60, 0x117, 0x2, 0x4b, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x78, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584", 0x40}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.94103202s ago: executing program 4 (id=166): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 2.847965333s ago: executing program 1 (id=167): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e80"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.825251063s ago: executing program 2 (id=168): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) 2.724562385s ago: executing program 4 (id=170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1a}]}}}]}, 0x44}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0xf0ff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) 2.659760707s ago: executing program 1 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x3000008, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 2.653133117s ago: executing program 2 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x7c, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000850) 2.564588859s ago: executing program 3 (id=173): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) 2.444695972s ago: executing program 2 (id=174): write(0xffffffffffffffff, &(0x7f0000000080), 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4000810) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0c4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000200), 0x12) bind$x25(r2, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r1, 0x8910, 0x0) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 2.417431392s ago: executing program 3 (id=175): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @multicast2}], 0x10) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) mkdir(0x0, 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chown(0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x8, 0x700, 0x8, 0x9, {{0x1d, 0x4, 0x1, 0x3c, 0x74, 0x67, 0x0, 0x5, 0x49e4cec55e01605d, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0xb, 0xd3, [@broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x9b, [@local, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast2]}, @ssrr={0x89, 0x1f, 0x1f, [@empty, @local, @empty, @remote, @empty, @local, @multicast1]}, @generic={0x11, 0x11, "b1096774dec015b300100000000000"}]}}}}}) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88) close(r5) 1.333676208s ago: executing program 1 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.228516241s ago: executing program 4 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000001100)={r4, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000000040)=0x18) 1.221013171s ago: executing program 3 (id=178): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a", 0xa}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000040)) 1.066669765s ago: executing program 2 (id=179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 1.000739106s ago: executing program 3 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1-1\x00', 0x8) write(r0, &(0x7f0000000180)='add 2-1\x00', 0x8) write(r0, &(0x7f00000001c0)='add 3-1\x00', 0x8) write(r0, &(0x7f0000000200)='add 4-1\x00', 0x8) write(r0, &(0x7f0000000240)='add 5-1\x00', 0x8) write(r0, &(0x7f00000002c0)='add 7-1\x00', 0x8) write(r0, &(0x7f0000000300)='add 8-1\x00', 0x8) write(r0, &(0x7f0000000340)='add 1-2\x00', 0x8) write(r0, &(0x7f0000000380)='add 2-2\x00', 0x8) write(r0, &(0x7f00000003c0)='add 3-2\x00', 0x8) write(r0, &(0x7f0000000400)='add 4-2\x00', 0x8) write(r0, &(0x7f0000000480)='add 6-2\x00', 0x8) 1.000397896s ago: executing program 0 (id=181): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x0) fallocate(r0, 0x40, 0x2, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1, 0x9, 0x9) 276.605713ms ago: executing program 0 (id=182): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) 276.269673ms ago: executing program 2 (id=183): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e80"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 218.275875ms ago: executing program 4 (id=184): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 165.609506ms ago: executing program 3 (id=185): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) 0s ago: executing program 3 (id=186): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read(r0, &(0x7f0000000080)=""/41, 0x29) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 38.329176][ T3935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.358718][ T3935] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. syzkaller login: [ 64.319285][ T4260] cgroup: Unknown subsys name 'net' [ 64.424542][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.683426][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.437731][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.445843][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.456983][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.464661][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.473453][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.473696][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.481554][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.488386][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.495926][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.502589][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.510065][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.515933][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.523291][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.529870][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.545031][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.546152][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.552664][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.560704][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.566512][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.574440][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.581703][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.588700][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.600475][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.608533][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.617240][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.630293][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.638119][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.654025][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.664761][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.683075][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.982812][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 68.140784][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.148013][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.156598][ T4285] device bridge_slave_0 entered promiscuous mode [ 68.170317][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 68.185953][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 68.197332][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.206975][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.214817][ T4285] device bridge_slave_1 entered promiscuous mode [ 68.224984][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 68.279271][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 68.316470][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.356666][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.376436][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.384058][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.392291][ T4272] device bridge_slave_0 entered promiscuous mode [ 68.400640][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.407811][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.415693][ T4272] device bridge_slave_1 entered promiscuous mode [ 68.462806][ T4285] team0: Port device team_slave_0 added [ 68.475961][ T4285] team0: Port device team_slave_1 added [ 