last executing test programs: 1m35.881499529s ago: executing program 0 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) 1m30.765587995s ago: executing program 0 (id=60): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x10000003, 0x3, 0x5, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x9, 0x9, 0x6, 0xa, 0x2, 0x5, 0xffffffffffffffff, 0xbd, 0x1, 0x102d, 0x8, 0x1, 0x3, 0x0, 0x5, 0x7, 0x80000001, 0x1fd, 0x80, 0xfffffffffff72301, 0xb, 0x7, 0xe, 0x2, 0xc, 0x200000000, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x2000000000403, 0x1, 0x8, 0x1, 0x3, 0x3, 0x1, 0x2af, 0x6, 0x9, 0x5, 0x8a, 0x50f, 0x67f9, 0x9bad, 0xffffffffba36ba58, 0x7a5, 0x0, 0x88b, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x200000000000403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0xfffffffffffffffd, 0x9, 0x0, 0x9, 0x1800000, 0x4, 0x82e, 0x8, 0x5, 0x0, 0x804, 0xfffffffffffffffa, 0x8, 0x100000000000006, 0x10000, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0xffff, 0x7, 0x201, 0x77d, 0x482, 0x5, 0x2, 0x623b, 0x6, 0x0, 0xfa, 0x4, 0x200, 0x80, 0x20000008, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x2775e12f, 0x680000000003, 0x5, 0x7, 0xe88, 0x2, 0x4000000000000, 0xfffffffffdfffffa, 0x10003, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x7fff, 0x7ffd, 0x3fc000000000, 0x6, 0x100000001, 0x8, 0x80000000004, 0x6, 0x20000000002, 0x0, 0x7c, 0x3]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x29}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001c00)) 1m30.594110572s ago: executing program 0 (id=61): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="3666450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000880)=[@nested_load_code={0x12e, 0x5d, {0x3, "440f01c5f0289b102b4cfe3e420fa9c462e0f50bb9710300000f3236656467f20f3043df855471610c66ba200066b8fa0066ef46d9ee66baf80cb8cda2928eef66bafc0cec"}}, @nested_load_code={0x12e, 0x4b, {0x1, "f341a5b9ac0800000f320f780f410f0866b875000f00d0c443556f4b1707deb80000008066460fd5e1460fc72bc4c3ed400607"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro64=0x3, 0xf4c9, 0x1, 0x80000001}}, @code={0xa, 0x65, {"b9800000c00f3235000100000f3066baf80cb820ac9382ef66bafc0cb829000000ef66baf80cb8ec643884ef66bafc0cb809000000ef0f47d066410fc7310f01f8c441b45462fa0f30c402793e6100460f4f7000"}}, @nested_create_vm={0x12d, 0x18}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x4d03, 0x3, 0x5}}, @nested_vmresume={0x130, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x864}}, @rdmsr={0x66, 0x18, {0x40000974}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x2, 0x7f}}, @set_irq_handler={0xc8, 0x20, {0x69, 0x2}}, @uexit={0x0, 0x18, 0x8}], 0x29d}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m28.665531661s ago: executing program 0 (id=66): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000500)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@inlinecrypt}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000007c0)="$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") unshare(0x42000000) 1m24.962229332s ago: executing program 0 (id=79): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x3925099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0xfffffffffffffeec) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m24.541502505s ago: executing program 0 (id=82): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x64, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0xc2, 0x0, 0x0, 0x4, {[@fastopen={0x22, 0x5, "d35e32"}, @timestamp={0x8, 0xa, 0x800, 0x2}, @mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x0, 0x6a1d1f7d, 0x21b}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0xa, "0236ea349d65827c"}, @md5sig={0x13, 0x12, "a6de7bb435e7760368f450d390f62d9d"}, @mptcp=@synack={0x1e, 0x10, 0x2, 0x2, 0x1, 0xff, 0x8}]}}}}}}}}, 0x0) 1m9.173833485s ago: executing program 32 (id=82): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x64, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0xc2, 0x0, 0x0, 0x4, {[@fastopen={0x22, 0x5, "d35e32"}, @timestamp={0x8, 0xa, 0x800, 0x2}, @mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x0, 0x6a1d1f7d, 0x21b}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0xa, "0236ea349d65827c"}, @md5sig={0x13, 0x12, "a6de7bb435e7760368f450d390f62d9d"}, @mptcp=@synack={0x1e, 0x10, 0x2, 0x2, 0x1, 0xff, 0x8}]}}}}}}}}, 0x0) 17.192946152s ago: executing program 4 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000000c0)='./file2\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRESOCT=r2, @ANYRES64=r3], 0x1, 0xc2d, &(0x7f0000001d40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.056995626s ago: executing program 5 (id=211): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 16.168137968s ago: executing program 4 (id=213): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001800)='./file1\x00', 0x8010, &(0x7f0000000100)=ANY=[], 0xdd, 0x1510, &(0x7f0000002d80)="$eJzs3Au4TtXWAOAx5pyLbbfxJbmvMcfiSy6TJAklySVJkpDcE5IkOY4kscktCUnIdSe5h9zTTu73W+5JciRJEhKSzP/Z0nE6nfM75/z9v/OfPd7nWc+e41trjjXWHt+31+V59vd1p8FV6letWIeZ4V+hfxngzz+SASABAPoBQFYACACgVLZS2dLWZ9KY/C/tRPwvqTv1alcgribpf/om/U/fpP/pm/Q/fZP+p1tVwqtdgbjq5POfvkn/hUjXpue+Vpb0u8jz///n1P9kspz/0wX8eyuk//9p9D+1tfQ/fZP+p2/S//Tkt5cB0v/0LLjaBYirTD7/6Zv0X4h07Xd/przu7NV+pn1VlyS4+jX8M4sQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCPF/4Ky/zADAL+OrXZcQQgghhBBCCCF+P/7dq12BEEIIIYQQQggh/vchKNBgIIAMkBESIBMkwjWQBJkhC2SFGFwL2eA6yA7XQw7ICbkgN+SBvJAPQiCwwBBBfigAcbgBCsKNUAgKQxEoCg6KQXG4CUrAzVASboFScCuUhtugDJS9uM80d0IFuAsqwt1QCSpDFagK90A1uBeqw31QA+6HmvAA1IIHoTY8BHWgLtSDh6E+PAINoCE0gsbQBJpCsyvMT8n6t+Y/D13hBegG3SEZekBPeBF6QW/oA32hH7wE/eFlGACvwEAYBIPhVRgCr8FQeB2GwXAYAW/ASBgFo2EMjIVxkAJvwnh4CybA249khkkwGabAVJgG0+EdmAEzYRa8C7NhDsyFlEzzYQEshPdgEbwPqfABLIYPYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC3wEW2EbbIcdsBN2wW74GPbAJ7AXPoV9+Nk/Of/Mr+dDZwQEVKjQoMEMmAETMAETMRGTMAmzYBaMYQyzYTbMjtkxB+bAXJgLkzEP5sN8SEjIyJgf82Mc41gQC2IhLIRFsAg6dFgci2MJvBlLYkkshaWwNJbGMlgWy+LteDuWx/JYAStgRayIlbASVsEqeA/eg/di9T+/NWtiLayFtbE21sE6WA/rYX2sjw2wATbCRtgEm2AzbIbNsTm2wBbYCltha2yNbbANtsW22A7bYXtsjx2wA3bEjtgJO2FnfA6fw+fxeXwBX8DuWEn1wJ7YE3thL+yDfbEvvoT98WV8GV/BgTgIB+Or+Cq+hkPxNA7D4TgCR2B5NQpH4xhkNQ5TMAUzwnicgBNwIk7CSTgFp+I0nI7TcQbOxJn4Ls7GOTgH5+E8XIALcSEuwvcxFVNxMZ7BJbgUl+FyXIErcQWuxjW4GtfhelyHG3EjbsbN+BF+hNtwG+7AHbgLd+HH+DF+gp/gQNyH+3A/7scDeAAP4kE8hIfwMB7GI3gEj+JRPIbH8DiewJN4Ak/hKTyNZ/AsAJzDc3gez+MFvJD24VdpjDIqg8qgElSCSlSJKkklqSwqi4qpmMqmsqnsKrvKoXKoXCqXyqPyqHwqnyJFilWk8qv8Kq7iqqAqqAqpQqqIKqJcBqeKq+KqhCqhSqqSqpS6VZVWt6kyqqxq6W5Xt6vyqpWroO5SFVVFVUlVVlVUVVVVVVPVVHVVXdVQNVRNVVPVUg+q2qoH9sG6Kq0z9dUgbKAGYyPVWDVRTdVr+KhqroZiC9VStVKPq+E4DNuo5q6tekq1U6OxvXpGjcE/qI5qHHZSz6rO6jnVRT2vuqoWrpvqriZiD9VTTcFeqrfqo/qqGVhZpXWsinpFPZ9xkBqsXlUL8DU1VL2uhqnhaoR6Q41Uo9RoNUaNVeNUinpTjVdvqQnqbTVRTVKT1RQ1VU1T09U7aoaaqWapd9VsNUfNVfMyXHpXq0XqfZWqPlCL1YdqiVqqlqnlaoVaqVap1WqNWqvWqfVqg9qoNqnNaov6SG1V29R2tUPtVLvUbvWx2qM+UXvVp2qf+kztV39SB9Tn6qD6Qh1SX6rD6it1RH2tjqpv1DH1rTquTqiT6jt1Sn2vTqsz6qz6QZ1TP6rz6id1QXkFGrXSWhsd6Aw6o07QmXSivkYn6cw6i86qY/panU1fp7Pr63UOnVPnMrl1Hp1X59OhJm0160jn1wV0XN+gC+obdSFdWBfRRbXTxXRxfZMuoW/WJfUtupS+VZfWt+kyuqwu50HfocvrO3UFfZeuqO/WlXRlXUVX1ffoavpeXV3fp2vo+3VN/YCupR/UtfVDuo6uq+vph3V9/YhuoBvqRrqxbqKb6mb6Ud1cP6Zb6Ja6lX5ct9ZP6Db6Sd1WP6Xb6ad1e/2M7pARdEf9R91JP6s76+d0F/2TvqC97qa762TdQ/fUL+peurfuo/vqfvol3V+/rAfoV/RAPUgP1q/qIfo1PVS/rofp4XqEfkOP1KP0aD1Gj9XjdIp+U4/Xb+kJ+m09UU/Sk/UUPVVP030uZZr1D8x/62/MH3Bx75v1Fv2R3qq36e16h96pd+nderfeo/fovXqv3qf36f16vz6gD+iD+qA+pA/pw/qwPqKP6KP6qD6mj+nj+oT+QX+nT+nv9Wl9Rp/RP+hz+pw+f+l3AAaNMtoYE5gMJqNJMJlMornGJJnMJovJamLmWpPNXGeym+tNDpPT5DK5TR6T1+QzoSFjDZvI5DcFTNzcYAqaG00hU9gUMUWNM8VMcXPT/3j+leprZpqZ5qa5aWFamFamlWltWps2po1pa9qadqadaW/amw6mg+loOppOppPpbDqbLqaL6Wq6mm6mm0k2yaanedH0Mr1NH9PX9DMvmf6mvxlgBpiBZqAZbAabIWaIGWqGmmFmmBlhRpiRZqQZbUabsWasSfFZzXgz3kwwE8xEM9FM7pfVTDVTzXQz3cwwM8wsM8vMNrPNXDPXzDfzzUKz0Cwyi0yqSTWLzWKzxCw1S81ys9ysNCvNarParDVrzXqz3mw0G80Ss8VsMVvNVrPdbDc7zU6z2+w2e8wes9fsNfvMPrPf7DcHzAFz0Bw0h8whc9gcNkfMEXPUHDXHzDFz3Bw3J81Jc8qcMqfNaXPWnDXnzDlz3pw3F8yFtMu+QAUqMIEJMgQZgoQgIUgMEoOkICnIEmQJYkEsyBZkC7IH1wc5gpxBriB3kCfIG+QLwoACG3AQBfmDAkE8uCEoGNwYFAoKB0WCooELigXFg5uCEsHNQcnglqBUcGtQOrgtKBOUDcoFtwd3BOWDO4MKwV1BxeDuoFJQOagSVA3uCaoF9wbVg/uCGsH9Qc3ggaBW8GBQO3goqBPUDeoFDwf1g0eCBkHDoFHQOGgSNA2a/a75vT+d8zHXLeweJoc9wp7hi2GvsHfYJ+wb9gtfCvuHL4cDwlfCgeGgcHD4ajgkfC0cGr4eDguHhyPCN8KR4ahwdDgmHBuOC1PCN8Px4VvhhPDtcGI4KZwcTAmnhtPC6eE74YxwZjgrfDecHc4J54bzwvnhghB/viSG1PCDcHGYdqpYGi4Ll4crwpXhqnB1uCZcG64L14cbwo2l+v+8abg13BZuD3eEO8Nd4e7w43BP+Em4N/w03Bd+Fu4P/xQeCD8PD4ZfhIfCL8PD4VfhkfDr8Gj4TXgs/DY8Hp4IT4bfhafC78PT4ZnwbPhDeC78MTwf/hReCH3axX3a6Z0MGcpAGSiBEiiREimJkigLZaEYxSgbZaPslJ1yUA7KRbkoD+WhfJSP0jAx5af8FKc4FaSCVIgKUREqQo4cFafiVIJKUEkqSaWoFJWm0lSGylA5Kkd30B10J91Jd9FddDfdTZWpMlWlqlSNqlF1qk41qAbVpJpUi2pRbapNdagO1aN6VJ/qUwNqQI2oETWhJtSMmlFzak4tqAW1olbUmlpTG2pDbakttaN21J7aUwfqQB2pI3WiTtSZOlMX6kJdqSt1o26UTMnUk3pSL+pFfagP9aN+1J/60wAaQANpIA2mwTSEhtBQGkrDaDiNoDdoJI2i0TSGxtI4SqEUGk/jaQJNoIk0kSbTZJpKU2k6TacZNINm0SyaTbNpLs2l+TSfFtJCWkSLKJVSaTEtpiW0hJbRMlpBK2gVraI1tIbW0TraQBtoE22iLbSFttJW2k7baSftpN20m/bQHtpLe2kf7aP9tJ8O0AE6SAfpEB2iw3SYjtAROkpH6Rgdo+N0nE7SSTpFp+g0naazdJbO0Y90nn6iC+QpwWayifYam2Qz2yw2q/3rOJfNbfPYvDafDW0Om/NXMVlrC9nCtogtap0tZovbm34Tl7FlbTl7u73Dlrd32gq2jM0EfxlXs/fa6vY+W8Peb6vae34V17QP2Fr2EVvbNrR1bGNbzza19e0jtoFtaBvZxraJbWpb2ydsG/ukbWufsu3s07+JF9n37Rq71q6z6+0e+4k9a3+wR+zX9pz90Xaz3W0/+5Ltb1+2A+wrdqAd9OsYwI6wb9iRdpQdbcfYsXbcb+LJdoqdaqfZ6fYdO8PO/E280L5nZ9tUO9fOs/PtgotxWk2p9gO72H5ol9ildpldblfYlXaVXf3nWpfbjXaT3Wx324/tVrvNbrc77E6762Kcdhx77ad2n/3MHrZf2QP2c3vQHrWH7