last executing test programs: 1m7.988704434s ago: executing program 0 (id=404): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0xff59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x40) 1m7.537800868s ago: executing program 0 (id=406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e9", 0x17}], 0x2}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000016000000b40000007f00000000000000", @ANYBLOB, @ANYRES32=0x0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000000003000000000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000260000008500000007000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0xb, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000740)=""/38, 0x27, 0x26, 0x1, 0x8000}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x1e, 0x1, 0x2, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[], 0x20) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="811e", 0x2}, {0x0}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m7.293546982s ago: executing program 0 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b707000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pB \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') 1m5.915792657s ago: executing program 0 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) 1m3.322122383s ago: executing program 0 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)=0x100000001, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r5, &(0x7f0000000000), 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) dup3(r1, 0xffffffffffffffff, 0x0) 1m1.773476925s ago: executing program 0 (id=421): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100a7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) unshare(0x64000600) 46.577232219s ago: executing program 32 (id=421): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100a7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) unshare(0x64000600) 17.919379308s ago: executing program 2 (id=538): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwritev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000020}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x14) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r4, 0x8, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8850}, 0x800) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000012c0)={{0x6, 0x5, 0x2, 0x5}, 'syz1\x00', 0x14}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) 16.860630162s ago: executing program 2 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf256a00000008000300", @ANYRES32=r2, @ANYBLOB="0500d2"], 0x50}, 0x1, 0x0, 0x0, 0x20000813}, 0x4000000) 16.388413629s ago: executing program 2 (id=542): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x300, 0x0, &(0x7f0000000400)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 16.307906407s ago: executing program 2 (id=544): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getscheduler(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') 13.974802566s ago: executing program 5 (id=470): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x6, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 13.708880182s ago: executing program 5 (id=552): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 12.483592143s ago: executing program 5 (id=555): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwritev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000020}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x14) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r4, 0x8, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8850}, 0x800) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000012c0)={{0x6, 0x5, 0x2, 0x5}, 'syz1\x00', 0x14}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) 11.316515657s ago: executing program 2 (id=558): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, &(0x7f0000000300)={0x4, 0x5, 0x9, 0xf76, &(0x7f00000003c0)=[{}, {}, {}, {}, {}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x6ebb, 0x0, 0x1, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 10.389111768s ago: executing program 5 (id=559): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r2, 0x0) 10.16509699s ago: executing program 5 (id=560): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1e, 0x1, 0xfffffffd, 0x0, {0x7}, [@NDA_DST_MAC={0xa, 0xd, @multicast}]}, 0x28}}, 0x0) 9.113019404s ago: executing program 1 (id=565): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 8.904729175s ago: executing program 1 (id=566): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYBLOB="eeeaffff616d250b50c83b2a6a34", @ANYRES32=0x0], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r4 = dup(r3) ioctl$PPPIOCSCOMPRESS(r1, 0x400c744d) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0cc5604, &(0x7f00000005c0)={0x1, @pix={0x0, 0x3, 0x30313953, 0x4, 0x7ff, 0x53ed, 0x3, 0x0, 0x0, 0x7, 0x0, 0x8}}) syz_io_uring_setup(0x6921, &(0x7f0000000300)={0x0, 0x3530, 0x2000, 0xfffffffb, 0x122, 0x0, r1}, &(0x7f00000001c0), &(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x0, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0x101}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 8.574720397s ago: executing program 4 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000012c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@utf8no}, {@utf8no}]}, 0x25, 0x34c, &(0x7f0000001740)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x0) 8.045632459s ago: executing program 1 (id=569): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000004000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) unshare(0x60600) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0000, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x28, 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x42800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x2}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80000) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffcb1, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x2c, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x2c}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)="51f029", 0x1d}, 0x1, 0x0, 0x0, 0x30000845}, 0x2000c010) 6.322619399s ago: executing program 1 (id=570): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 5.819964728s ago: executing program 4 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x18) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000006000000000024000800000045"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) r5 = syz_open_pts(r4, 0x121500) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x3) 5.473300442s ago: executing program 2 (id=572): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb011c180000000000000000"], 0x0, 0x1b, 0x0, 0x1}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.859927991s ago: executing program 5 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 3.849642592s ago: executing program 1 (id=579): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000014c0)={0x124, 0x1, 0x3, 0xb81, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xd2b4}}, @NFQA_PAYLOAD={0x5f, 0xa, "59da926057b9a691ff545b8c3b661b4170d1c530345ad1c8c0e4fec5e650e51706c32a5c2b97c6fb2e635b69d34e6f4bf392d07364cacdefab4e0f509db74572053bd86584bb09c0cd31cc1b82c7895b0adca405d66a29aaa95bcb"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xaa4}, @NFQA_EXP={0x9c, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x810}, 0x24000040) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r2, &(0x7f0000000000), 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x2a4, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x278, 0x2, [@TCA_BPF_ACT={0x268, 0x1, [@m_pedit={0xf0, 0x15, 0x0, 0x0, {{0xa}, {0x4}, {0xc4, 0x6, "1584b4a306848b7d95d2bd096873b5ba275efbcd47f4bea6b36b24ba8295be98a638bd409d5a0a72b3f5dfc73a15f5fbc787a2476ec5b29b8435c897edc7a741f8a399a526d59ff580ce1f85c5c70b20c5d9c0a3abd5ae57fe0546bd2c99087aa1b24a5b8483c1e46fbcedc941831913e945590c462ec2b5aeab1662b7383d73476bbf0a6ee244b79766178957ff1a49aeae3798b1ea5166a607c94e566ca3fbaca37e07722309a80464e87373f3c95da09972e2f2a6584fd12e6b621a97e04c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xbc, 0x1d, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x73d00000, 0x6, 0x9, 0x7fff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x112}]}, {0x64, 0x6, "d7522e7bc1ad9acc46befc9f72ebf73f891d466f3966f49d936f3f47daec2bbb4440b5ba617807409038ddaa33e746ae96e1a51d0a466187c69fcaeea773dc068574c917cea5d3e51aa7c9d8ff7da7392fe266105bb2fe0d9c5558a24f370e3a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x30, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x8, 0x6, "c308d17f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x88, 0xd, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x462, 0x0, 0x7, 0x9}, 0x9cb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x6, 0x6, 0xfc3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0xa, 0x9, 0x8}, 0xffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x2a4}}, 0x0) 3.534864973s ago: executing program 1 (id=580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x41, 0x4481) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x101, 0x0, {0x9, 0xd7, 0x1c, 0x7, 0x20fe, 0x401, 0x7, 0xa, 0x0, 0x50, 0x8000, 0x7e9, 0x401, 0x5, "cbd7d7ab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300)) 3.534370383s ago: executing program 3 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000006000000000024000800000045"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r3}, 0x38) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) r5 = syz_open_pts(r4, 0x121500) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x3) 3.143963021s ago: executing program 3 (id=582): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 2.187561495s ago: executing program 3 (id=583): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) 1.992757605s ago: executing program 4 (id=584): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwritev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x3, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000020}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x14) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r5, 0x8, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8850}, 0x800) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000012c0)={{0x6, 0x5, 0x2, 0x5}, 'syz1\x00', 0x14}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r6, 0x5501) 1.992434835s ago: executing program 3 (id=585): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') pread64(r3, &(0x7f0000000300)=""/147, 0x93, 0xf4be) 1.383946654s ago: executing program 3 (id=586): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) dup3(r0, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r3, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f0000000640)='hQ', 0x2}], 0x2, 0xffffffff, 0x4) 1.236297569s ago: executing program 4 (id=587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) 1.092944163s ago: executing program 4 (id=588): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1e, 0x1, 0xfffffffd, 0x0, {0x7}, [@NDA_DST_MAC={0xa, 0xd, @multicast}]}, 0x28}}, 0x0) 1.090454353s ago: executing program 3 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_delete(0x0) 0s ago: executing program 4 (id=590): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 65.487097][ T4171] cgroup: Unknown subsys name 'net' [ 65.623700][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.098531][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.352084][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 69.386678][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 69.502927][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 69.529291][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.537065][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.545628][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.562057][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 69.576106][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.583664][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.591913][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.622493][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.671724][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.704494][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.714008][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.721359][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.729854][ T4181] device bridge_slave_0 entered promiscuous mode [ 69.756380][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.763706][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.771771][ T4181] device bridge_slave_1 entered promiscuous mode [ 69.831537][ T4185] team0: Port device team_slave_0 added [ 69.849344][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.856481][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.864675][ T4197] device bridge_slave_0 entered promiscuous mode [ 69.872629][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.880298][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.888869][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.897713][ T4185] team0: Port device team_slave_1 added [ 69.905677][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.923101][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.930832][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.939033][ T4197] device bridge_slave_1 entered promiscuous mode [ 69.946301][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.953483][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.961734][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.976698][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.040637][ T4181] team0: Port device team_slave_0 added [ 70.047554][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.054538][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.080916][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.092962][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.100333][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.109611][ T4186] device bridge_slave_0 entered promiscuous mode [ 70.141453][ T4181] team0: Port device team_slave_1 added [ 