68.508392][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.515657][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.524053][ T4278] device bridge_slave_0 entered promiscuous mode [ 68.531496][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.538612][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.549040][ T4279] device bridge_slave_0 entered promiscuous mode [ 68.557870][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.571544][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.578506][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.604471][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.616948][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.624701][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.632574][ T4278] device bridge_slave_1 entered promiscuous mode [ 68.642624][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.649867][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.657506][ T4279] device bridge_slave_1 entered promiscuous mode [ 68.666374][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.684368][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.691436][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.717521][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.767570][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.780017][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.797935][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.820221][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.827332][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.835837][ T4273] device bridge_slave_0 entered promiscuous mode [ 68.850103][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.868692][ T4272] team0: Port device team_slave_0 added [ 68.875690][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.883024][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.891417][ T4273] device bridge_slave_1 entered promiscuous mode [ 68.913116][ T4285] device hsr_slave_0 entered promiscuous mode [ 68.919945][ T4285] device hsr_slave_1 entered promiscuous mode [ 68.927711][ T4272] team0: Port device team_slave_1 added [ 68.947561][ T4279] team0: Port device team_slave_0 added [ 68.982187][ T4279] team0: Port device team_slave_1 added [ 68.992954][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.012512][ T4278] team0: Port device team_slave_0 added [ 69.026185][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.033246][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.059279][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.076442][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.093790][ T4278] team0: Port device team_slave_1 added [ 69.117085][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.124780][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.153470][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.171203][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.178184][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.205102][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.242780][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.249952][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.278275][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.296952][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.304206][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.330665][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.343675][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.351071][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.377639][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.403755][ T4273] team0: Port device team_slave_0 added [ 69.430806][ T4273] team0: Port device team_slave_1 added [ 69.476605][ T4272] device hsr_slave_0 entered promiscuous mode [ 69.483640][ T4272] device hsr_slave_1 entered promiscuous mode [ 69.490368][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.498070][ T4272] Cannot create hsr debugfs directory [ 69.506965][ T4278] device hsr_slave_0 entered promiscuous mode [ 69.513707][ T4278] device hsr_slave_1 entered promiscuous mode [ 69.523441][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.531097][ T4278] Cannot create hsr debugfs directory [ 69.578292][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.585839][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.612005][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.627820][ T4279] device hsr_slave_0 entered promiscuous mode [ 69.634635][ T4279] device hsr_slave_1 entered promiscuous mode [ 69.641173][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.648735][ T4279] Cannot create hsr debugfs directory [ 69.660477][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 69.673848][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.683110][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.709361][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.739846][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 69.739859][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 69.740039][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 69.746088][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 69.826049][ T4273] device hsr_slave_0 entered promiscuous mode [ 69.834758][ T4273] device hsr_slave_1 entered promiscuous mode [ 69.841446][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.848995][ T4273] Cannot create hsr debugfs directory [ 69.972827][ T4285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.015816][ T4285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.036213][ T4285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.063095][ T4285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.158809][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.169225][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.194839][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.210266][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.238521][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.262368][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.272907][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.282306][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.329175][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.377484][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.387375][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.411961][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.421968][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.429995][ T4278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.442731][ T4278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.453791][ T4278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.488854][ T4278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.498390][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.508099][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.517978][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.525346][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.534353][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.542288][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.550259][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.558893][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.567540][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.574646][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.584638][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.598929][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.624740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.633727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.643062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.652467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.661569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.712206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.722303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.731050][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.738097][