JcX47TjO2q/scfst/a4PWFP2u/sKfu9PW3PXDz+tGP/zv5kL1hvgZEVazYccAbOyAmciRP5Gk7izJyFs3KMr+VsfB1n5+s5B+fkXJyb83BezschE1tmjjg/F+A438AF+UYuxIW5CBdlx8W4ON/EJfhmLsm3cCm+lUvzbVyGy3I5vp3v4PJ8J1fgu7gi382VuDJX4ap8D1fje7k638c1+H6uyQ9wLX6Qa/NDXIfrcj1+mOvzI9yAG3IjbsxNuCk340e5OT/GLbglt+LHuTU/wW34SW7LT3E7fprb8zPcgf/AHfmP3Imf5c78HHfh57krv8DduDsncw/uyS9yL+7Nfbgv9+OXuD+/zAP4FR7Ig3gwv8pD+DUeyq/zMB7OI/gNHsmjeDSP4bE8jlP4TR7Pb/EEfpsn8iSezFN4Kk/j6fwOz+CZPIvf5dk8h+fyPJ7PC3ghv8eL+H1O5Q94MX/IS3gpL+PlvIJX8ipezWt4La/j9byBN/Im3sxb+CPeytt4O+/gnbyLd/PHvIc/4b38Ke/jz3g//4kP8Od8kL/gQ/wlH+av+Ah/zUf5Gz7G3/JxPsEn+Ts+xd/zaT7DZ/kHPsc/8nn+iS+wZ4gwUpGOTBREGaKMUUKUKUqMromSosxRlihrFIuujbJF10XZo+ujHFHOKFeUO8oT5Y3yRWFEkY04iqL8UYEoHt0QFYxujApFhaMiUdHIRcWi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblotujO6Ly0Z1RheiuqGJ0d1QpqhxViapG90TVonuj6tF9UY3o/qhk9EBUK3owqh09FNWJ6kb1ooej+tEjUYOoYdQoahw1iZpGzaJHo+bRY1GLqGXUKno8ah09EbWJnozaRk9F7aKnL68vHPx8Nv2r9clRj0hfumG7T8+PL4gvjL8XXxR/P54a/yC+OP5hfEl8aXxZfHl8RXxlfFV8dXxNfG18XXx9fEN8Y3xTfHPc+6oZwaFTToFxgcvgMroEl8klumtcksvssrisLuauddncdS67u97lcDldLpfb5XF5XT4XOnLWsYtcflfAxd0NrqC70RVyhV0RV9Q5V8wVd01dM9fMNXePuRaupWvlHnePuyfcE+7JhEuFu/bumUy/jP/onnWd3XOui3vedXUvuG6uu0t2ya6n6+l6uV6uj+vj+rl+rr/r7wa4AW6gG+gGu8FuiBvihrqhbpgb5ka4EW6kG+lGu9FurBvrUlyKG+/GuwlugpvoJrrJbrKb6qa66W66m+FmuFlulpvtZru5bq6b7+a7hW6hW+QWuVSX6ha7xW6JW+KWuWVuhVvhVrlVbo1b49a5dW6D2+A2uU1ui9vitrqtbrvb7na6nW632+32uD1ur9vr9rl9br/b7w64A+6g+8Idcl+6w+4rd8R97Y66b9wx96077k64k87rU+57d9qdcWfdD+6c+9Gddz+5C867lNibsfGxt2ITYm/HJsYmxSbHpsSmxqbFpsfeic2IzYzNir0bmx2bE5sbmxebH1sQWxh7L7Yo9n4sNfZBbHHsw9iS2NLYstjy2IrYypj3ebdGPr8v4OP+Bl/Q3+gL+cK+iC/qnS/mi/ubfAl/sy/pb/Gl/K2+tL/Nl/FlfTnf0DfyjX0T39Q384/65v4x38K39K384761f8K38U/6tv4p384/7dv7Z3wH/wff0f/Rd/LPzrnUWd/Vv+C7+e4+2ffwPf2Lvpfv7fv4vr6ff8n39y/7Af4VP9AP8oP9q36If80P9a/7YX64H+Hf8CP9KD/aj/Fj/Tif4t/04/1bfoJ/20/0k/xkP8VP9dP8dP+On+Fn+ln+XT/bz/Fz/Tw/3y/wC/17fpF/36f6D/xi/6Ff4pf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+I/8lv9Nr/d7/A7/S6/23/s9/hP/F7/qd/nP/P7/Z/8Af+5P+i/8If8l/6w/8of8V/7o/4bf8x/64/7E/6k/86f8t/70/6MP+t/8Of8j/68/8lfkP9ZE0IIIYT4h+grrO/xN15Tl5Y0PQEg87bch36O/J9zbsjx8yu91Z52MQB4qnunur8sdesmJydfmr9EQ1BgHgDELue/+P0Dl+Kl0AqegLbQEkr8zfp6q3IXd/rf5Y/fCpAI8MudEKTdHiXCX+e/+e/kb/geXyn/PIBCBS7PSdvRL/Hl/CX/Tv5dra+QP9PnKQAt/mJOElyOL+cvDo/B09D2V1v+pSt1WgghhBBCCCHEf7Le6lznK93fpt2f5zGX52SEy/GV7s+voMLvcQxCCCGEEEIIIYT47/3huS5PPtq2bcsO/8mDjP8eZfwbDBAA/g3K+P81SIB/izL+jwdX+y+TEEIIIYQQ4vd2+aL/alcihBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKkX//6N4Spf3jjq32MQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxNX2XwEAAP//MLxMFQ==") socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff03) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$binder(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x3}}]}) 14.510434228s ago: executing program 4 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 13.952746845s ago: executing program 2 (id=219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x3, 0x4) 12.955971038s ago: executing program 2 (id=220): syz_usb_connect$uac1(0x2, 0xa6, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000540)=0x7b1) 11.052637203s ago: executing program 2 (id=222): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x86) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = fanotify_init(0x1, 0x40000) readv(r5, 0x0, 0x0) getdents(r4, 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000380)=""/149) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@abort}, {@noload}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@orlov}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xa}}]}, 0xf2, 0x490, &(0x7f0000000f00)="$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") 10.725198017s ago: executing program 1 (id=223): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10}, 0x1c, 0x0}}], 0x433, 0x0) 10.120980519s ago: executing program 1 (id=225): io_uring_setup(0x6443, &(0x7f0000000000)={0x0, 0xa665, 0x40, 0x1, 0xe7}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e110b07"], 0xec) 9.342926099s ago: executing program 5 (id=226): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) setgroups(0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000240)={0x3, 0x1, 0x9d5}) 9.342253169s ago: executing program 3 (id=227): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e1e00", 0x18, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x38}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffd, 0x0, 0xfff, {[@sack_perm={0x4, 0x4f}, @nop]}}}}}}}}, 0x0) 9.181372255s ago: executing program 4 (id=228): getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x8000, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYBLOB="7abec0c9fe6122a21412c614e430852e2aeca68b448de7997ff79fc0b70e66252aa21d9d07f1cf", @ANYRESOCT], 0x10, 0x1d0, &(0x7f0000000440)="$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") fallocate(r0, 0x0, 0x2, 0x8000c62) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000380)={[{@nojournal_checksum}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@barrier}, {@auto_da_alloc}, {@noload}]}, 0x1, 0x5b3, &(0x7f0000000780)="$eJzs3T9sG9UfAPDvne2mf/L7pUggAepQAVKRqjpJ/0BhaldEpUodkFggctyoihNXcQJNFKnpXiE68E9dygYDI4iBAbGwwcoCYkaqaARS04EaObaTNHWCE+q4xJ+PdPF7dxd/3zv7++x7upMD6FmHa3/SiGci4nwSMbBmWzYaGw/X91tanC/cW5wvJFGtXvg9iSQi7i7OF5r7J43HAxGxEBFPR8R3uYij6cpT7mkWKrNz4yOlUnGqUR+cnrg8WJmdO3ZpYmSsOFacPPHyK6dOnzw1fHx4bXPvVdfWclvr6/Vfbrx3/cfXbt34/ItDC4UPRpI4E/2NbWv78SjVj0kuzqxbf7ITwboo6XYD2JZMI89rqfRUDESmkfWtVNcODn070jygg6p9EVWgRyXyH3pU83tA7fy3uezk94/bZ+snILW4S4vzhavRjJ+tz03E3uVzk/1/JA+cmdTONw/uZEPZlRauRcRQNvvw+z9pvP/WzlptzdCjaiQd8+3Z+gv18Oufrow/0WL86W/Onf5LzfFvqTH+LbWIn9lg/DvfZoy/3vz1kw3jX+uLZ7MR9x+Kn6zET1rETyPi7Tbj33zj69Mbbat+GnEkWvV/dUYx2Xx+ePDipVJxqP63ZYxvjhx6deP+R+zfIH59znbv8sfM2v7vabQpbbP/X33/5XMLm8R/8fnNX/9Wx39fRLzfZvwn7n72+kbbbl9L7tS+BbTq/2bxk8jFrTbjv3Tm8M+NollDAAAAAAAAAAB4hNLla9mSNL9STtN8vn4P75OxPy2VK9NHL5ZnJkfr17wdjFzavNJqoF5PavXhxvW4zfrxdfUTmUbAzL7ler5QLo12ue8AAAAAAAAAAAAAAAAAAADwuDiw7v7/PzPL9/+v/7lqYLfa+Ce/gd1O/kPvejD/k661A9h5Pv+hZ1XlP/SuVvlvTIDeINehd8l/6F3yH3qX/IfeJf8BAAAAAAAAAAAAAAAAAAAAAAAAAKAjzp87V1uq9xbnC7X6aHZ2Zrz8zrHRYmU8PzFTyBfKU5fzY+XyWKmYL5Qn/un5knL58lBMzlwZnC5Wpgcrs3NvTZRnJpu/KVrMdbxHAAAAAAAAAAAAAAAAAAAA8N/Tv7wkaT4iV6+naT4f8b+IOJhEcvFSqTgUEf+PiJ8yub5afbjbjQYAAAAAAAAAAAAAAAAAAIBdpjI7Nz5SKhWnOlfINkJ1MET7hexWdo6IhTZ2vtp+M2rPuOU25xoHsMuHbvuFu9W6bjXjhw9X12Qej/fh41/o4qAEAAAAAAAAAAAAAAAAAAA9avWm33b/435nGwQAAAAAAAAAAAAAAAAAAAA9Kf0tiYjacmTghf71W/ckS5nlx4h49+aFj66MTE9PDdfW31lZP/1xY/3xbrQfaFczT9OIqOUxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKoyOzc+UioVp7ZZ6Gtjn273EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7/g4AAP//5TrUlQ==") r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r2, 0x10, 0x6, 0x10001) syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000280)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030372c6e6f7374726963742c7569643d69676e6f72652c6769643d666f726765742c6c6f6e6761642c6e6f7672732c756e64656c6574652c6d6f64653d30303030303030303030303030303030303033353031362c646d6f64653d30303030303030303030303030303030303030303031312c00e3cc6abaa52ef118fcbe734b47a6bf66bdd357c81c22ed4c07659e40ba6f24e50fafda55f8d6b01f7fa9505996c5c8e5fac082523b41c69e892f8f3372228da85b089c449c8243489693fc724dc3a34a1c85226b306f86ba0484aad17849d21905bbe3dbc20bf4c98777720c05637db44ef1224790223b183be4cbccef28b6dc7701cf3b6d45babe7a0177b34116f8033c0614d351a01526a5e4626159b2d7a3176575b87ce23efc23d6fc182ecb01ea4d182720d93ab9a99e"], 0x1, 0xc56, &(0x7f0000002680)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 9.014071933s ago: executing program 1 (id=229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000780)="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", 0x175}], 0x1, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x240008c1) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 8.586065847s ago: executing program 3 (id=230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x3, 0x4) 7.501390059s ago: executing program 3 (id=231): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f00000043c0)={0x2020}, 0x2020) 7.277778931s ago: executing program 1 (id=232): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000004580)={0x2020}, 0x2020) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x20000041) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x50, 0xffffffffffffffff, 0x24c19000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]}) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) 6.887989782s ago: executing program 4 (id=233): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.837571887s ago: executing program 3 (id=234): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0x2, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x20000054) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 5.64185278s ago: executing program 4 (id=235): socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x2, [{}, {}]}, 0x48) 5.531961991s ago: executing program 3 (id=236): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_matches\x00') prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) ptrace$setsig(0x4203, r1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_rxfh_indir={0x39}}) syz_open_procfs(0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x4, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) read$hiddev(r0, &(0x7f0000000100)=""/100, 0x64) 3.997297829s ago: executing program 3 (id=237): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000001f80)=""/4094, 0x0, 0xffe, 0x1}, 