70.147840][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.154813][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.181397][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.193472][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.206490][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.214640][ T4186] device bridge_slave_1 entered promiscuous mode [ 70.223894][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.242757][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.265806][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.286102][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.322643][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.339518][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.346506][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.372619][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.386838][ T4188] team0: Port device team_slave_0 added [ 70.404585][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.422487][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.429649][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.456048][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.476160][ T4188] team0: Port device team_slave_1 added [ 70.492012][ T4197] team0: Port device team_slave_0 added [ 70.500987][ T4197] team0: Port device team_slave_1 added [ 70.552721][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.559624][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.579940][ T4186] team0: Port device team_slave_0 added [ 70.588782][ T4186] team0: Port device team_slave_1 added [ 70.594997][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.602169][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.628111][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.640806][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.648396][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.674963][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.704269][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.711394][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.737523][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.776060][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.783241][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.809700][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.828720][ T4181] device hsr_slave_0 entered promiscuous mode [ 70.835484][ T4181] device hsr_slave_1 entered promiscuous mode [ 70.842404][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.850427][ T4181] Cannot create hsr debugfs directory [ 70.860126][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.867154][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.893765][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.936369][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.943399][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.970246][ T2286] Bluetooth: hci0: command 0x0409 tx timeout [ 70.976745][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.994535][ T4197] device hsr_slave_0 entered promiscuous mode [ 71.001935][ T4197] device hsr_slave_1 entered promiscuous mode [ 71.008651][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.016218][ T4197] Cannot create hsr debugfs directory [ 71.057390][ T4198] Bluetooth: hci1: command 0x0409 tx timeout [ 71.066731][ T4198] Bluetooth: hci3: command 0x0409 tx timeout [ 71.078605][ T4198] Bluetooth: hci2: command 0x0409 tx timeout [ 71.094602][ T4188] device hsr_slave_0 entered promiscuous mode [ 71.101736][ T4188] device hsr_slave_1 entered promiscuous mode [ 71.108630][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.116201][ T4188] Cannot create hsr debugfs directory [ 71.139033][ T4198] Bluetooth: hci4: command 0x0409 tx timeout [ 71.175178][ T4186] device hsr_slave_0 entered promiscuous mode [ 71.182327][ T4186] device hsr_slave_1 entered promiscuous mode [ 71.189116][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.196681][ T4186] Cannot create hsr debugfs directory [ 71.371721][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.378332][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.447662][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.460288][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.480266][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.490561][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.561497][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.588355][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.598513][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.615669][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.668185][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.678481][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.694412][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.708221][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.720416][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.741703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.751871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.766027][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.808845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.818769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.828630][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.835922][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.844626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.858121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.866517][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.873634][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.882307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.892385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.918634][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.928593][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.940305][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.973103][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.989441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.999791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.011681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.020312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.051308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.060103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.078253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.088617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.099375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.108199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.128881][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.144338][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.154363][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.175518][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.193331][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.208666][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.229913][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.242741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.254686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.298682][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.305692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.322053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.333895][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.341244][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.356939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.366312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.375819][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.382939][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.394361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.412660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.434437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.443843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.452890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.466942][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.477949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.489852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.500929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.539349][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.547375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.556566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.566076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.575758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.584365][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.591508][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.600258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.609577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.618136][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.625196][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.633427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.642573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.651989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.664403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.673830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.709502][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.718976][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.730183][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.739116][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.749559][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.758961][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.768085][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.776622][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.785364][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.794504][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.809775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.818783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.829744][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.856943][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.873254][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.893440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.911483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.925146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.936339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.959842][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.970208][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.981862][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.023448][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.035867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.045996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.055320][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 73.069970][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.077080][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.085789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.098230][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.106487][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.116310][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.126174][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.135291][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.137777][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 73.142429][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.154926][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 73.163052][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 73.174565][ T4185] device veth0_vlan entered promiscuous mode [ 73.190231][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.205975][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.213712][ T1107] Bluetooth: hci4: command 0x041b tx timeout [ 73.226430][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.259384][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.270770][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.286630][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.302243][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.313020][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.328069][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.337054][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.347552][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.356052][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.365353][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.374454][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.383384][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.392481][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.400388][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.408008][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.416437][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.426080][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.434493][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.454220][ T4185] device veth1_vlan entered promiscuous mode [ 73.468095][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.476320][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.486595][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.498563][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.505671][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.514348][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.522100][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.550555][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.569439][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.579254][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.588517][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.597996][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.606400][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.613518][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.622311][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.632502][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.642775][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.652537][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.664047][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.684344][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.697033][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.720732][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.729855][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.771028][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.787634][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.796567][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.806378][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.815292][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.825206][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.834153][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.842717][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.861266][ T4185] device veth0_macvtap entered promiscuous mode [ 73.873011][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.882691][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.893478][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.908429][ T4181] device veth0_vlan entered promiscuous mode [ 73.917669][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.930771][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.948362][ T4185] device veth1_macvtap entered promiscuous mode [ 73.972858][ T4181] device veth1_vlan entered promiscuous mode [ 73.988215][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.996312][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.005483][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.013645][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.023671][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.053593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.062974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.087011][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.125294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.134940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.145621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.155119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.163825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.173105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.182374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.200285][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.211410][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.222620][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.231761][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.242461][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.255436][ T4188] device veth0_vlan entered promiscuous mode [ 74.264509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.279807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.298333][ T4181] device veth0_macvtap entered promiscuous mode [ 74.315502][ T4181] device veth1_macvtap entered promiscuous mode [ 74.333413][ T4188] device veth1_vlan entered promiscuous mode [ 74.349569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.359453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.368749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.377673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.385651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.395150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.404902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.455461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.465164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.473912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.482789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.491505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.505347][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.516806][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.529992][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.542263][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.553547][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.565197][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.586894][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.596525][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.606465][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.615354][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.626048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.635431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.644408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.656379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.671071][ T4197] device veth0_vlan entered promiscuous mode [ 74.692764][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.720010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.728356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.755626][ T4188] device veth0_macvtap entered promiscuous mode [ 74.768633][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.788490][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.806150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.816315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.826023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.835584][ T4188] device veth1_macvtap entered promiscuous mode [ 74.856442][ T4197] device veth1_vlan entered promiscuous mode [ 74.864507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.873108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.882170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.892116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.964000][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.976619][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.986655][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.000125][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.011926][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.029860][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.034671][ T4186] device veth0_vlan entered promiscuous mode [ 75.044800][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.058083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.067118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.076472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.085447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.094100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.107076][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.117825][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.128416][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 75.134814][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.145385][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.156876][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.176803][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.185897][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.194982][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.203922][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.213050][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 75.219258][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 75.225745][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 75.232226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.240539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.251047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.260004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.271541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.280361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.288690][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 75.314239][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.338913][ T4197] device veth0_macvtap entered promiscuous mode [ 75.341650][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.367948][ T4186] device veth1_vlan entered promiscuous mode [ 75.384517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.394194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.402557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.411559][ T4197] device veth1_macvtap entered promiscuous mode [ 75.481850][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.504105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.514973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.521395][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.535244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.547206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.562034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.607058][ T4186] device veth0_macvtap entered promiscuous mode [ 75.642615][ T4186] device veth1_macvtap entered promiscuous mode [ 75.679423][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.705357][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.715446][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.726002][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.736349][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.747008][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.759370][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.771313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.780477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.789353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.798270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.970800][ T4300] input: syz1 as /devices/virtual/input/input5 [ 76.264394][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.309640][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.550538][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.561267][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.572432][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.595439][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.606740][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.625798][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.643682][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.654448][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.668112][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.681208][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.846124][ T4304] loop1: detected capacity change from 0 to 512 [ 76.925032][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.021184][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.112930][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.204236][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.295173][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.402215][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.485940][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.512951][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 77.519125][ T4238] Bluetooth: hci2: command 0x0419 tx timeout [ 77.522600][ T4304] EXT4-fs (loop1): Ignoring removed bh option [ 77.525230][ T4238] Bluetooth: hci3: command 0x0419 tx timeout [ 77.531411][ T4304] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 77.537877][ T4238] Bluetooth: hci1: command 0x0419 tx timeout [ 77.551689][ T4238] Bluetooth: hci4: command 0x0419 tx timeout [ 77.559316][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.574400][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.589179][ T4304] EXT4-fs (loop1): 1 truncate cleaned up [ 77.594880][ T4304] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,abort,,errors=continue. Quota mode: writeback. [ 77.696479][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.724617][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.745524][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.755658][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.772097][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.785531][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.802180][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.810191][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.819434][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.829222][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.846258][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.864364][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.875923][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.930509][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.956973][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.977730][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.986601][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.040616][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.055388][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.072014][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.086120][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.124986][ T4313] syz.1.7 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.138185][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.157378][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.166900][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.249329][ T4314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.394122][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.410487][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.461061][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.470418][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.537382][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.556543][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.604497][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.606526][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.623604][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.627471][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.666299][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.803681][ T4319] loop3: detected capacity change from 0 to 1024 [ 79.144800][ T4319] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.235982][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.843187][ T4326] loop2: detected capacity change from 0 to 512 [ 79.954870][ T4326] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,dioread_lock,,errors=continue. Quota mode: writeback. [ 80.033674][ T4326] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.183335][ T4326] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.3: corrupted inode contents [ 80.264886][ T4326] EXT4-fs