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.746455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.755847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.768386][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.775517][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.784017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.792675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.813408][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.825801][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.836698][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.847787][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.858199][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.867062][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.875627][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.884866][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.900311][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.914349][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.926570][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.939482][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.957471][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.969425][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.984980][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.997003][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.010325][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.019958][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.029072][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.039901][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.048179][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.057699][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.066581][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.075162][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.083700][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.092896][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.137244][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.155392][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.167331][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.216959][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.232916][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.255695][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.267653][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.274643][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.284612][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.291763][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.333866][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.349402][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.358796][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.374157][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.384428][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.393843][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.401046][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.408942][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.424106][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.483617][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.493670][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.503183][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.510344][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.518210][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.527781][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.536802][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.543953][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.552732][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.564572][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.575237][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.583971][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.593719][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.602599][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.612113][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.636900][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.647954][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.672899][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.687741][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.698830][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.713484][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.725393][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.737072][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.745970][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 71.753566][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.761514][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.784196][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.794850][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.808252][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.820191][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 71.830665][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 71.830765][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 71.837109][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 71.844565][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.867008][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.874990][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.884568][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.893110][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.902576][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.930026][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.938201][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.947655][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.957110][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.966111][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.981630][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.000101][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.018298][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.033141][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.055902][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.065711][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.095037][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.114778][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.124401][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.154330][ T4272] device veth0_vlan entered promiscuous mode [ 72.175964][ T4285] device veth0_vlan entered promiscuous mode [ 72.184743][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.196498][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.206285][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.221624][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.235931][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.243113][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.259441][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.267767][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.276728][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.284474][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.292065][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.301636][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.310407][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.317464][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.325295][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.334478][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.342692][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.350787][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.359469][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.368694][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.384076][ T4272] device veth1_vlan entered promiscuous mode [ 