0x28) 3.997176649s ago: executing program 5 (id=238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.971714672s ago: executing program 1 (id=239): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0xf8, 0x1, {0x22, 0xd}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xd, {[@main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x1, 0x0, 0x9, "bb"}, @main=@item_012={0x1, 0x0, 0xb, "c9"}, @local=@item_012={0x2, 0x2, 0x3, "11fc"}, @local=@item_4={0x3, 0x2, 0xa, "28ee8706"}]}}, 0x0}, 0x0) 3.843794755s ago: executing program 5 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="180000001800210a000300000000000004000002040010"], 0x18}, 0x1, 0x0, 0x0, 0x4810}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x160}, 0x1, 0x0, 0x0, 0x20008884}, 0x24004004) close(0x3) 3.577449182s ago: executing program 2 (id=241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x3, 0x4) 3.431705747s ago: executing program 5 (id=242): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000180)='./file1\x00', 0x2028000, &(0x7f0000000740)=ANY=[@ANYRES8, @ANYRES64=0x0, @ANYRESDEC=0x0], 0x3, 0x1502, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r6) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.611762691s ago: executing program 2 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r1, &(0x7f0000001840)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 1.117626125s ago: executing program 2 (id=244): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b35b82edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$eJzs0D9rU1EYx/Hvc87JnwpVouJQwQYsxhuqyb1VB6fgFKEXHFwEg4Y0NsVETW8GW1roIgWp9i3oVEcVdBJRcC4OgoNel27SDMVBHCSSm1PB1+D5DPd3nx/cew5PK+pGGeD33kqDCgnNQT4iGGBSRp1So3xt5+82N0fBJTtv2HxmcyJaWr5db7ebi/mLeXL/FMCPpPtbRS84pugLFeTz3kqjLjdDBhU6ai4kN0vxEbpG13vMhBnn6A00g8IGlxVdGd72UKnXuVeKlpbPLHTq88355p0gmLlQPlcunw9KtxbazfIrxHsoiies4oVkQsa8VVI1HmybA0wL4rVUrKXYJ11jc1ufPjndR3m7DBDeFfpkvppWXl3lFNnrKKhyRHiKDpmaZUxhSA6qIlfUS/HNJ/MzpciuaX22cbc9t35Nya/0VkV2s+LvkCr4BEWfmeFqOMx71mOmYqoxWzE735iUN8MV7e/VrA2fz+10nBOQ5n6911v00/BBTEhQCAlyMJ78TiX3ysFb+40Nvuy/OI7jOI7jOI7jOP+BPwEAAP//LiJjdw==") openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 210.459648ms ago: executing program 5 (id=245): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) 0s ago: executing program 1 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 64.438880][ T4171] cgroup: Unknown subsys name 'net' [ 64.532227][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.026638][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.599423][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.643460][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 67.700390][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.770897][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.834824][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.842801][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.851715][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.866593][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.874685][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.883557][ T4182] device bridge_slave_0 entered promiscuous mode [ 67.907377][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.914886][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.923281][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.931092][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.938187][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.946414][ T4182] device bridge_slave_1 entered promiscuous mode [ 67.995167][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.002432][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.011003][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.037971][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 68.047958][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.056610][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.065110][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.080970][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.092319][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.122401][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.136225][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.161008][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.168084][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.176184][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.207324][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.216867][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.224149][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.232604][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.272241][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.290949][ T4184] team0: Port device team_slave_0 added [ 68.299508][ T4182] team0: Port device team_slave_0 added [ 68.307726][ T4184] team0: Port device team_slave_1 added [ 68.319480][ T4182] team0: Port device team_slave_1 added [ 68.334170][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.375494][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.410439][ T4183] team0: Port device team_slave_0 added [ 68.417238][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.424662][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.451066][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.471491][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.478477][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.504698][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.516338][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.523585][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.531964][ T4181] device bridge_slave_0 entered promiscuous mode [ 68.541908][ T4183] team0: Port device team_slave_1 added [ 68.547770][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.554940][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.564117][ T4181] device bridge_slave_1 entered promiscuous mode [ 68.572331][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.579582][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.605796][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.624638][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.632006][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.658686][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.700238][ T4190] team0: Port device team_slave_0 added [ 68.707955][ T4190] team0: Port device team_slave_1 added [ 68.760661][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.767652][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.794680][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.808235][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.841210][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.848207][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.874281][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.887832][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.901718][ T4182] device hsr_slave_0 entered promiscuous mode [ 68.909479][ T4182] device hsr_slave_1 entered promiscuous mode [ 68.916869][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.923920][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.950474][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.963153][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.970172][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.996400][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.011756][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.018620][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.025513][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.033657][ T4184] Cannot create hsr debugfs directory [ 69.063762][ T4181] team0: Port device team_slave_0 added [ 69.072157][ T4181] team0: Port device team_slave_1 added [ 69.173173][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.180283][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.187148][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.195232][ T4183] Cannot create hsr debugfs directory [ 69.201631][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.208604][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.234936][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.249512][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.256316][ T4190] device hsr_slave_1 entered promiscuous mode [ 69.263466][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.271954][ T4190] Cannot create hsr debugfs directory [ 69.279675][ T4192] Bluetooth: hci4: command 0x0409 tx timeout [ 69.286511][ T4192] Bluetooth: hci3: command 0x0409 tx timeout [ 69.289198][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 69.292980][ T4192] Bluetooth: hci2: command 0x0409 tx timeout [ 69.304750][ T4192] Bluetooth: hci0: command 0x0409 tx timeout [ 69.316827][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.325353][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.351662][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.489797][ T4181] device hsr_slave_0 entered promiscuous mode [ 69.496549][ T4181] device hsr_slave_1 entered promiscuous mode [ 69.503527][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.511465][ T4181] Cannot create hsr debugfs directory [ 