error (device loop2): ext4_dirty_inode:6046: inode #2: comm syz.2.3: mark_inode_dirty error [ 80.335270][ T4326] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.3: corrupted inode contents [ 80.430031][ T4326] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.3: mark_inode_dirty error [ 81.186441][ T4342] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9'. [ 82.179182][ T4359] loop3: detected capacity change from 0 to 256 [ 83.487185][ C0] sched: RT throttling activated [ 83.623871][ T4359] FAT-fs (loop3): Directory bread(block 64) failed [ 83.631124][ T4359] FAT-fs (loop3): Directory bread(block 65) failed [ 83.638473][ T4359] FAT-fs (loop3): Directory bread(block 66) failed [ 83.645198][ T4359] FAT-fs (loop3): Directory bread(block 67) failed [ 83.652391][ T4359] FAT-fs (loop3): Directory bread(block 68) failed [ 83.659186][ T4359] FAT-fs (loop3): Directory bread(block 69) failed [ 83.666359][ T4359] FAT-fs (loop3): Directory bread(block 70) failed [ 83.673179][ T4359] FAT-fs (loop3): Directory bread(block 71) failed [ 83.680278][ T4359] FAT-fs (loop3): Directory bread(block 72) failed [ 83.687024][ T4359] FAT-fs (loop3): Directory bread(block 73) failed [ 84.820915][ T4379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.820848][ T4382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.887957][ T4379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.441764][ T4231] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 86.740850][ T4405] loop1: detected capacity change from 0 to 512 [ 86.873207][ T23] cfg80211: failed to load regulatory.db [ 86.988476][ T4231] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 87.116467][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.514625][ T4231] usb 3-1: config 0 descriptor?? [ 88.498532][ T4231] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 88.514045][ T4405] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.27: bg 0: block 393: padding at end of block bitmap is not set [ 88.534852][ T4405] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 88.572288][ T4405] EXT4-fs (loop1): 2 truncates cleaned up [ 88.578331][ T4405] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.353196][ T4410] loop4: detected capacity change from 0 to 256 [ 89.405697][ T4412] loop0: detected capacity change from 0 to 512 [ 89.433531][ T4410] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 89.462893][ T4412] EXT4-fs (loop0): Ignoring removed orlov option [ 89.517340][ T4412] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.30: corrupted in-inode xattr [ 89.549908][ T4412] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.30: couldn't read orphan inode 15 (err -117) [ 89.585353][ T4410] exFAT-fs (loop4): error, invalid size(size(0) > aligned(9223372036854777344) [ 89.585353][ T4410] [ 89.600814][ T4410] exFAT-fs (loop4): Filesystem has been set read-only [ 89.616392][ T4412] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 89.682460][ T4414] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 89.740004][ T4414] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 90.025035][ T4422] loop4: detected capacity change from 0 to 1024 [ 90.068612][ T4422] ======================================================= [ 90.068612][ T4422] WARNING: The mand mount option has been deprecated and [ 90.068612][ T4422] and is ignored by this kernel. Remove the mand [ 90.068612][ T4422] option from the mount to silence this warning. [ 90.068612][ T4422] ======================================================= [ 90.486634][ T4422] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.629371][ T4422] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock,. Quota mode: none. [ 90.697014][ T4422] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.877437][ T4231] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 91.117253][ T4231] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 93.810177][ T4231] asix: probe of 3-1:0.0 failed with error -71 [ 93.830275][ T4231] usb 3-1: USB disconnect, device number 2 [ 94.258816][ T4448] Zero length message leads to an empty skb [ 94.321667][ T4448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.443279][ T4448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.483768][ T4448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.622870][ T4456] netlink: 'syz.2.42': attribute type 3 has an invalid length. [ 95.752891][ T4476] netlink: 68 bytes leftover after parsing attributes in process `syz.2.49'. [ 95.786824][ T4478] loop1: detected capacity change from 0 to 512 [ 95.962755][ T4478] EXT4-fs (loop1): Ignoring removed orlov option [ 96.069586][ T4484] loop3: detected capacity change from 0 to 256 [ 96.949088][ T4491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.988629][ T4484] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 97.001122][ T4484] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 97.017510][ T4478] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.50: corrupted in-inode xattr [ 97.038374][ T4484] attempt to access beyond end of device [ 97.038374][ T4484] loop3: rw=524288, want=408, limit=256 [ 97.051565][ T4484] attempt to access beyond end of device [ 97.051565][ T4484] loop3: rw=524288, want=664, limit=256 [ 97.062925][ T4484] attempt to access beyond end of device [ 97.062925][ T4484] loop3: rw=0, want=288, limit=256 [ 97.081630][ T26] audit: type=1800 audit(1760999926.818:2): pid=4484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.53" name="file1" dev="loop3" ino=1048593 res=0 errno=0 [ 97.155960][ T4478] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.50: couldn't read orphan inode 15 (err -117) [ 97.200678][ T4478] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 97.259136][ T4494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.278564][ T4491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.942772][ T4524] netlink: 104 bytes leftover after parsing attributes in process `syz.4.62'. [ 100.221432][ T4527] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 100.262812][ T4527] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 100.494023][ T4540] input: syz1 as /devices/virtual/input/input6 [ 101.355919][ T4547] loop4: detected capacity change from 0 to 256 [ 101.434091][ T4547] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 101.451841][ T4547] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 101.515071][ T4547] attempt to access beyond end of device [ 101.515071][ T4547] loop4: rw=524288, want=408, limit=256 [ 101.536058][ T4547] attempt to access beyond end of device [ 101.536058][ T4547] loop4: rw=524288, want=664, limit=256 [ 101.549299][ T4547] attempt to access beyond end of device [ 101.549299][ T4547] loop4: rw=0, want=288, limit=256 [ 101.600222][ T26] audit: type=1800 audit(1760999931.308:3): pid=4547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.68" name="file1" dev="loop4" ino=1048594 res=0 errno=0 [ 101.950164][ T4552] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.957619][ T4552] overlayfs: failed to set xattr on upper [ 101.965005][ T4552] overlayfs: ...falling back to index=off,metacopy=off. [ 103.715579][ T4582] loop4: detected capacity change from 0 to 512 [ 103.747907][ T4198] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 103.976502][ T4582] EXT4-fs (loop4): Ignoring removed orlov option [ 104.474794][ T4582] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.77: corrupted in-inode xattr [ 104.741122][ T4582] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.77: couldn't read orphan inode 15 (err -117) [ 104.767653][ T4582] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 104.867510][ T4198] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 104.887121][ T4198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.950756][ T4198] usb 2-1: config 0 descriptor?? [ 105.325019][ T4606] loop2: detected capacity change from 0 to 256 [ 105.520155][ T4606] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 105.535299][ T4606] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 105.595675][ T4606] attempt to access beyond end of device [ 105.595675][ T4606] loop2: rw=524288, want=408, limit=256 [ 105.619102][ T4606] attempt to access beyond end of device [ 105.619102][ T4606] loop2: rw=524288, want=664, limit=256 [ 105.630925][ T4606] attempt to access beyond end of device [ 105.630925][ T4606] loop2: rw=0, want=288, limit=256 [ 105.676961][ T26] audit: type=1800 audit(1760999935.388:4): pid=4606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.82" name="file1" dev="loop2" ino=1048595 res=0 errno=0 [ 105.847474][ T4198] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 105.924031][ T4198] asix: probe of 2-1:0.0 failed with error -71 [ 106.041595][ T4198] usb 2-1: USB disconnect, device number 2 [ 106.149370][ T4617] loop2: detected capacity change from 0 to 256 [ 106.220067][ T4617] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 106.606254][ T4629] loop1: detected capacity change from 0 to 256 [ 109.849399][ T4629] FAT-fs (loop1): Directory bread(block 64) failed [ 109.856046][ T4629] FAT-fs (loop1): Directory bread(block 65) failed [ 109.862733][ T4629] FAT-fs (loop1): Directory bread(block 66) failed [ 109.869377][ T4629] FAT-fs (loop1): Directory bread(block 67) failed [ 109.875967][ T4629] FAT-fs (loop1): Directory bread(block 68) failed [ 109.882585][ T4629] FAT-fs (loop1): Directory bread(block 69) failed [ 109.889253][ T4629] FAT-fs (loop1): Directory bread(block 70) failed [ 109.895797][ T4629] FAT-fs (loop1): Directory bread(block 71) failed [ 109.902421][ T4629] FAT-fs (loop1): Directory bread(block 72) failed [ 109.909002][ T4629] FAT-fs (loop1): Directory bread(block 73) failed [ 110.149301][ T4647] loop2: detected capacity change from 0 to 512 [ 110.226290][ T4648] loop0: detected capacity change from 0 to 256 [ 110.495992][ T4648] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 110.511826][ T4648] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 110.595367][ T4647] EXT4-fs (loop2): Ignoring removed orlov option [ 110.793513][ T4644] attempt to access beyond end of device [ 110.793513][ T4644] loop0: rw=524288, want=408, limit=256 [ 110.824637][ T4644] attempt to access beyond end of device [ 110.824637][ T4644] loop0: rw=524288, want=664, limit=256 [ 110.836173][ T4644] attempt to access beyond end of device [ 110.836173][ T4644] loop0: rw=0, want=288, limit=256 [ 110.858593][ T26] audit: type=1800 audit(1760999940.588:5): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.93" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 111.079512][ T4647] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.94: corrupted in-inode xattr [ 111.092243][ T4647] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.94: couldn't read orphan inode 15 (err -117) [ 111.104635][ T4647] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 114.673461][ T4689] loop3: detected capacity change from 0 to 256 [ 114.771091][ T4689] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 116.536998][ T4715] loop2: detected capacity change from 0 to 256 [ 117.688712][ T4715] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 117.702206][ T4715] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 117.766305][ T4715] attempt to access beyond end of device [ 117.766305][ T4715] loop2: rw=524288, want=408, limit=256 [ 117.788138][ T4715] attempt to access beyond end of device [ 117.788138][ T4715] loop2: rw=524288, want=664, limit=256 [ 117.799944][ T4715] attempt to access beyond end of device [ 117.799944][ T4715] loop2: rw=0, want=288, limit=256 [ 117.842571][ T26] audit: type=1800 audit(1760999947.558:6): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.112" name="file1" dev="loop2" ino=1048597 res=0 errno=0 [ 119.101231][ T4734] loop1: detected capacity change from 0 to 256 [ 119.237280][ T4734] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 120.135211][ T4749] loop1: detected capacity change from 0 to 512 [ 120.379014][ T4749] EXT4-fs (loop1): Ignoring removed orlov option [ 120.523164][ T4749] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.121: corrupted in-inode xattr [ 120.563643][ T4749] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.121: couldn't read orphan inode 15 (err -117) [ 120.679647][ T4760] input: syz1 as /devices/virtual/input/input8 [ 121.399957][ T4749] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 121.757999][ T4767] loop2: detected capacity change from 0 to 256 [ 122.564329][ T4767] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 122.577655][ T4767] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 122.597404][ T4766] attempt to access beyond end of device [ 122.597404][ T4766] loop2: rw=524288, want=408, limit=256 [ 122.610004][ T4766] attempt to access beyond end of device [ 122.610004][ T4766] loop2: rw=524288, want=664, limit=256 [ 122.621330][ T4766] attempt to access beyond end of device [ 122.621330][ T4766] loop2: rw=0, want=288, limit=256 [ 122.632322][ T26] audit: type=1800 audit(1760999952.378:7): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.126" name="file1" dev="loop2" ino=1048598 res=0 errno=0 [ 122.914256][ T4771] loop1: detected capacity change from 0 to 256 [ 123.190235][ T4771] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 123.204018][ T4771] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 123.262664][ T4771] attempt to access beyond end of device [ 123.262664][ T4771] loop1: rw=524288, want=408, limit=256 [ 123.282801][ T4771] attempt to access beyond end of device [ 123.282801][ T4771] loop1: rw=524288, want=664, limit=256 [ 123.294638][ T4771] attempt to access beyond end of device [ 123.294638][ T4771] loop1: rw=0, want=288, limit=256 [ 123.336584][ T26] audit: type=1800 audit(1760999953.048:8): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.127" name="file1" dev="loop1" ino=1048599 res=0 errno=0 [ 124.050935][ T4782] loop1: detected capacity change from 0 to 256 [ 124.163964][ T4782] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 125.494452][ T4796] netlink: 'syz.0.135': attribute type 12 has an invalid length. [ 126.501952][ T4802] loop0: detected capacity change from 0 to 512 [ 126.562364][ T4802] EXT4-fs (loop0): Ignoring removed