72.418999][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.427294][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.456007][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.465636][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.491118][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.501394][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.513344][ T4285] device veth1_vlan entered promiscuous mode [ 72.564316][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.572917][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.584851][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.593715][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.602636][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.611345][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.619810][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.632211][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.646285][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.675914][ T4272] device veth0_macvtap entered promiscuous mode [ 72.685324][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.700582][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.711692][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.730360][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.740179][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.748898][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.761446][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.770730][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.796431][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.809082][ T4272] device veth1_macvtap entered promiscuous mode [ 72.827820][ T4285] device veth0_macvtap entered promiscuous mode [ 72.838907][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.852330][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.864119][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.872788][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.880544][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.918029][ T4279] device veth0_vlan entered promiscuous mode [ 72.946967][ T4285] device veth1_macvtap entered promiscuous mode [ 72.964361][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.975101][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.988242][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.003369][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.015627][ T4279] device veth1_vlan entered promiscuous mode [ 73.034857][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.043988][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.061488][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.080313][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.100156][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.123651][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.149322][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.176839][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.189230][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.197758][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.207027][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.216123][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.225298][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.233966][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.254789][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.269017][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.280721][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.289443][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.303618][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.319394][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.336514][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.363509][ T4279] device veth0_macvtap entered promiscuous mode [ 73.380696][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.389423][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.408849][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.418561][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.434289][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.442709][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.452504][ T4285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.462222][ T4285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.471035][ T4285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.480511][ T4285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.507374][ T4279] device veth1_macvtap entered promiscuous mode [ 73.516051][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.525365][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.535143][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.602291][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.615839][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.626030][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.636500][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.647792][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.657567][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.667984][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.677315][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.686311][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.733426][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.746097][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.746356][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.764340][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.768543][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.783111][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.794591][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.802912][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.812856][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.821089][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 73.828235][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.836840][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.845885][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.900404][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 73.900461][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 73.906427][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 73.912827][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 73.940069][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.947922][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.959361][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.970799][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.979501][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.988874][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.999080][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.009456][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.018234][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.026306][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.035042][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.049748][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.065661][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.066027][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.083003][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.086097][ T4278] device veth0_vlan entered promiscuous mode [ 74.099774][ T4273] device veth0_vlan entered promiscuous mode [ 74.107077][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.115699][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.124054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.133463][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.143428][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.151657][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.174716][ T4278] device veth1_vlan entered promiscuous mode [ 74.216320][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.241233][ T4273] device veth1_vlan entered promiscuous mode [ 