69.689262][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.700901][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.715659][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.726416][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.789257][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.814145][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.832581][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.851669][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.891148][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.907249][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.918024][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.954361][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.966521][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.996722][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.006485][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.042037][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.051575][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.078346][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.089763][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.099125][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.106406][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.141594][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.154810][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.163175][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.172322][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.181253][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.188347][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.197387][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.212227][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.224551][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.238286][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.249148][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.272023][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.282618][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.293196][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.307118][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.329527][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.340549][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.349355][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.358407][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.369377][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.377981][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.396007][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.427677][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.437238][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.446476][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.455313][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.464257][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.475861][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.487900][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.501498][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.508600][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.524100][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.543585][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.580789][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.596192][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.606133][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.613322][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.634034][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.676384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.686652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.711062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.727426][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.736992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.752448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.765578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.777140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.805469][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.818579][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.827119][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.836432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.846689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.880201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.892184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.911883][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.938329][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.953588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.962381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.996436][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.013985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.026317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.062401][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.069638][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.089524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.098407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.107605][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.114775][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.129517][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.145150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.160521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.188500][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.210331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.221335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.230927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.239975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.250315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.259732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.269305][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.276797][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.296981][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.330609][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.342233][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.351340][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.360322][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 71.360372][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 71.360400][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 71.360426][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 71.360460][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 71.395123][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.406717][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.416261][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.425586][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.432751][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.441629][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.451505][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.461600][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.468799][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.477147][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.486646][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.495638][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.507117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.518204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.532935][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.566711][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.578497][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.592390][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.603292][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.612339][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.621336][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.630791][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.639657][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.647999][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.656510][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.665058][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.674621][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.685342][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.694466][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.703252][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.711455][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.729434][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.751149][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.762932][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.777390][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.784576][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.801602][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.810650][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.819206][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.826297][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.834412][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.843985][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.861503][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.929058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.948478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.958584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.989123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.998093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.015358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.024604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.033604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.044185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.062892][ T4182] device veth0_vlan entered promiscuous mode [ 72.089428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.098377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.108419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.121702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.131551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.141761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.153330][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.169783][ T4182] device veth1_vlan entered promiscuous mode [ 72.187873][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.210684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.220221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.228119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.241774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.249886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.274543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.290618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.306077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.337498][ T4190] device veth0_vlan entered promiscuous mode [ 72.345134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.358899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.366925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.376393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.396956][ T4182] device veth0_macvtap entered promiscuous mode [ 72.410295][ T4182] device veth1_macvtap entered promiscuous mode [ 72.425621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.435493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.450551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.465742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.478364][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.495952][ T4190] device veth1_vlan entered promiscuous mode [ 72.529905][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.538351][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.547377][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.567281][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.589304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.597632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.608037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.619646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.628506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.655714][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.669481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.679068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.686859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.696025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.705678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.714725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.724706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.734211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.743470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.752511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.763862][ T4190] device veth0_macvtap entered promiscuous mode [ 72.777834][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.788597][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.797815][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.807926][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.823323][ T4190] device veth1_macvtap entered promiscuous mode [ 72.831385][ T4184] device veth0_vlan entered promiscuous mode [ 72.843354][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.867533][ T4183] device veth0_vlan entered promiscuous mode [ 72.885599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.899970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.927504][ T4184] device veth1_vlan entered promiscuous mode [ 72.939081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.947400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.969272][ T4183] device veth1_vlan entered promiscuous mode [ 73.011913][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.023958][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.035963][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.049558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.057777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.067540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.076514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.086034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.095271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.112607][ T4184] device veth0_macvtap entered promiscuous mode [ 73.133804][ T4181] device veth0_vlan entered promiscuous mode [ 73.145524][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.157278][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.170935][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.180150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.189209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.197989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.210233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.218618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.227736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.236834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.245270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.254203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.265302][ T4184] device veth1_macvtap entered promiscuous mode [ 73.294577][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.305603][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.314737][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.325858][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.341982][ T4181] device veth1_vlan entered promiscuous mode [ 73.362728][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.374406][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.385551][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.396340][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.409631][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.427310][ T4183] device veth0_macvtap entered promiscuous mode [ 73.436854][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.445880][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 73.455938][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.468194][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.469378][ T4295] Bluetooth: hci3: command 0x040f tx timeout [ 73.482958][ T4295] Bluetooth: hci1: command 0x040f tx timeout [ 73.487705][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.490309][ T4295] Bluetooth: hci2: command 0x040f tx timeout [ 73.504046][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.512205][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 73.521522][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.530474][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.542032][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.550272][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.558897][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.567627][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.600530][ T4183] device veth1_macvtap entered promiscuous mode [ 73.617485][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.630403][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.640817][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.651409][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.662671][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.697833][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.710674][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.721304][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.732109][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.742280][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.753066][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.765191][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.772877][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.783769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.792998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.801998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.811011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.821935][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.831284][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.841329][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.851277][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.870435][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.880243][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.902236][ T4181] device veth0_macvtap entered promiscuous mode [ 73.913832][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.942568][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.950611][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.963973][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.975297][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.985980][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.000191][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.011106][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.023258][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.047350][ T4181] device veth1_macvtap entered promiscuous mode [ 74.054898][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.064175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.073612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.082922][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.093660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.115736][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.126495][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.136289][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.145136][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.172584][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.220113][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.259325][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.277603][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.288324][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.299936][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.310207][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.321322][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.331632][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.342668][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.354445][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.376803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.385645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.395081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.410735][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.422249][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.433132][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.444322][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.454706][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.465522][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.475970][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.487620][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.500607][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.547859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.560377][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.568468][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.581133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.591736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.607292][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616265][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.628072][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.637524][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.706170][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.724877][ T1377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.743373][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.755461][ T1377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.796051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.836022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.868399][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.888411][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.925345][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.950403][ T21] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 74.960347][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.968464][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.976596][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.007688][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.054334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.068107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.095249][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.128036][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.169782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.196920][ T4306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.244122][ T4308] loop0: detected capacity change from 0 to 512 [ 75.339076][ T21] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 75.367947][ T21] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.402562][ T21] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 75.429289][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.446152][ T21] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 75.465740][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.510699][ T21] usb 5-1: config 0 descriptor?? [ 75.519696][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 75.526544][ T4295] Bluetooth: hci2: command 0x0419 tx timeout [ 75.543097][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 75.572919][ T4295] Bluetooth: hci3: command 0x0419 tx timeout [ 75.597329][ T4295] Bluetooth: hci4: command 0x0419 tx timeout [ 75.636052][ T4320] loop0: detected capacity change from 0 to 512 [ 75.657941][ T4322] loop2: detected capacity change from 0 to 16 [ 75.866871][ T4320] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 75.894491][ T4320] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.230885][ T26] audit: type=1326 audit(1768175609.735:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7fc00000 [ 76.564352][ T4320] Invalid ELF header len 10 [ 76.655573][ T21] wacom 0003:056A:00B3.0001: unknown main item tag 0x0 [ 76.663047][ T21] wacom 0003:056A:00B3.0001: unknown main item tag 0x0 [ 76.678719][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.688715][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.698715][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.708713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.717722][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.726873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.735891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 76.745034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 76.754299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 76.763322][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 77.849389][ T4336] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 77.857291][ T4336] netlink: 'syz.3.11': attribute type 2 has an invalid length. [ 77.930815][ T21] wacom 0003:056A:00B3.0001: unknown main item tag 0x0 [ 78.032334][ T21] wacom 0003:056A:00B3.0001: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 78.062588][ T4330] EXT4-fs (loop0): shut down requested (2) [ 78.064783][ T26] audit: type=1326 audit(1768175609.785:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa839ccf749 code=0x7fc00000 [ 78.149700][ T21] wacom 0003:056A:00B3.0001: hidraw0: USB HID v0.03 Device [HID 056a:00b3] on usb-dummy_hcd.4-1/input0 [ 78.302520][ T21] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B3.0001/input/input5 [ 78.441354][ T21] usb 5-1: USB disconnect, device number 2 [ 78.573880][ T26] audit: type=1326 audit(1768175609.785:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7fc00000 [ 78.703271][ T26] audit: type=1326 audit(1768175609.785:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7fc00000 [ 78.825002][ T26] audit: type=1326 audit(1768175609.795:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7fc00000 [ 78.848423][ T26] audit: type=1326 audit(1768175609.795:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7fc00000 [ 79.129250][ T26] audit: type=1326 audit(1768175609.795:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7fc00000 [ 79.175573][ T4346] loop1: detected capacity change from 0 to 1024 [ 80.219076][ T4346] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.257929][ T4364] loop2: detected capacity change from 0 to 4096 [ 80.274751][ T4346] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 80.544338][ T4348] fido_id[4348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 80.569013][ T26] audit: type=1326 audit(1768175609.795:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7fc00000 [ 80.591345][ T26] audit: type=1326 audit(1768175609.795:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7fc00000 [ 80.617733][ T26] audit: type=1326 audit(1768175609.795:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7fc00000 [ 80.929169][ T4364] EXT4-fs (loop2): Test dummy encryption mode enabled [ 81.002453][ T4364] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 81.018004][ T4364] System zones: 0-5 [ 81.059646][ T4364] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 82.464614][ T4383] loop1: detected capacity change from 0 to 1024 [ 82.945653][ T4343] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.664019][ T4392] loop3: detected capacity change from 0 to 256 [ 83.720175][ T4392] ======================================================= [ 83.720175][ T4392] WARNING: The mand mount option has been deprecated and [ 83.720175][ T4392] and is ignored by this kernel. Remove the mand [ 83.720175][ T4392] option from the mount to silence this warning. [ 83.720175][ T4392] ======================================================= [ 83.824254][ T4392] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.857896][ T4392] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 83.888823][ T4343] usb 2-1: Using ep0 maxpacket: 8 [ 83.931763][ T4392] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 83.993650][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 83.993666][ T26] audit: type=1800 audit(1768175617.495:20): pid=4392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14" name="file1" dev="loop3" ino=1048590 res=0 errno=0 [ 84.029005][ T4343] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 84.048956][ T4343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.098836][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.126795][ T4343] usb 2-1: config 0 has no interface number 0 [ 84.319041][ T4343] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 84.341060][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.355096][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 84.385724][ T4343] usb 2-1: Product: syz [ 84.392702][ T4343] usb 2-1: Manufacturer: syz [ 84.404452][ T4343] usb 2-1: SerialNumber: syz [ 85.857426][ T4343] usb 2-1: config 0 descriptor?? [ 85.862640][ T21] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 85.879070][ T21] usb 3-1: config 0 has no interface number 0 [ 85.895486][ T21] usb 3-1: New USB device found, idVendor=0403, idProduct=f9d1, bcdDevice=d4.fc [ 85.928981][ T4343] usb 2-1: can't set config #0, error -71 [ 85.932449][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.956191][ T4343] usb 2-1: USB disconnect, device number 2 [ 85.987470][ T21] usb 3-1: config 0 descriptor?? [ 87.831362][ T1108] cfg80211: failed to load regulatory.db [ 89.678700][ C1] sched: RT throttling activated [ 89.818866][ T21] usb 3-1: string descriptor 0 read error: -71 [ 89.868320][ T21] ftdi_sio 3-1:0.148: FTDI USB Serial Device converter detected [ 89.937572][ T21] usb 3-1: Detected FT-X [ 89.958866][ T21] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 90.028816][ T21] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 90.052438][ T21] ftdi_sio 3-1:0.148: GPIO initialisation failed: -71 [ 90.098506][ T21] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 90.154604][ T21] usb 3-1: USB disconnect, device number 2 [ 90.213065][ T21] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 90.256833][ T21] ftdi_sio 3-1:0.148: device disconnected [ 90.318495][ T4425] loop0: detected capacity change from 0 to 2048 [ 90.440054][ T4425] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 90.463253][ T4425] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 90.490032][ T4425] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 90.516355][ T4425] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 90.549126][ T4425] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 90.586190][ T4429] loop4: detected capacity change from 0 to 16 [ 90.594301][ T4425] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 90.669590][ T4425] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 90.700140][ T4429] erofs: (device loop4): mounted with root inode @ nid 36. [ 90.769843][ T4425] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 90.859213][ T4425] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 91.009167][ T4425] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 91.022446][ T4433] loop3: detected capacity change from 0 to 512 [ 91.159063][ T4425] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 91.386625][ T4425] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 91.482990][ T4433] EXT4-fs error (device loop3): ext4_fill_super:4841: inode #2: comm syz.3.36: casefold flag without casefold feature [ 91.498800][ T4425] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 91.532357][ T4433] EXT4-fs (loop3): get root inode failed [ 91.538063][ T4433] EXT4-fs (loop3): mount failed [ 91.548757][ T4425] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 92.975868][ T4443] Zero length message leads to an empty skb [ 93.787891][ T4450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.42'. [ 95.455974][ T4459] loop4: detected capacity change from 0 to 2048 [ 95.906252][ T4459] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.560698][ T4470] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 98.797708][ T4479] loop2: detected capacity change from 0 to 512 [ 98.906664][ T4479] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 99.469855][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.208845][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 102.216496][ T21] usb 5-1: can't read configurations, error -71 [ 103.956164][ T4520] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 105.701567][ T4530] loop4: detected capacity change from 0 to 128 [ 105.821761][ T4530] FAT-fs (loop4): Unrecognized mount option "shortname=winntl=0" or missing value [ 106.000427][ T4536] loop0: detected capacity change from 0 to 1024 [ 106.248774][ T4536] EXT4-fs (loop0): inline encryption not supported [ 107.134610][ T4536] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.528906][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.632961][ T4536] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,inlinecrypt,noinit_itable,,errors=continue. Quota mode: none. [ 107.914757][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.954992][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.005807][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.047001][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.115350][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.185559][ T7] usb 3-1: config 0 descriptor?? [ 108.692008][ T7] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 108.775079][ T7] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 109.314415][ T4576] syz.2.68 uses obsolete (PF_INET,SOCK_PACKET) [ 109.478191][ T4340] usb 3-1: USB disconnect, device number 3 [ 114.647169][ T4233] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 114.691312][ T4233] Bluetooth: hci2: Injecting HCI hardware error event [ 114.699884][ T4200] Bluetooth: hci2: hardware error 0x00 [ 116.827484][ T4627] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.882325][ T4627] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 116.994079][ T4627] mmap: syz.4.99 (4627) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 117.500872][ T4639] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.503573][ T4295] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 121.031078][ T4295] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 121.120964][ T4295] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.131853][ T4295] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 121.298961][ T4295] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.318697][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.340743][ T4295] usb 3-1: Product: syz [ 121.344967][ T4295] usb 3-1: Manufacturer: syz [ 121.368761][ T4295] usb 3-1: SerialNumber: syz [ 121.430138][ T4660] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.685341][ T4660] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.776026][ T4672] loop1: detected capacity change from 0 to 512 [ 121.830217][ T4672] EXT4-fs (loop1): Test dummy encryption mode enabled [ 121.837118][ T4672] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.918828][ T4672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.976735][ T4672] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.115: bad orphan inode 131083 [ 122.017897][ T4672] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 122.223664][ T4672] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 122.224583][ T4679] loop3: detected capacity change from 0 to 512 [ 122.350268][ T4660] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.355253][ T4679] EXT4-fs (loop3): Mount option "journal_ioprio=0x0000000000000000" incompatible with ext2 [ 123.838578][ T4672] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 123.938869][ T4295] cdc_ncm 3-1:1.0: bind() failure [ 123.968849][ T4295] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 124.068851][ T4295] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 124.112688][ T4692] loop2: detected capacity change from 0 to 16 [ 124.119299][ T4295] usbtest: probe of 3-1:1.1 failed with error -71 [ 124.141452][ T4295] usb 3-1: USB disconnect, device number 4 [ 125.335730][ T4703] netlink: 48 bytes leftover after parsing attributes in process `syz.4.119'. [ 127.060545][ T4713] loop2: detected capacity change from 0 to 164 [ 127.937969][ T4721] loop1: detected capacity change from 0 to 512 [ 128.891441][ T4721] EXT4-fs (loop1): Mount option "journal_ioprio=0x0000000000000000" incompatible with ext2 [ 128.943677][ T26] audit: type=1326 audit(1768175662.445:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f3c23749 code=0x7ffc0000 [ 130.528774][ T26] audit: type=1326 audit(1768175662.475:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f30f3c23749 code=0x7ffc0000 [ 130.578964][ T26] audit: type=1326 audit(1768175662.475:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f3c23749 code=0x7ffc0000 [ 131.206958][ T4185] Bluetooth: hci3: command 0x0409 tx timeout [ 131.218782][ T26] audit: type=1326 audit(1768175662.475:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f3c23749 code=0x7ffc0000 [ 131.242664][ T26] audit: type=1326 audit(1768175662.475:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30f3c23749 code=0x7ffc0000 [ 131.267249][ T26] audit: type=1326 audit(1768175662.475:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f3c23749 code=0x7ffc0000 [ 131.290567][ T26] audit: type=1326 audit(1768175662.475:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f3c23749 code=0x7ffc0000 [ 131.303599][ T4746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.130'. [ 131.314568][ T26] audit: type=1326 audit(1768175662.475:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30f3c23749 code=0x7ffc0000 [ 131.345098][ T26] audit: type=1326 