orlov option [ 126.599306][ T4802] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.137: corrupted in-inode xattr [ 126.619819][ T4802] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.137: couldn't read orphan inode 15 (err -117) [ 126.651966][ T4802] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 127.007450][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.109356][ T4815] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.443640][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 127.487279][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.529768][ T1107] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.575248][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.607839][ T1107] usb 5-1: config 0 descriptor?? [ 127.696526][ T1107] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 127.723066][ T4832] netlink: 'syz.2.144': attribute type 13 has an invalid length. [ 129.086187][ T4849] loop3: detected capacity change from 0 to 256 [ 129.269241][ T4849] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 129.282984][ T4849] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 129.924743][ T1107] usb 5-1: USB disconnect, device number 2 [ 130.178475][ T4862] loop1: detected capacity change from 0 to 256 [ 130.253940][ T4862] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 130.267724][ T4862] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 130.369398][ T4862] attempt to access beyond end of device [ 130.369398][ T4862] loop1: rw=524288, want=408, limit=256 [ 130.400976][ T4862] attempt to access beyond end of device [ 130.400976][ T4862] loop1: rw=524288, want=664, limit=256 [ 130.412961][ T4862] attempt to access beyond end of device [ 130.412961][ T4862] loop1: rw=0, want=288, limit=256 [ 130.459195][ T26] audit: type=1800 audit(1760999960.168:9): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.153" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 130.989275][ T4876] netlink: 'syz.4.159': attribute type 12 has an invalid length. [ 132.809645][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.816264][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.518594][ T4896] loop3: detected capacity change from 0 to 256 [ 133.584402][ T4896] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 133.781394][ T4906] loop1: detected capacity change from 0 to 256 [ 134.886359][ T4906] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 134.900152][ T4906] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 134.953921][ T4906] attempt to access beyond end of device [ 134.953921][ T4906] loop1: rw=524288, want=408, limit=256 [ 134.978293][ T4906] attempt to access beyond end of device [ 134.978293][ T4906] loop1: rw=524288, want=664, limit=256 [ 134.989927][ T4906] attempt to access beyond end of device [ 134.989927][ T4906] loop1: rw=0, want=288, limit=256 [ 135.033430][ T26] audit: type=1800 audit(1760999964.748:10): pid=4906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.168" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 136.777405][ T4277] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.807788][ T4277] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 137.837218][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.875473][ T4277] usb 2-1: config 0 descriptor?? [ 137.888223][ T4946] overlayfs: failed to resolve './file1': -2 [ 138.223117][ T4951] netlink: 'syz.2.181': attribute type 12 has an invalid length. [ 138.455592][ T4277] logitech-hidpp-device 0003:046D:C086.0001: hidraw0: USB HID vd.12 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 139.642807][ T4964] loop4: detected capacity change from 0 to 256 [ 139.841409][ T4964] FAT-fs (loop4): Directory bread(block 64) failed [ 139.849037][ T4964] FAT-fs (loop4): Directory bread(block 65) failed [ 139.856418][ T4964] FAT-fs (loop4): Directory bread(block 66) failed [ 139.863207][ T4964] FAT-fs (loop4): Directory bread(block 67) failed [ 139.870336][ T4964] FAT-fs (loop4): Directory bread(block 68) failed [ 139.877070][ T4964] FAT-fs (loop4): Directory bread(block 69) failed [ 139.884162][ T4964] FAT-fs (loop4): Directory bread(block 70) failed [ 139.890889][ T4964] FAT-fs (loop4): Directory bread(block 71) failed [ 139.897993][ T4964] FAT-fs (loop4): Directory bread(block 72) failed [ 139.904708][ T4964] FAT-fs (loop4): Directory bread(block 73) failed [ 140.421384][ T4295] usb 2-1: USB disconnect, device number 3 [ 140.655990][ T4968] loop1: detected capacity change from 0 to 256 [ 140.785953][ T4968] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 142.066474][ T4979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.167701][ T4979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.199029][ T4979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.307377][ T4295] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.727383][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 144.786768][ T4295] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 145.032023][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.061153][ T5009] loop0: detected capacity change from 0 to 256 [ 145.162757][ T5012] loop4: detected capacity change from 0 to 256 [ 145.202596][ T4295] usb 2-1: config 0 descriptor?? [ 145.300943][ T4295] usb 2-1: can't set config #0, error -71 [ 145.392959][ T4295] usb 2-1: USB disconnect, device number 4 [ 145.717842][ T5012] FAT-fs (loop4): Directory bread(block 64) failed [ 145.724726][ T5012] FAT-fs (loop4): Directory bread(block 65) failed [ 145.731920][ T5012] FAT-fs (loop4): Directory bread(block 66) failed [ 145.738757][ T5012] FAT-fs (loop4): Directory bread(block 67) failed [ 145.745974][ T5012] FAT-fs (loop4): Directory bread(block 68) failed [ 145.752923][ T5012] FAT-fs (loop4): Directory bread(block 69) failed [ 145.760172][ T5012] FAT-fs (loop4): Directory bread(block 70) failed [ 145.766923][ T5012] FAT-fs (loop4): Directory bread(block 71) failed [ 145.774254][ T5012] FAT-fs (loop4): Directory bread(block 72) failed [ 145.781342][ T5012] FAT-fs (loop4): Directory bread(block 73) failed [ 146.237065][ T5009] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 148.029899][ T5024] binder: 5023:5024 ioctl 4018620d 0 returned -22 [ 149.719525][ T5044] binder: 5043:5044 ioctl 401c5820 200000000000 returned -22 [ 150.259281][ T5050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.544035][ T5054] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.821292][ T5061] loop1: detected capacity change from 0 to 256 [ 150.944332][ T5061] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 151.044413][ T5068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.216'. [ 151.862391][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.427867][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 152.522807][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.814873][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.008079][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.019075][ T23] usb 3-1: config 0 descriptor?? [ 153.059678][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 154.889619][ T5093] fuse: Bad value for 'group_id' [ 154.932715][ T5093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 154.963105][ T13] usb 3-1: USB disconnect, device number 3 [ 155.188839][ T5093] device bridge_slave_1 left promiscuous mode [ 155.196510][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.277111][ T5100] input: syz0 as /devices/virtual/input/input11 [ 155.326798][ T5093] device bridge_slave_0 left promiscuous mode [ 155.375941][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.866875][ T5110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.944967][ T5110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.988318][ T5110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.525949][ T5127] kvm: vcpu 0: requested 14 ns lapic timer period limited to 200000 ns [ 158.097255][ T23] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 158.116384][ T5150] binder: 5149:5150 ioctl 4018620d 0 returned -22 [ 158.174040][ T5153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.248972][ T5153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.351688][ T5153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.568494][ T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 158.650664][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.898077][ T23] usb 3-1: config 0 descriptor?? [ 159.377420][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 159.391837][ T5165] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.846020][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 159.857817][ T23] asix: probe of 3-1:0.0 failed with error -71 [ 159.876496][ T23] usb 3-1: USB disconnect, device number 4 [ 160.561457][ T5189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.641939][ T5193] loop2: detected capacity change from 0 to 512 [ 160.655566][ T5189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.698978][ T5189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.774197][ T5193] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 160.836293][ T5193] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 160.856677][ T5193] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 161.058635][ T5202] netlink: 'syz.1.257': attribute type 13 has an invalid length. [ 161.284358][ T5193] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 161.398914][ T5193] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 161.775306][ T5193] EXT4-fs (loop2): orphan cleanup on readonly fs [ 161.817547][ T5193] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.256: bg 0: block 34: padding at end of block bitmap is not set [ 161.910670][ T5193] Quota error (device loop2): write_blk: dquota write failed [ 161.940003][ T5193] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 161.986845][ T5193] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.256: Failed to acquire dquot type 1 [ 162.048456][ T5193] EXT4-fs (loop2): 1 truncate cleaned up [ 162.086700][ T5193] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 162.492310][ T4198] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.867472][ T4198] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 162.898881][ T4198] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.958126][ T4198] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.016026][ T4198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.109270][ T4198] usb 5-1: config 0 descriptor?? [ 163.820641][ T4198] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 164.257846][ T5253] process 'syz.0.274' launched './file1' with NULL argv: empty string added [ 164.330606][ T4252] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.448913][ T5257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.528051][ T5257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.589298][ T4252] usb 3-1: Using ep0 maxpacket: 16 [ 164.596532][ T5263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.707479][ T4252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.724205][ T4252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 164.749984][ T4252] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.768210][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.798465][ T4252] usb 3-1: config 0 descriptor?? [ 165.287639][ T5274] loop1: detected capacity change from 0 to 256 [ 165.466085][ T5274] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 165.479898][ T5274] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 165.529787][ T5274] attempt to access beyond end of device [ 165.529787][ T5274] loop1: rw=524288, want=408, limit=256 [ 165.550656][ T5274] attempt to access beyond end of device [ 165.550656][ T5274] loop1: rw=524288, want=664, limit=256 [ 165.562518][ T5274] attempt to access beyond end of device [ 165.562518][ T5274] loop1: rw=0, want=288, limit=256 [ 165.730419][ T4252] HID 045e:07da: Invalid code 65791 type 1 [ 165.757318][ T26] audit: type=1800 audit(1760999995.318:11): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.280" name="file1" dev="loop1" ino=1048606 res=0 errno=0 [ 166.103161][ T4252] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input12 [ 166.209278][ T4252] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 166.241470][ T5021] usb 5-1: USB disconnect, device number 3 [ 167.444869][ T23] usb 3-1: USB disconnect, device number 5 [ 167.561266][ T5299] loop0: detected capacity change from 0 to 256 [ 168.257304][ T5021] Bluetooth: hci5: command 0x1003 tx timeout [ 168.264933][ T146] Bluetooth: hci5: sending frame failed (-49) [ 168.278626][ T5299] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 168.291091][ T5299] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 168.313014][ T5298] attempt to access beyond end of device [ 168.313014][ T5298] loop0: rw=524288, want=408, limit=256 [ 168.325813][ T5298] attempt to access beyond end of device [ 168.325813][ T5298] loop0: rw=524288, want=664, limit=256 [ 168.337671][ T5298] attempt to access beyond end of device [ 168.337671][ T5298] loop0: rw=0, want=288, limit=256 [ 168.349467][ T26] audit: type=1800 audit(1760999998.098:12): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.286" name="file1" dev="loop0" ino=1048607 res=0 errno=0 [ 168.996019][ T5320] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 169.023127][ T5320] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 169.836591][ T5337] usb usb8: usbfs: process 5337 (syz.0.298) did not claim interface 0 before use [ 170.124674][ T5343] kvm: pic: non byte write [ 170.267467][ T2286] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.339394][ T4253] Bluetooth: hci5: command 0x1001 tx timeout [ 170.345673][ T146] Bluetooth: hci5: sending frame failed (-49) [ 170.477322][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.847244][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 170.877339][ T2286] usb 3-1: config index 0 descriptor too short (expected 64871, got 45) [ 170.967365][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 170.978780][ T23] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 170.992257][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.999451][ T23] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 