74.276306][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.293923][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.330350][ T4278] device veth0_macvtap entered promiscuous mode [ 74.345815][ T4278] device veth1_macvtap entered promiscuous mode [ 74.385227][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.411187][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.425104][ T4359] loop2: detected capacity change from 0 to 128 [ 74.431926][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.444380][ T4359] ======================================================= [ 74.444380][ T4359] WARNING: The mand mount option has been deprecated and [ 74.444380][ T4359] and is ignored by this kernel. Remove the mand [ 74.444380][ T4359] option from the mount to silence this warning. [ 74.444380][ T4359] ======================================================= [ 74.490562][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.504867][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.515629][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.531824][ T4359] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.545991][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.556041][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.578677][ T4273] device veth0_macvtap entered promiscuous mode [ 74.584893][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.598287][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.607869][ T4359] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.627536][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.647266][ T4359] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.659217][ T4289] Bluetooth: min 7 > max 3 [ 74.670371][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.689394][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.739110][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.828794][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.858269][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.878987][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.902833][ T4273] device veth1_macvtap entered promiscuous mode [ 74.917266][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.000340][ T4326] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.034703][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.135740][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.199882][ T4326] usb 4-1: Using ep0 maxpacket: 8 [ 75.219359][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 75.311184][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.348981][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.389326][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.412702][ T4326] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.428095][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.441342][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.449280][ T4326] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 75.468962][ T4326] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 75.477370][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.492426][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.503079][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.508945][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.514114][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.531829][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.542763][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.553002][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.564560][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.577818][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.581371][ T4326] usb 4-1: config 0 descriptor?? [ 75.601399][ T4367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.657781][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.671025][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.692398][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 75.741328][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.750514][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.759233][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.772191][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.782425][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.791717][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.800538][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.821594][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.849667][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.875757][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.896699][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.910123][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 75.918202][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.929214][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.939385][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.950251][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.961796][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.969157][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.979900][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 75.985925][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 75.993650][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 75.993671][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 76.003531][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.033504][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.039733][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.046496][ T4372] usb 4-1: USB disconnect, device number 2 [ 76.056891][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 76.059894][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.070061][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.074313][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.110189][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.125177][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.208576][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.231716][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.251176][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.326760][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.357611][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.376212][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.380813][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.539580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.559586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 76.569573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 76.579567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 76.589567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 76.599570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 76.609572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 76.619573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 76.629571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 76.639565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 77.791871][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.871352][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.915555][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.975058][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.990079][ T4284] Bluetooth: hci0: command 0x2021 tx timeout [ 78.006379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.348447][ T4398] loop2: detected capacity change from 0 to 32768 [ 78.461472][ T4398] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 79.055743][ T4400] device syzkaller0 entered promiscuous mode [ 79.144310][ T4285] ocfs2: Unmounting device (7,2) on (node local) [ 80.753553][ T4429] sctp: [Deprecated]: syz.4.20 (pid 4429) Use of int in max_burst socket option. [ 80.753553][ T4429] Use struct sctp_assoc_value instead [ 80.989847][ T4327] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 81.244306][ T4327] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.258793][ T4327] usb 2-1: not running at top speed; connect to a high speed hub [ 81.297459][ T4327] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 81.315721][ T4327] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 81.349833][ T4327] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 81.374694][ T4327] usb 2-1: config 14 has no interface number 0 [ 81.390896][ T4327] usb 2-1: config 14 has no interface number 1 [ 81.403980][ T4327] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 81.450159][ T4327] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 81.482543][ T4327] usb 2-1: config 14 interface 57 has no altsetting 0 [ 81.489355][ T4327] usb 2-1: config 14 interface 228 has no altsetting 0 [ 81.515186][ T26] cfg80211: failed to load regulatory.db [ 81.538423][ T4327] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 81.550658][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.575374][ T4327] usb 2-1: Product: syz [ 81.580112][ T4327] usb 2-1: Manufacturer: syz [ 81.584812][ T4327] usb 2-1: SerialNumber: syz [ 81.736567][ T4441] mmap: syz.0.23 (4441) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.032030][ T4327] legousbtower 2-1:14.57: interrupt endpoints not found [ 82.233284][ T4327] legousbtower 2-1:14.228: interrupt endpoints not found [ 82.974501][ T4415] netlink: 774 bytes leftover after parsing attributes in process `syz.2.17'. [ 82.985975][ T4415] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17'. [ 83.428135][ T4457] loop3: detected capacity change from 0 to 32768 [ 83.451892][ T4457] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 83.782731][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 84.209538][ C1] sched: RT throttling activated [ 84.473773][ T4327] usb 2-1: USB disconnect, device number 2 [ 84.546330][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 84.585900][ T4487] IPv6: Can't replace route, no match found [ 85.606456][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 85.902317][ T4532] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.906512][ T4534] loop1: detected capacity change from 0 to 512 [ 85.968057][ T4534] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.994055][ T4534] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 86.038239][ T4534] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 86.059986][ T4534] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 86.079723][ T4534] System zones: 0-2, 18-18, 34-34 [ 86.181507][ T4534] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.46: bad orphan inode 15 [ 86.201702][ T4534] ext4_test_bit(bit=14, block=18) = 1 [ 86.207161][ T4534] is_bad_inode(inode)=0 [ 86.221600][ T4534] NEXT_ORPHAN(inode)=2264924160 [ 86.239707][ T4534] max_ino=32 [ 86.242955][ T4534] i_nlink=0 [ 86.283094][ T4534] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.46: corrupted inode contents [ 86.335989][ T4534] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #15: comm syz.1.46: mark_inode_dirty error [ 86.362408][ T4560] IPv6: Can't replace route, no match found [ 86.379966][ T4534] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.46: corrupted inode contents [ 86.430277][ T4534] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2947: inode #15: comm syz.1.46: mark_inode_dirty error [ 86.474173][ T4534] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2950: inode #15: comm syz.1.46: mark inode dirty (error -117) [ 86.511961][ T4534] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 86.537508][ T4534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 87.016264][ T4577] tipc: Enabling of bearer rejected, failed to enable media [ 87.022004][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 87.160718][ T4356] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.374116][ T4356] usb 5-1: Using ep0 maxpacket: 8 [ 87.391932][ T4356] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.450222][ T4356] usb 5-1: config 6 has an invalid interface number: 42 but max is 0 [ 87.488855][ T4356] usb 5-1: config 6 has no interface number 0 [ 87.519631][ T4356] usb 5-1: config 6 interface 42 altsetting 250 has an invalid endpoint with address 0x0, skipping [ 87.560973][ T4356] usb 5-1: config 6 interface 42 altsetting 250 has an invalid endpoint with address 0x80, skipping [ 87.589665][ T4356] usb 5-1: config 6 interface 42 has no altsetting 0 [ 87.628613][ T4356] usb 5-1: New USB device found, idVendor=055f, idProduct=c530, bcdDevice=39.75 [ 87.661411][ T4356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.674683][ T4356] usb 5-1: Product: syz [ 87.678927][ T4356] usb 5-1: Manufacturer: syz [ 87.689201][ T4356] usb 5-1: SerialNumber: syz [ 87.728597][ T4596] netlink: 774 bytes leftover after parsing attributes in process `syz.3.55'. [ 87.778835][ T4596] netlink: 52 bytes leftover after parsing attributes in process `syz.3.55'. [ 87.963459][ T4356] gspca_main: sunplus-2.14.0 probing 055f:c530 [ 87.977082][ T4356] gspca_sunplus: reg_r err -71 [ 87.986672][ T4356] sunplus: probe of 5-1:6.42 failed with error -71 [ 88.025090][ T4356] usb 5-1: USB disconnect, device number 2 [ 88.381292][ T47] rpcbind: server 127.0.0.1 not responding, timed out [ 88.939491][ T4620] IPv6: Can't replace route, no match found [ 88.954036][ T4622] loop2: detected capacity change from 0 to 512 [ 88.984323][ T4622] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.991186][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 89.013383][ T4622] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 89.087877][ T4622] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 89.104606][ T4622] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 89.216297][ T4622] System zones: 0-2, 18-18, 34-34 [ 89.246689][ T4622] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.63: bad orphan inode 15 [ 89.282980][ T4622] ext4_test_bit(bit=14, block=18) = 1 [ 89.288448][ T4622] is_bad_inode(inode)=0 [ 89.293367][ T4622] NEXT_ORPHAN(inode)=2264924160 [ 89.298270][ T4622] max_ino=32 [ 89.304497][ T4622] i_nlink=0 [ 89.307992][ T4622] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.63: corrupted inode contents [ 89.328996][ T4630] Zero length message leads to an empty skb [ 89.374194][ T4622] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #15: comm syz.2.63: mark_inode_dirty error [ 89.387794][ T4622] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.63: corrupted inode contents [ 89.405127][ T4622] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2947: inode #15: comm syz.2.63: mark_inode_dirty error [ 89.461713][ T4622] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2950: inode #15: comm syz.2.63: mark inode dirty (error -117) [ 89.476913][ T4622] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 89.487382][ T4639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 89.500029][ T4622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.020257][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 90.078904][ T4658] process 'syz.0.71' launched './file0' with NULL argv: empty string added [ 90.154918][ T27] audit: type=1326 audit(1785588364.801:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.3.72" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e65f9e019 code=0x7ffc0000 [ 90.277610][ T27] audit: type=1326 audit(1785588364.841:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.3.72" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e65f9e019 code=0x7ffc0000 [ 90.366463][ T4665] loop4: detected capacity change from 0 to 32768 [ 90.375759][ T27] audit: type=1326 audit(1785588364.841:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.3.72" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e65f9e019 code=0x7ffc0000 [ 90.399413][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.408245][ T27] audit: type=1326 audit(1785588364.841:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.3.72" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f8e65f9e019 code=0x7ffc0000 [ 90.431915][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.478248][ T4665] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 90.904320][ T27] audit: type=1326 audit(1785588364.841:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.3.72" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e65f9e019 code=0x7ffc0000 [ 91.005098][ T27] audit: type=1326 audit(1785588364.841:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.3.72" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e65f9e019 code=0x7ffc0000 [ 91.028780][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.104496][ T4683] netlink: 774 bytes leftover after parsing attributes in process `syz.0.80'. [ 91.123726][ T27] audit: type=1326 audit(1785588364.841:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.3.72" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e65f9e019 code=0x7ffc0000 [ 91.179666][ T4683] netlink: 52 bytes leftover after parsing attributes in process `syz.0.80'. [ 91.222291][ T27] audit: type=1326 audit(1785588364.851:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.3.72" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e65f9e019 code=0x7ffc0000 [ 91.248540][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 91.345313][ T27] audit: type=1326 audit(1785588364.851:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.3.72" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e65f9e019 code=0x7ffc0000 [ 91.539594][ T27] audit: type=1326 audit(1785588364.851:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.3.72" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e65f9e019 code=0x7ffc0000 [ 91.622178][ T4703] loop0: detected capacity change from 0 to 512 [ 91.698943][ T4703] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.756945][ T4703] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 91.817848][ T4703] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 91.874919][ T4703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 91.883975][ T4703] System zones: 0-2, 18-18, 34-34 [ 91.919617][ T14] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 91.949101][ T4703] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.83: bad orphan inode 15 [ 91.966666][ T4703] ext4_test_bit(bit=14, block=18) = 1 [ 91.975825][ T4703] is_bad_inode(inode)=0 [ 91.990462][ T4703] NEXT_ORPHAN(inode)=2264924160 [ 92.004364][ T4703] max_ino=32 [ 92.016864][ T4703] i_nlink=0 [ 92.030539][ T4703] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.83: corrupted inode contents [ 92.112524][ T4703] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #15: comm syz.0.83: mark_inode_dirty error [ 92.464343][ T4703] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.83: corrupted inode contents [ 92.705080][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.712966][ T4703] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2947: inode #15: comm syz.0.83: mark_inode_dirty error [ 92.725652][ T14] usb 4-1: not running at top speed; connect to a high speed hub [ 92.747544][ T4703] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2950: inode #15: comm syz.0.83: mark inode dirty (error -117) [ 92.771175][ T14] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 92.779402][ T14] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 92.780745][ T4703] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 92.811190][ T4703] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.870069][ T14] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 92.889586][ T14] usb 4-1: config 14 has no interface number 0 [ 93.060298][ T14] usb 4-1: config 14 has no interface number 1 [ 93.067006][ T14] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 93.078629][ T14] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 93.089842][ T14] usb 4-1: config 14 interface 57 has no altsetting 0 [ 93.096671][ T14] usb 4-1: config 14 interface 228 has no altsetting 0 [ 93.108842][ T14] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 93.142340][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.156527][ T14] usb 4-1: Product: syz [ 93.170025][ T14] usb 4-1: Manufacturer: syz [ 93.174686][ T14] usb 4-1: SerialNumber: syz [ 93.342705][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 93.618324][ T4745] netlink: 774 bytes leftover after parsing attributes in process `syz.0.95'. [ 93.637182][ T14] legousbtower 4-1:14.57: interrupt endpoints not found [ 93.639914][ T4745] netlink: 52 bytes leftover after parsing attributes in process `syz.0.95'. [ 93.841400][ T14] legousbtower 4-1:14.228: interrupt endpoints not found [ 93.894311][ T4754] loop2: detected capacity change from 0 to 1024 [ 94.026202][ T4757] device syzkaller0 entered promiscuous mode [ 94.689271][ T4764] device bridge1 entered promiscuous mode [ 94.786958][ T4764] team0: Port device bridge1 added [ 95.430541][ T4326] usb 4-1: USB disconnect, device number 3 [ 95.702791][ T4773] loop4: detected capacity change from 0 to 32768 [ 95.785266][ T4773] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 96.321418][ T4773] syz.4.103 (4773) used greatest stack depth: 18688 bytes left [ 96.505828][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 96.684266][ T4801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 97.075535][ T4817] loop1: detected capacity change from 0 to 1024 [ 97.979605][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 98.037603][ T4821] capability: warning: `syz.1.113' uses deprecated v2 capabilities in a way that may be insecure [ 99.749022][ T4843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.121'. [ 99.815882][ T4845] IPv6: Can't replace route, no match found [ 99.832172][ T4837] loop0: detected capacity change from 0 to 32768 [ 99.849600][ T4837] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 101.087597][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 101.159024][ T4863] loop2: detected capacity change from 0 to 2048 [ 101.338686][ T4868] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.711099][ T4874] xt_TPROXY: Can be used only with -p tcp or -p udp [ 102.513289][ T4868] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 102.566009][ T4891] IPv6: Can't replace route, no match found [ 102.589978][ T4868] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 102.637937][ T4868] Remounting filesystem read-only [ 102.660578][ T4285] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 102.725048][ T4894] 0x000000000000-0x000000020000 : "" [ 102.921107][ T4894] ftl_cs: FTL header not found. [ 102.965043][ T4898] loop1: detected capacity change from 0 to 32768 [ 103.057871][ T4898] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 104.076178][ T4279] ocfs2: Unmounting device (7,1) on (node local) [ 104.354572][ T4914] sctp: [Deprecated]: syz.0.139 (pid 4914) Use of int in max_burst socket option. [ 104.354572][ T4914] Use struct sctp_assoc_value instead [ 104.892226][ T4924] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (43207) [ 104.944803][ T4924] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.159489][ T4933] netlink: 774 bytes leftover after parsing attributes in process `syz.3.149'. [ 105.185516][ T4933] netlink: 52 bytes leftover after parsing attributes in process `syz.3.149'. [ 105.743328][ T4955] sctp: [Deprecated]: syz.0.155 (pid 4955) Use of int in max_burst socket option. [ 105.743328][ T4955] Use struct sctp_assoc_value instead [ 106.326383][ T4964] Bluetooth: MGMT ver 1.22 [ 106.332205][ T4964] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 106.588304][ T4975] netlink: 774 bytes leftover after parsing attributes in process `syz.1.167'. [ 106.616898][ T4975] netlink: 52 bytes leftover after parsing attributes in process `syz.1.167'. [ 106.827913][ T4986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 106.857080][ T4987] loop1: detected capacity change from 0 to 1024 [ 108.519183][ T5016] sctp: [Deprecated]: syz.4.177 (pid 5016) Use of int in max_burst socket option. [ 108.519183][ T5016] Use struct sctp_assoc_value instead [ 108.552600][ T5010] device syzkaller0 entered promiscuous mode [ 109.337201][ T5025] [ 109.339581][ T5025] ====================================================== [ 109.346607][ T5025] WARNING: possible circular locking dependency detected [ 109.353647][ T5025] syzkaller #0 Not tainted [ 109.358061][ T5025] ------------------------------------------------------ [ 109.365062][ T5025] syz.4.184/5025 is trying to acquire lock: [ 109.370935][ T5025] ffff888018ef88d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 109.380612][ T5025] [ 109.380612][ T5025] but task is already holding lock: [ 109.387961][ T5025] ffff888073d6c800 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 109.398842][ T5025] [ 109.398842][ T5025] which lock already depends on the new lock. [ 109.398842][ T5025] [ 109.409238][ T5025] [ 109.409238][ T5025] the existing dependency chain (in reverse order) is: [ 109.418255][ T5025] [ 109.418255][ T5025] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 109.426946][ T5025] down_write+0x36/0x60 [ 109.431617][ T5025] process_measurement+0x3af/0x1c40 [ 109.437329][ T5025] ima_file_mmap+0xe9/0x140 [ 109.442340][ T5025] __se_sys_remap_file_pages+0x55a/0x7b0 [ 109.448485][ T5025] do_syscall_64+0x4c/0xa0 [ 109.453449][ T5025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.459872][ T5025] [ 109.459872][ T5025] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 109.467416][ T5025] __lock_acquire+0x2d18/0x7c40 [ 109.472781][ T5025] lock_acquire+0x1bb/0x4a0 [ 109.477794][ T5025] down_read_killable+0x4c/0x340 [ 109.483240][ T5025] mmap_read_lock_killable+0x1d/0x60 [ 109.489034][ T5025] lock_mm_and_find_vma+0x2b1/0x2f0 [ 109.494767][ T5025] do_user_addr_fault+0x2e8/0xb20 [ 109.500304][ T5025] exc_page_fault+0x60/0x100 [ 109.505435][ T5025] asm_exc_page_fault+0x22/0x30 [ 109.510802][ T5025] fault_in_readable+0x13e/0x1f0 [ 109.516249][ T5025] fault_in_iov_iter_readable+0xbf/0x2f0 [ 109.522392][ T5025] generic_perform_write+0x1f1/0x5c0 [ 109.528187][ T5025] __generic_file_write_iter+0x148/0x2a0 [ 109.534332][ T5025] generic_file_write_iter+0xab/0x2e0 [ 109.540214][ T5025] vfs_write+0x482/0x9a0 [ 109.544973][ T5025] ksys_write+0x14d/0x260 [ 109.549836][ T5025] do_syscall_64+0x4c/0xa0 [ 109.554786][ T5025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.561202][ T5025] [ 109.561202][ T5025] other info that might help us debug this: [ 109.561202][ T5025] [ 109.571441][ T5025] Possible unsafe locking scenario: [ 109.571441][ T5025] [ 109.578909][ T5025] CPU0 CPU1 [ 109.584258][ T5025] ---- ---- [ 109.589607][ T5025] lock(&sb->s_type->i_mutex_key#13); [ 109.595062][ T5025] lock(&mm->mmap_lock); [ 109.601898][ T5025] lock(&sb->s_type->i_mutex_key#13); [ 109.609866][ T5025] lock(&mm->mmap_lock); [ 109.614181][ T5025] [ 109.614181][ T5025] *** DEADLOCK *** [ 109.614181][ T5025] [ 109.622305][ T5025] 3 locks held by syz.4.184/5025: [ 109.627312][ T5025] #0: ffff88807da7ed68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 109.636533][ T5025] #1: ffff88807a350460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 109.645401][ T5025] #2: ffff888073d6c800 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 109.656702][ T5025] [ 109.656702][ T5025] stack backtrace: [ 109.662593][ T5025] CPU: 0 PID: 5025 Comm: syz.4.184 Not tainted syzkaller #0 [ 109.669864][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.679911][ T5025] Call Trace: [ 109.683181][ T5025] [ 109.686101][ T5025] dump_stack_lvl+0x188/0x24e [ 109.690771][ T5025] ? load_image+0x410/0x410 [ 109.695260][ T5025] ? show_regs_print_info+0x12/0x12 [ 109.700457][ T5025] ? print_circular_bug+0x12b/0x1a0 [ 109.705654][ T5025] check_noncircular+0x296/0x330 [ 109.710587][ T5025] ? add_chain_block+0x9b0/0x9b0 [ 109.715513][ T5025] ? lockdep_lock+0xf1/0x1f0 [ 109.720093][ T5025] ? _find_first_zero_bit+0xd2/0x100 [ 109.725368][ T5025] __lock_acquire+0x2d18/0x7c40 [ 109.730215][ T5025] ? lockdep_hardirqs_on+0x94/0x140 [ 109.735403][ T5025] ? verify_lock_unused+0x140/0x140 [ 109.740591][ T5025] ? __schedule+0x1087/0x4030 [ 109.745267][ T5025] lock_acquire+0x1bb/0x4a0 [ 109.749760][ T5025] ? mmap_read_lock_killable+0x1d/0x60 [ 109.755213][ T5025] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.761187][ T5025] ? read_lock_is_recursive+0x10/0x10 [ 109.766548][ T5025] ? cmp_ex_search+0x1a/0x70 [ 109.771128][ T5025] ? bsearch+0x86/0xb0 [ 109.775188][ T5025] ? fault_in_readable+0x13e/0x1f0 [ 109.780292][ T5025] ? search_extable+0x8c/0xd0 [ 109.784964][ T5025] ? trim_init_extable+0x3b0/0x3b0 [ 109.790064][ T5025] ? mmap_read_lock_killable+0x1d/0x60 [ 109.795514][ T5025] down_read_killable+0x4c/0x340 [ 109.800440][ T5025] ? mmap_read_lock_killable+0x1d/0x60 [ 109.805887][ T5025] mmap_read_lock_killable+0x1d/0x60 [ 109.811158][ T5025] lock_mm_and_find_vma+0x2b1/0x2f0 [ 109.816349][ T5025] do_user_addr_fault+0x2e8/0xb20 [ 109.821364][ T5025] ? _raw_spin_unlock_irq+0x1f/0x40 [ 109.826554][ T5025] ? lockdep_hardirqs_on+0x94/0x140 [ 109.831746][ T5025] exc_page_fault+0x60/0x100 [ 109.836339][ T5025] asm_exc_page_fault+0x22/0x30 [ 109.841205][ T5025] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 109.846916][ T5025] Code: a8 53 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 87 53 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 6a 53 [ 109.866512][ T5025] RSP: 0018:ffffc900032c7ab0 EFLAGS: 00050287 [ 109.872567][ T5025] RAX: ffffffff81bdda99 RBX: 0000000000001000 RCX: 0000000000080000 [ 109.880529][ T5025] RDX: ffffc9000ef41000 RSI: 0000000000063643 RDI: 0000000000063644 [ 109.888489][ T5025] RBP: 0000000000000000 R08: ffff888024d25a00 R09: 0000000000000002 [ 109.896446][ T5025] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000382000 [ 109.904407][ T5025] R13: dffffc0000000000 R14: 0000200000380100 R15: 0000200000381000 [ 109.912372][ T5025] ? fault_in_readable+0x139/0x1f0 [ 109.917504][ T5025] fault_in_iov_iter_readable+0xbf/0x2f0 [ 109.923140][ T5025] generic_perform_write+0x1f1/0x5c0 [ 109.928422][ T5025] ? generic_file_direct_write+0x330/0x330 [ 109.934217][ T5025] ? __file_remove_privs+0x5f0/0x5f0 [ 109.939491][ T5025] ? rwsem_write_trylock+0x135/0x1c0 [ 109.944767][ T5025] ? clear_nonspinnable+0x60/0x60 [ 109.949779][ T5025] ? generic_write_checks_count+0x363/0x440 [ 109.955662][ T5025] __generic_file_write_iter+0x148/0x2a0 [ 109.961288][ T5025] generic_file_write_iter+0xab/0x2e0 [ 109.966659][ T5025] vfs_write+0x482/0x9a0 [ 109.970894][ T5025] ? file_end_write+0x250/0x250 [ 109.975735][ T5025] ? __fget_files+0x3fc/0x460 [ 109.980406][ T5025] ? __fdget_pos+0x2ae/0x360 [ 109.984987][ T5025] ? ksys_write+0x70/0x260 [ 109.989395][ T5025] ksys_write+0x14d/0x260 [ 109.993718][ T5025] ? __ia32_sys_read+0x80/0x80 [ 109.998473][ T5025] ? lockdep_hardirqs_on+0x94/0x140 [ 110.003663][ T5025] do_syscall_64+0x4c/0xa0 [ 110.008073][ T5025] ? clear_bhb_loop+0x60/0xb0 [ 110.012744][ T5025] ? clear_bhb_loop+0x60/0xb0 [ 110.017414][ T5025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.023297][ T5025] RIP: 0033:0x7f3f4239e019 [ 110.027716][ T5025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.047317][ T5025] RSP: 002b:00007f3f431cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.055724][ T5025] RAX: ffffffffffffffda RBX: 00007f3f42625fa0 RCX: 00007f3f4239e019 [ 110.063687][ T5025] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000009 [ 110.071645][ T5025] RBP: 00007f3f4243500c R08: 0000000000000000 R09: 0000000000000000 [ 110.079605][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.087564][ T5025] R13: 00007f3f42626038 R14: 00007f3f42625fa0 R15: 00007ffef0c92008 [ 110.095529][ T5025] [ 110.213852][ T5025] kvm [5024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000000 [ 110.231259][ T5025] kvm [5024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 110.244535][ T5025] kvm [5024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffff000000000000 [ 111.285769][ T5022] netlink: 774 bytes leftover after parsing attributes in process `syz.2.183'. [ 111.294812][ T5022] netlink: 52 bytes leftover after parsing attributes in process `syz.2.183'.