171.008915][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.027271][ T23] usb 2-1: config 0 descriptor?? [ 171.062867][ T2286] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 171.084167][ T2286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.092879][ T2286] usb 3-1: Product: syz [ 171.097072][ T2286] usb 3-1: Manufacturer: syz [ 171.107714][ T2286] usb 3-1: SerialNumber: syz [ 171.197893][ T4253] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.510229][ T23] hid-generic 0003:0458:5017.0003: unknown main item tag 0x0 [ 171.523973][ T23] hid-generic 0003:0458:5017.0003: unknown main item tag 0x0 [ 171.555157][ T23] hid-generic 0003:0458:5017.0003: unknown main item tag 0x0 [ 171.563181][ T23] hid-generic 0003:0458:5017.0003: unknown main item tag 0x0 [ 171.577033][ T23] hid-generic 0003:0458:5017.0003: unknown main item tag 0x0 [ 171.601665][ T23] hid-generic 0003:0458:5017.0003: hidraw0: USB HID v0.03 Device [HID 0458:5017] on usb-dummy_hcd.1-1/input0 [ 171.647544][ T4253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.664310][ T4253] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 171.674542][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.698611][ T4253] usb 5-1: config 0 descriptor?? [ 171.722463][ T4295] usb 2-1: USB disconnect, device number 5 [ 171.825383][ T2286] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 172.179856][ T4253] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 172.196120][ T4253] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input13 [ 172.313242][ T4253] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 172.407581][ T4253] Bluetooth: hci5: command 0x1009 tx timeout [ 172.683542][ T4253] usb 5-1: USB disconnect, device number 4 [ 173.025657][ T5395] loop0: detected capacity change from 0 to 256 [ 173.234504][ T5395] FAT-fs (loop0): Directory bread(block 64) failed [ 173.241450][ T5395] FAT-fs (loop0): Directory bread(block 65) failed [ 173.248922][ T5395] FAT-fs (loop0): Directory bread(block 66) failed [ 173.255751][ T5395] FAT-fs (loop0): Directory bread(block 67) failed [ 173.263189][ T5395] FAT-fs (loop0): Directory bread(block 68) failed [ 173.270121][ T5395] FAT-fs (loop0): Directory bread(block 69) failed [ 173.277218][ T5395] FAT-fs (loop0): Directory bread(block 70) failed [ 173.283990][ T5395] FAT-fs (loop0): Directory bread(block 71) failed [ 173.291002][ T5395] FAT-fs (loop0): Directory bread(block 72) failed [ 173.297859][ T5395] FAT-fs (loop0): Directory bread(block 73) failed [ 173.944373][ T4295] usb 3-1: USB disconnect, device number 6 [ 174.629612][ T5406] input: syz1 as /devices/virtual/input/input14 [ 178.034795][ T2286] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 178.047892][ T5437] netlink: 'syz.4.325': attribute type 12 has an invalid length. [ 178.374804][ T2286] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.697460][ T5467] input: syz1 as /devices/virtual/input/input15 [ 180.618523][ T5468] fido_id[5468]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 181.623121][ T5463] input: syz1 as /devices/virtual/input/input16 [ 183.757097][ T5520] capability: warning: `syz.3.348' uses 32-bit capabilities (legacy support in use) [ 184.929365][ T5532] loop4: detected capacity change from 0 to 256 [ 185.556366][ T5532] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 185.568986][ T5532] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 185.606419][ T5530] attempt to access beyond end of device [ 185.606419][ T5530] loop4: rw=524288, want=408, limit=256 [ 185.620287][ T5530] attempt to access beyond end of device [ 185.620287][ T5530] loop4: rw=524288, want=664, limit=256 [ 185.632083][ T5530] attempt to access beyond end of device [ 185.632083][ T5530] loop4: rw=0, want=288, limit=256 [ 185.657305][ T26] audit: type=1800 audit(1761000015.378:13): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.349" name="file1" dev="loop4" ino=1048608 res=0 errno=0 [ 186.218590][ T5547] loop2: detected capacity change from 0 to 256 [ 187.639678][ T5547] FAT-fs (loop2): Directory bread(block 64) failed [ 187.646506][ T5547] FAT-fs (loop2): Directory bread(block 65) failed [ 187.653881][ T5547] FAT-fs (loop2): Directory bread(block 66) failed [ 187.660917][ T5547] FAT-fs (loop2): Directory bread(block 67) failed [ 187.668258][ T5547] FAT-fs (loop2): Directory bread(block 68) failed [ 187.675015][ T5547] FAT-fs (loop2): Directory bread(block 69) failed [ 187.682340][ T5547] FAT-fs (loop2): Directory bread(block 70) failed [ 187.689171][ T5547] FAT-fs (loop2): Directory bread(block 71) failed [ 187.696391][ T5547] FAT-fs (loop2): Directory bread(block 72) failed [ 187.703196][ T5547] FAT-fs (loop2): Directory bread(block 73) failed [ 189.195371][ T5569] loop2: detected capacity change from 0 to 256 [ 189.896112][ T5569] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 189.908539][ T5569] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 189.932095][ T5567] attempt to access beyond end of device [ 189.932095][ T5567] loop2: rw=524288, want=408, limit=256 [ 189.944678][ T5567] attempt to access beyond end of device [ 189.944678][ T5567] loop2: rw=524288, want=664, limit=256 [ 189.955930][ T5567] attempt to access beyond end of device [ 189.955930][ T5567] loop2: rw=0, want=288, limit=256 [ 189.966790][ T26] audit: type=1800 audit(1761000019.698:14): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.360" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 190.248672][ T5582] loop2: detected capacity change from 0 to 256 [ 190.287520][ T5582] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 190.299953][ T5582] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 190.315684][ T5582] attempt to access beyond end of device [ 190.315684][ T5582] loop2: rw=524288, want=408, limit=256 [ 190.336106][ T5582] attempt to access beyond end of device [ 190.336106][ T5582] loop2: rw=524288, want=664, limit=256 [ 190.347382][ T5582] attempt to access beyond end of device [ 190.347382][ T5582] loop2: rw=0, want=288, limit=256 [ 190.363799][ T26] audit: type=1800 audit(1761000020.098:15): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.363" name="file1" dev="loop2" ino=1048610 res=0 errno=0 [ 191.287387][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 191.301297][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 191.314805][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 191.328108][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 191.334393][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 191.619332][ T5605] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.784814][ T5613] loop4: detected capacity change from 0 to 256 [ 193.188840][ T5614] loop2: detected capacity change from 0 to 256 [ 193.199522][ T5615] loop3: detected capacity change from 0 to 256 [ 193.371720][ T5613] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 194.500727][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.507064][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.227272][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 195.494480][ T5615] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 195.506951][ T5615] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 195.697909][ T5614] FAT-fs (loop2): Directory bread(block 64) failed [ 195.704512][ T5614] FAT-fs (loop2): Directory bread(block 65) failed [ 195.712949][ T5614] FAT-fs (loop2): Directory bread(block 66) failed [ 195.719580][ T5614] FAT-fs (loop2): Directory bread(block 67) failed [ 195.726200][ T5614] FAT-fs (loop2): Directory bread(block 68) failed [ 195.732841][ T5614] FAT-fs (loop2): Directory bread(block 69) failed [ 195.739604][ T5614] FAT-fs (loop2): Directory bread(block 70) failed [ 195.746533][ T5614] FAT-fs (loop2): Directory bread(block 71) failed [ 195.753237][ T5614] FAT-fs (loop2): Directory bread(block 72) failed [ 195.759815][ T5614] FAT-fs (loop2): Directory bread(block 73) failed [ 195.775196][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.797454][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 195.811874][ T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 195.820998][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.888656][ T5629] loop3: detected capacity change from 0 to 256 [ 195.905131][ T5629] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 195.917780][ T5629] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 195.935160][ T5629] attempt to access beyond end of device [ 195.935160][ T5629] loop3: rw=524288, want=408, limit=256 [ 195.948738][ T5629] attempt to access beyond end of device [ 195.948738][ T5629] loop3: rw=524288, want=664, limit=256 [ 195.960645][ T5629] attempt to access beyond end of device [ 195.960645][ T5629] loop3: rw=0, want=288, limit=256 [ 196.031220][ T26] audit: type=1800 audit(1761000025.708:16): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.378" name="file1" dev="loop3" ino=1048611 res=0 errno=0 [ 196.064405][ T23] usb 1-1: config 0 descriptor?? [ 196.198363][ T5631] input: syz1 as /devices/virtual/input/input17 [ 197.090098][ T23] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 197.126373][ T23] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 197.160868][ T23] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 197.197270][ T23] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 197.365095][ T23] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 197.374560][ T23] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 197.823376][ T5658] netlink: 72 bytes leftover after parsing attributes in process `syz.1.388'. [ 197.890720][ T5664] loop3: detected capacity change from 0 to 256 [ 197.933431][ T5662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.983724][ T5664] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 198.002619][ T5662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.100479][ T5665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.197341][ T23] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 198.208883][ T23] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 198.224956][ T23] kovaplus: probe of 0003:1E7D:2D50.0006 failed with error -71 [ 198.910252][ T23] usb 1-1: USB disconnect, device number 2 [ 199.159210][ T5669] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 199.215950][ T5669] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 199.257825][ T5673] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 199.269938][ T5669] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 199.490501][ T5681] netlink: 'syz.0.395': attribute type 12 has an invalid length. [ 200.286045][ T5675] fido_id[5675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 200.580386][ T5695] loop3: detected capacity change from 0 to 512 [ 200.701061][ T5695] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 200.812542][ T5695] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 200.853235][ T5695] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 200.967591][ T5695] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 200.984994][ T5695] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 200.995536][ T5705] loop4: detected capacity change from 0 to 256 [ 201.018515][ T5695] EXT4-fs (loop3): orphan cleanup on readonly fs [ 201.098098][ T5695] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.402: bg 0: block 34: padding at end of block bitmap is not set [ 201.197718][ T5705] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 201.222118][ T5695] Quota error (device loop3): write_blk: dquota write failed [ 201.281863][ T5695] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 201.400019][ T5695] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.402: Failed to acquire dquot type 1 [ 201.460506][ T5695] EXT4-fs (loop3): 1 truncate cleaned up [ 201.485189][ T5695] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 202.223716][ T5713] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 203.041489][ T5720] loop2: detected capacity change from 0 to 256 [ 204.769725][ T5720] FAT-fs (loop2): Directory bread(block 64) failed [ 204.776472][ T5720] FAT-fs (loop2): Directory bread(block 65) failed [ 204.783524][ T5720] FAT-fs (loop2): Directory bread(block 66) failed [ 204.790395][ T5720] FAT-fs (loop2): Directory bread(block 67) failed [ 204.797239][ T5720] FAT-fs (loop2): Directory bread(block 68) failed [ 204.804023][ T5720] FAT-fs (loop2): Directory bread(block 69) failed [ 204.811132][ T5720] FAT-fs (loop2): Directory bread(block 70) failed [ 204.818124][ T5720] FAT-fs (loop2): Directory bread(block 71) failed [ 204.825308][ T5720] FAT-fs (loop2): Directory bread(block 72) failed [ 204.832031][ T5720] FAT-fs (loop2): Directory bread(block 73) failed [ 206.252442][ T5740] loop1: detected capacity change from 0 to 256 [ 206.553933][ T5740] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 206.566748][ T5740] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 206.623321][ T5740] attempt to access beyond end of device [ 206.623321][ T5740] loop1: rw=524288, want=408, limit=256 [ 206.642197][ T5740] attempt to access beyond end of device [ 206.642197][ T5740] loop1: rw=524288, want=664, limit=256 [ 206.654212][ T5740] attempt to access beyond end of device [ 206.654212][ T5740] loop1: rw=0, want=288, limit=256 [ 206.690551][ T26] audit: type=1800 audit(1761000036.408:17): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.413" name="file1" dev="loop1" ino=1048613 res=0 errno=0 [ 207.224908][ T5749] loop1: detected capacity change from 0 to 512 [ 207.338095][ T5749] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 207.408567][ T5749] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 207.488363][ T5749] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 208.158201][ T5749] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 208.161680][ T5758] loop4: detected capacity change from 0 to 256 [ 208.195183][ T5749] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 208.222601][ T5749] EXT4-fs (loop1): orphan cleanup on readonly fs [ 208.266979][ T5758] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 208.301159][ T5749] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.420: bg 0: block 34: padding at end of block bitmap is not set [ 208.397199][ T5749] Quota error (device loop1): write_blk: dquota write failed [ 208.459792][ T5749] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 208.469969][ T5749] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.420: Failed to acquire dquot type 1 [ 208.495076][ T5749] EXT4-fs (loop1): 1 truncate cleaned up [ 208.554174][ T5749] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 210.144866][ T5781] loop1: detected capacity change from 0 to 256 [ 210.390625][ T5781] FAT-fs (loop1): Directory bread(block 64) failed [ 210.397596][ T5781] FAT-fs (loop1): Directory bread(block 65) failed [ 210.404931][ T5781] FAT-fs (loop1): Directory bread(block 66) failed [ 210.412071][ T5781] FAT-fs (loop1): Directory bread(block 67) failed [ 210.419376][ T5781] FAT-fs (loop1): Directory bread(block 68) failed [ 210.426126][ T5781] FAT-fs (loop1): Directory bread(block 69) failed [ 210.433495][ T5781] FAT-fs (loop1): Directory bread(block 70) failed [ 210.440789][ T5781] FAT-fs (loop1): Directory bread(block 71) failed [ 210.448153][ T5781] FAT-fs (loop1): Directory bread(block 72) failed [ 210.454941][ T5781] FAT-fs (loop1): Directory bread(block 73) failed [ 215.450915][ T5826] input: syz1 as /devices/virtual/input/input18 [ 216.029255][ T5829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.447'. [ 216.184743][ T5829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.447'. [ 216.207763][ T5830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.447'. [ 216.347876][ T5829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.447'. [ 216.547918][ T5835] input: syz1 as /devices/virtual/input/input19 [ 217.983895][ T5855] loop3: detected capacity change from 0 to 256 [ 218.006346][ T5856] loop2: detected capacity change from 0 to 256 [ 218.051967][ T5856] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 218.064467][ T5856] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 218.084246][ T5856] attempt to access beyond end of device [ 218.084246][ T5856] loop2: rw=524288, want=408, limit=256 [ 218.097044][ T5856] attempt to access beyond end of device [ 218.097044][ T5856] loop2: rw=524288, want=664, limit=256 [ 218.108345][ T5856] attempt to access beyond end of device [ 218.108345][ T5856] loop2: rw=0, want=288, limit=256 [ 218.119215][ T26] audit: type=1800 audit(1761000047.868:18): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.454" name="file1" dev="loop2" ino=1048615 res=0 errno=0 [ 218.186787][ T5855] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 218.690584][ T5866] netlink: 'syz.4.460': attribute type 12 has an invalid length. [ 219.676977][ T5875] IPVS: stopping master sync thread 5876 ... [ 219.685740][ T5876] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 219.752301][ T5878] loop2: detected capacity change from 0 to 256 [ 219.923184][ T5878] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 219.935884][ T5878] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 219.966743][ T5878] attempt to access beyond end of device [ 219.966743][ T5878] loop2: rw=524288, want=408, limit=256 [ 219.984350][ T5878] attempt to access beyond end of device [ 219.984350][ T5878] loop2: rw=524288, want=664, limit=256 [ 219.995791][ T5878] attempt to access beyond end of device [ 219.995791][ T5878] loop2: rw=0, want=288, limit=256 [ 220.017304][ T26] audit: type=1800 audit(1761000049.738:19): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.462" name="file1" dev="loop2" ino=1048616 res=0 errno=0 [ 220.571303][ T5886] loop3: detected capacity change from 0 to 256 [ 220.834937][ T5886] FAT-fs (loop3): Directory bread(block 64) failed [ 220.841997][ T5886] FAT-fs (loop3): Directory bread(block 65) failed [ 220.849500][ T5886] FAT-fs (loop3): Directory bread(block 66) failed [ 220.856301][ T5886] FAT-fs (loop3): Directory bread(block 67) failed [ 220.863561][ T5886] FAT-fs (loop3): Directory bread(block 68) failed [ 220.870322][ T5886] FAT-fs (loop3): Directory bread(block 69) failed [ 220.877603][ T5886] FAT-fs (loop3): Directory bread(block 70) failed [ 220.884417][ T5886] FAT-fs (loop3): Directory bread(block 71) failed [ 220.891684][ T5886] FAT-fs (loop3): Directory bread(block 72) failed [ 220.898487][ T5886] FAT-fs (loop3): Directory bread(block 73) failed [ 222.661531][ T5897] loop4: detected capacity change from 0 to 256 [ 222.965482][ T5897] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 222.978000][ T5897] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 222.998951][ T5897] attempt to access beyond end of device [ 222.998951][ T5897] loop4: rw=524288, want=408, limit=256 [ 223.013952][ T5897] attempt to access beyond end of device [ 223.013952][ T5897] loop4: rw=524288, want=664, limit=256 [ 223.025212][ T5897] attempt to access beyond end of device [ 223.025212][ T5897] loop4: rw=0, want=288, limit=256 [ 223.036104][ T26] audit: type=1800 audit(1761000052.778:20): pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.472" name="file1" dev="loop4" ino=1048618 res=0 errno=0 [ 225.452088][ T5950] loop4: detected capacity change from 0 to 256 [ 225.463037][ T2286] Bluetooth: hci2: command 0x0409 tx timeout [ 226.493829][ T4238] Bluetooth: hci3: command 0x0406 tx timeout [ 226.506270][ T5910] chnl_net:caif_netlink_parms(): no params data found [ 228.377294][ T2286] Bluetooth: hci2: command 0x041b tx timeout [ 228.956026][ T5968] input: syz1 as /devices/virtual/input/input20 [ 229.754338][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.817223][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.835913][ T5971] kvm: pic: single mode not supported [ 229.836523][ T5971] kvm: pic: level sensitive irq not supported [ 229.856452][ T5910] device bridge_slave_0 entered promiscuous mode [ 229.909924][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.942935][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.975675][ T5910] device bridge_slave_1 entered promiscuous mode [ 229.987886][ T5971] kvm: pic: level sensitive irq not supported [ 230.690371][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.779363][ T2286] Bluetooth: hci2: command 0x040f tx timeout [ 230.792302][ T5985] 9pnet_virtio: no channels available for device syz [ 230.847161][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 230.856185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 230.865215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 230.874269][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 230.916111][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.988313][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 231.007088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 231.016039][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 231.024953][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 231.033864][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 231.042774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 231.509635][ T5910] team0: Port device team_slave_0 added [ 231.518730][ T5910] team0: Port device team_slave_1 added [ 231.705803][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.744948][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.521519][ T5022] Bluetooth: hci2: command 0x0419 tx timeout [ 234.533095][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.558548][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.565592][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.592314][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.021615][ T5910] device hsr_slave_0 entered promiscuous mode [ 236.431910][ T6017] input: syz1 as /devices/virtual/input/input21 [ 236.850102][ T5910] device hsr_slave_1 entered promiscuous mode [ 237.243913][ T5910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.325800][ T5910] Cannot create hsr debugfs directory [ 239.294030][ T5910] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.357970][ T5910] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.177643][ T5910] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.217055][ T5910] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.752464][ T6055] input: syz1 as /devices/virtual/input/input22 [ 241.890591][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.927819][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.942944][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.956796][ T5910] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.041787][ T4320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.068703][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.082332][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.654544][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.661804][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.008563][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.055611][ T4320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.118127][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.146542][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.172503][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.179689][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.196875][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.206416][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.270372][ T4320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.353122][ T6089] 9pnet_virtio: no channels available for device syz [ 244.391751][ T5910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.413750][ T5910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.478356][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.495487][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.514075][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.535351][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.655592][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.739366][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.936071][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.966932][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.981555][ T4189] block nbd1: Receive control failed (result -32) [ 244.994863][ T6085] block nbd1: shutting down sockets [ 244.996657][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.009420][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.124650][ T4320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.611815][ T6111] input: syz1 as /devices/virtual/input/input23 [ 246.481998][ T6113] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 246.550570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.567522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.658144][ T6118] binder: 6114:6118 ioctl 0 200000000040 returned -22 [ 246.825634][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.955872][ T6122] loop1: detected capacity change from 0 to 512 [ 247.069703][ T6122] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 247.165694][ T6122] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 247.253374][ T6122] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 247.343166][ T6122] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 247.365928][ T6122] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 247.407003][ T6122] EXT4-fs (loop1): orphan cleanup on readonly fs [ 247.452476][ T6122] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.531: bg 0: block 34: padding at end of block bitmap is not set [ 247.539867][ T6137] netlink: 'syz.3.532': attribute type 25 has an invalid length. [ 247.567431][ T6137] netlink: 'syz.3.532': attribute type 7 has an invalid length. [ 247.576828][ T6122] Quota error (device loop1): write_blk: dquota write failed [ 247.588435][ T6122] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 247.606544][ T6137] netlink: 164 bytes leftover after parsing attributes in process `syz.3.532'. [ 247.628057][ T6122] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.531: Failed to acquire dquot type 1 [ 247.674503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.689108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.715635][ T6122] EXT4-fs (loop1): 1 truncate cleaned up [ 247.761937][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.784258][ T6122] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 247.799137][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.870742][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.036399][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.047628][ T5910] device veth0_vlan entered promiscuous mode [ 249.399581][ T6133] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 250.928988][ T5910] device veth1_vlan entered promiscuous mode [ 251.056185][ T6133] usb 5-1: Using ep0 maxpacket: 32 [ 251.081341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.788274][ T6176] input: syz1 as /devices/virtual/input/input24 [ 252.267301][ T6133] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 252.275242][ T6133] usb 5-1: can't read configurations, error -71 [ 252.290040][ T6178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.540'. [ 252.479237][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.495289][ T6184] raw_sendmsg: syz.2.542 forgot to set AF_INET. Fix it! [ 252.525979][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.545279][ T5910] device veth0_macvtap entered promiscuous mode [ 252.565205][ T5910] device veth1_macvtap entered promiscuous mode [ 252.600744][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.615333][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.645571][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.685322][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.714837][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.725386][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.735274][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.746598][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.756991][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.768331][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.779915][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.845263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.869214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.895886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.971393][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.001970][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.028945][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.054173][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.083830][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.133040][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.176877][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.212742][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.246898][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.579833][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.646547][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.705372][ T5910] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.775947][ T5910] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.837323][ T5910] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.911821][ T5910] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.945590][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.967073][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.989580][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.545'. [ 254.318158][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.343869][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.382082][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.443010][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.493221][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.563747][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.689566][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.696055][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.404361][ T6240] input: syz1 as /devices/virtual/input/input25 [ 257.517579][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.530587][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.540316][ T6250] loop3: detected capacity change from 0 to 256 [ 257.620990][ T6256] input: syz1 as /devices/virtual/input/input26 [ 258.300886][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.502265][ T6250] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 258.781623][ T4320] device hsr_slave_0 left promiscuous mode [ 258.861591][ T4320] device hsr_slave_1 left promiscuous mode [ 258.902902][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.966724][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.041855][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.156439][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.193965][ T4320] device bridge_slave_1 left promiscuous mode [ 259.214274][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.289966][ T4320] device bridge_slave_0 left promiscuous mode [ 259.296635][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.481254][ T4320] device veth1_macvtap left promiscuous mode [ 259.569820][ T4320] device veth0_macvtap left promiscuous mode [ 259.598407][ T4320] device veth1_vlan left promiscuous mode [ 259.646055][ T4320] device veth0_vlan left promiscuous mode [ 261.073241][ T6310] loop4: detected capacity change from 0 to 256 [ 261.326084][ T6310] FAT-fs (loop4): Directory bread(block 64) failed [ 261.332974][ T6310] FAT-fs (loop4): Directory bread(block 65) failed [ 261.340226][ T6310] FAT-fs (loop4): Directory bread(block 66) failed [ 261.346914][ T6310] FAT-fs (loop4): Directory bread(block 67) failed [ 261.354053][ T6310] FAT-fs (loop4): Directory bread(block 68) failed [ 261.360826][ T6310] FAT-fs (loop4): Directory bread(block 69) failed [ 261.368009][ T6310] FAT-fs (loop4): Directory bread(block 70) failed [ 261.374744][ T6310] FAT-fs (loop4): Directory bread(block 71) failed [ 261.381870][ T6310] FAT-fs (loop4): Directory bread(block 72) failed [ 261.388761][ T6310] FAT-fs (loop4): Directory bread(block 73) failed [ 262.938955][ T4320] team0 (unregistering): Port device team_slave_1 removed [ 263.027017][ T6306] ptrace attach of "./syz-executor exec"[4188] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋 [ 263.160885][ T4320] team0 (unregistering): Port device team_slave_0 removed [ 263.391755][ T4320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.408541][ T6321] loop4: detected capacity change from 0 to 256 [ 263.477826][ T4320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.682083][ T6321] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 263.742386][ T6321] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 264.185729][ T6321] attempt to access beyond end of device [ 264.185729][ T6321] loop4: rw=524288, want=408, limit=256 [ 264.246649][ T6321] attempt to access beyond end of device [ 264.246649][ T6321] loop4: rw=524288, want=664, limit=256 [ 264.269376][ T6321] attempt to access beyond end of device [ 264.269376][ T6321] loop4: rw=0, want=288, limit=256 [ 264.279312][ T4320] bond0 (unregistering): Released all slaves [ 264.377037][ T26] audit: type=1800 audit(1761000094.048:21): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.571" name="file1" dev="loop4" ino=1048621 res=0 errno=0 [ 264.504635][ T6270] netlink: 'syz.5.560': attribute type 13 has an invalid length. [ 264.694902][ T6323] ODEBUG: Out of memory. ODEBUG disabled [ 265.448096][ T6355] loop3: detected capacity change from 0 to 256 [ 265.534239][ T6355] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 265.547810][ T6355] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 265.588260][ T6355] attempt to access beyond end of device [ 265.588260][ T6355] loop3: rw=524288, want=408, limit=256 [ 265.606753][ T6355] attempt to access beyond end of device [ 265.606753][ T6355] loop3: rw=524288, want=664, limit=256 [ 265.618171][ T6355] attempt to access beyond end of device [ 265.618171][ T6355] loop3: rw=0, want=288, limit=256 [ 265.630520][ T26] audit: type=1800 audit(1761000095.378:22): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.581" name="file1" dev="loop3" ino=1048622 res=0 errno=0 [ 267.356739][ T6380] input: syz1 as /devices/virtual/input/input27 [ 268.148306][ T6392] netlink: 'syz.4.588': attribute type 13 has an invalid length. [ 373.857093][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 373.864150][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3560/1:b..l [ 373.872604][ C1] (detected by 1, t=10502 jiffies, g=18689, q=154) [ 373.879232][ C1] task:udevd state:R running task stack:23296 pid: 3560 ppid: 1 flags:0x00004002 [ 373.891260][ C1] Call Trace: [ 373.894573][ C1] [ 373.897547][ C1] __schedule+0x11bb/0x4390 [ 373.902190][ C1] ? __wake_up_sync+0x114/0x180 [ 373.907101][ C1] ? ep_poll_callback+0x5b6/0x9f0 [ 373.912156][ C1] ? release_firmware_map_entry+0x190/0x190 [ 373.918081][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 373.923230][ C1] ? preempt_schedule+0xa7/0xb0 [ 373.928199][ C1] preempt_schedule_common+0x82/0xd0 [ 373.933521][ C1] preempt_schedule+0xa7/0xb0 [ 373.938318][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 373.943980][ C1] ? lock_chain_count+0x20/0x20 [ 373.948868][ C1] preempt_schedule_thunk+0x16/0x18 [ 373.954114][ C1] _raw_spin_unlock_irqrestore+0xf6/0x100 [ 373.959861][ C1] ? _raw_spin_unlock+0x40/0x40 [ 373.964753][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 373.969833][ C1] __wake_up_sync_key+0x11b/0x180 [ 373.974902][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 373.981005][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 373.986945][ C1] sock_def_readable+0x136/0x250 [ 373.992014][ C1] netlink_sendskb+0x97/0x130 [ 373.996754][ C1] netlink_sendmsg+0x8ab/0xbc0 [ 374.001567][ C1] ? netlink_getsockopt+0x560/0x560 [ 374.006795][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 374.011768][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 374.017168][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 374.022658][ C1] ? netlink_getsockopt+0x560/0x560 [ 374.027891][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 374.032702][ C1] ? memset+0x1e/0x40 [ 374.036728][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 374.041894][ C1] ? import_iovec+0x6f/0xa0 [ 374.046439][ C1] ___sys_sendmsg+0x1f0/0x260 [ 374.051153][ C1] ? __sys_sendmsg+0x250/0x250 [ 374.056067][ C1] ? __context_tracking_exit+0x4c/0x80 [ 374.061562][ C1] ? __fdget+0x150/0x210 [ 374.065836][ C1] __se_sys_sendmsg+0x190/0x250 [ 374.070724][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 374.075773][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 374.081799][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 374.087134][ C1] do_syscall_64+0x4c/0xa0 [ 374.091582][ C1] ? clear_bhb_loop+0x30/0x80 [ 374.096283][ C1] ? clear_bhb_loop+0x30/0x80 [ 374.100986][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.107035][ C1] RIP: 0033:0x7fee65eb6407 [ 374.111486][ C1] RSP: 002b:00007ffe2cfee680 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 374.119937][ C1] RAX: ffffffffffffffda RBX: 00007fee65dc8880 RCX: 00007fee65eb6407 [ 374.127937][ C1] RDX: 0000000000000000 RSI: 00007ffe2cfee6e0 RDI: 0000000000000004 [ 374.135932][ C1] RBP: 0000560737a49bf0 R08: 0000000000000000 R09: 0000000000000000 [ 374.143932][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000b4 [ 374.151931][ C1] R13: 0000560737a259e0 R14: 0000000000000000 R15: 0000000000000000 [ 374.159957][ C1] [ 374.162996][ C1] rcu: rcu_preempt kthread starved for 10528 jiffies! g18689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 374.174215][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 374.184212][ C1] rcu: RCU grace-period kthread stack dump: [ 374.190115][ C1] task:rcu_preempt state:R running task stack:27904 pid: 15 ppid: 2 flags:0x00004000 [ 374.200928][ C1] Call Trace: [ 374.204228][ C1] [ 374.207184][ C1] __schedule+0x11bb/0x4390 [ 374.211721][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 374.217119][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 374.223039][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 374.228957][ C1] ? _raw_spin_unlock+0x40/0x40 [ 374.233830][ C1] ? rcu_is_watching+0x11/0xa0 [ 374.238622][ C1] ? release_firmware_map_entry+0x190/0x190 [ 374.244554][ C1] schedule+0x11b/0x1e0 [ 374.248740][ C1] schedule_timeout+0x15c/0x280 [ 374.253615][ C1] ? console_conditional_schedule+0x40/0x40 [ 374.259541][ C1] ? update_process_times+0x200/0x200 [ 374.264949][ C1] ? prepare_to_swait_event+0x331/0x350 [ 374.270531][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 374.275409][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 374.280635][ C1] ? rcu_gp_init+0xd58/0x10e0 [ 374.285337][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 374.290124][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 374.295346][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 374.300808][ C1] rcu_gp_kthread+0x98/0x350 [ 374.305453][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 374.310691][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 374.316613][ C1] ? __kthread_parkme+0x157/0x1b0 [ 374.321673][ C1] kthread+0x436/0x520 [ 374.325857][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 374.331001][ C1] ? kthread_blkcg+0xd0/0xd0 [ 374.335619][ C1] ret_from_fork+0x1f/0x30 [ 374.340088][ C1] [ 374.343278][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 374.349629][ C1] NMI backtrace for cpu 1 [ 374.353973][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 374.361017][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.371095][ C1] Call Trace: [ 374.374399][ C1] [ 374.377275][ C1] dump_stack_lvl+0x168/0x230 [ 374.381995][ C1] ? show_regs_print_info+0x20/0x20 [ 374.387220][ C1] ? load_image+0x3b0/0x3b0 [ 374.391759][ C1] ? irq_work_queue+0xbf/0x140 [ 374.396561][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 374.401524][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 374.407701][ C1] ? _printk+0xcc/0x110 [ 374.411905][ C1] ? cpu_online+0x1d/0x30 [ 374.416260][ C1] ? load_image+0x3b0/0x3b0 [ 374.420790][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 374.426893][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 374.432908][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 374.439100][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 374.444592][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 374.449595][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 374.454936][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 374.460188][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 374.465186][ C1] ? account_process_tick+0x227/0x3a0 [ 374.470589][ C1] update_process_times+0x193/0x200 [ 374.475835][ C1] tick_sched_timer+0x37d/0x560 [ 374.480735][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 374.485964][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 374.491771][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 374.496917][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 374.503118][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 374.508112][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 374.514119][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 374.519784][ C1] [ 374.522734][ C1] [ 374.525685][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 374.531705][ C1] RIP: 0010:default_idle+0xb/0x10 [ 374.536781][ C1] Code: bf 48 89 df e8 96 94 09 f8 eb b5 e8 9f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 57 24 53 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 374.556423][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 374.562714][ C1] RAX: bb770f45dec6b300 RBX: ffff88813fe30000 RCX: bb770f45dec6b300 [ 374.570723][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b18a0 RDI: ffffffff8a59a880 [ 374.579158][ C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed1017227662 [ 374.587239][ C1] R10: ffffed1017227662 R11: 1ffff11017227661 R12: ffffffff8d699a68 [ 374.595237][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc6000 [ 374.603256][ C1] default_idle_call+0x81/0xc0 [ 374.608046][ C1] do_idle+0x21b/0x5b0 [ 374.612151][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 374.617369][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 374.622592][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 374.628302][ C1] cpu_startup_entry+0x14/0x20 [ 374.633097][ C1] start_secondary+0x31f/0x430 [ 374.637894][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 374.643302][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 374.649251][ C1]