audit(1768175662.475:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f3c23749 code=0x7ffc0000 [ 131.367656][ T26] audit: type=1326 audit(1768175662.475:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f3c23749 code=0x7ffc0000 [ 131.439433][ T4332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.478942][ T4746] netlink: 21 bytes leftover after parsing attributes in process `syz.2.130'. [ 131.511768][ T4746] netlink: 21 bytes leftover after parsing attributes in process `syz.2.130'. [ 131.888257][ T4749] loop2: detected capacity change from 0 to 1024 [ 131.906195][ T4332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.191828][ T4749] EXT4-fs (loop2): inline encryption not supported [ 132.229447][ T4749] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.341359][ T4332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.450317][ T4749] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,inlinecrypt,noinit_itable,,errors=continue. Quota mode: none. [ 132.482232][ T4332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.519014][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.525412][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.542100][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 133.606773][ T4725] chnl_net:caif_netlink_parms(): no params data found [ 133.668086][ T4748] loop3: detected capacity change from 0 to 2048 [ 133.743883][ T4748] EXT4-fs (loop3): Unrecognized mount option "sync" or missing value [ 133.975012][ T4765] loop3: detected capacity change from 0 to 1024 [ 134.111521][ T4765] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.258442][ T4765] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 134.350879][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.358045][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.405197][ T4725] device bridge_slave_0 entered promiscuous mode [ 134.476729][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.655756][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.451686][ T4173] udevd[4173]: incorrect jbd checksum on /dev/loop3 [ 135.478275][ T4725] device bridge_slave_1 entered promiscuous mode [ 135.528399][ T4794] loop2: detected capacity change from 0 to 128 [ 135.566238][ T4725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.598981][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 135.610587][ T4725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.624299][ T4794] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.704036][ T4794] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.741168][ T4794] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 135.748540][ T4794] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 135.866802][ T4794] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 135.944762][ T4725] team0: Port device team_slave_0 added [ 136.010877][ T4725] team0: Port device team_slave_1 added [ 136.067417][ T4794] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.229738][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.239349][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.142597][ T4814] loop2: detected capacity change from 0 to 512 [ 137.158442][ T4725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.269931][ T4814] EXT4-fs (loop2): Mount option "journal_ioprio=0x0000000000000000" incompatible with ext2 [ 137.287335][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.307018][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.737165][ T4340] Bluetooth: hci3: command 0x0419 tx timeout [ 138.847721][ T4820] loop1: detected capacity change from 0 to 256 [ 138.850996][ T4725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.344926][ T4725] device hsr_slave_0 entered promiscuous mode [ 139.364085][ T4725] device hsr_slave_1 entered promiscuous mode [ 141.563257][ T4725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.576890][ T4725] Cannot create hsr debugfs directory [ 141.860339][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 141.860354][ T26] audit: type=1326 audit(1768175675.365:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7ffc0000 [ 142.008740][ T26] audit: type=1326 audit(1768175675.395:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa839c6b829 code=0x7ffc0000 [ 142.181311][ T26] audit: type=1326 audit(1768175675.395:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7ffc0000 [ 142.228703][ T26] audit: type=1326 audit(1768175675.395:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa839c6b829 code=0x7ffc0000 [ 142.346313][ T26] audit: type=1326 audit(1768175675.395:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa839c6b829 code=0x7ffc0000 [ 142.499096][ T26] audit: type=1326 audit(1768175675.395:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7ffc0000 [ 142.679933][ T4725] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.179111][ T4725] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.232418][ T4725] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.303653][ T4725] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.313861][ T26] audit: type=1326 audit(1768175675.405:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa839c6b829 code=0x7ffc0000 [ 143.462632][ T26] audit: type=1326 audit(1768175675.405:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa839c6b829 code=0x7ffc0000 [ 143.548888][ T26] audit: type=1326 audit(1768175675.405:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa839c6b829 code=0x7ffc0000 [ 143.648787][ T26] audit: type=1326 audit(1768175675.405:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7ffc0000 [ 143.757905][ T4332] device hsr_slave_0 left promiscuous mode [ 143.806029][ T4332] device hsr_slave_1 left promiscuous mode [ 144.801283][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.848812][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.895129][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.058171][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.162346][ T4875] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 145.170161][ T4875] netlink: 'syz.2.144': attribute type 2 has an invalid length. [ 146.121165][ T4332] device bridge_slave_1 left promiscuous mode [ 146.176676][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.368799][ T4233] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.482293][ T4340] hid-generic 0005:16C0:05DF.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 146.600911][ T4332] device bridge_slave_0 left promiscuous mode [ 146.607240][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.642903][ T4889] loop2: detected capacity change from 0 to 256 [ 146.812704][ T4889] FAT-fs (loop2): Directory bread(block 64) failed [ 146.830290][ T4889] FAT-fs (loop2): Directory bread(block 65) failed [ 146.837028][ T4889] FAT-fs (loop2): Directory bread(block 66) failed [ 146.889995][ T4889] FAT-fs (loop2): Directory bread(block 67) failed [ 146.918813][ T4889] FAT-fs (loop2): Directory bread(block 68) failed [ 146.920581][ T4332] device veth1_macvtap left promiscuous mode [ 146.930554][ T4889] FAT-fs (loop2): Directory bread(block 69) failed [ 146.958897][ T4233] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 146.967177][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 146.980252][ T4332] device veth0_macvtap left promiscuous mode [ 146.986411][ T4332] device veth1_vlan left promiscuous mode [ 146.992084][ T4889] FAT-fs (loop2): Directory bread(block 70) failed [ 147.003513][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 147.015454][ T4889] FAT-fs (loop2): Directory bread(block 71) failed [ 147.032977][ T4332] device veth0_vlan left promiscuous mode [ 147.055524][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 147.055541][ T26] audit: type=1326 audit(1768175680.555:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2d683749 code=0x7ffc0000 [ 147.084718][ T4889] FAT-fs (loop2): Directory bread(block 72) failed [ 147.092917][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.118160][ T4889] FAT-fs (loop2): Directory bread(block 73) failed [ 147.147971][ T4233] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.177498][ T26] audit: type=1326 audit(1768175680.555:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2d683749 code=0x7ffc0000 [ 147.188872][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.736616][ T4895] attempt to access beyond end of device [ 147.736616][ T4895] loop2: rw=524288, want=1324, limit=256 [ 147.751060][ T4895] attempt to access beyond end of device [ 147.751060][ T4895] loop2: rw=0, want=1324, limit=256 [ 148.239224][ T4896] FAT-fs (loop2): Filesystem has been set read-only [ 148.331489][ T4233] usb 2-1: config 0 descriptor?? [ 148.399121][ T4233] usb 2-1: can't set config #0, error -71 [ 148.416090][ T4233] usb 2-1: USB disconnect, device number 3 [ 148.436523][ T26] audit: type=1326 audit(1768175680.555:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8d2d63a357 code=0x7ffc0000 [ 148.598246][ T26] audit: type=1326 audit(1768175680.555:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8d2d63a3b6 code=0x7ffc0000 [ 149.658919][ T26] audit: type=1326 audit(1768175680.555:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d2d68334b code=0x7ffc0000 [ 149.728712][ T26] audit: type=1326 audit(1768175680.555:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8d2d683749 code=0x7ffc0000 [ 149.819156][ T26] audit: type=1326 audit(1768175680.555:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2d683749 code=0x7ffc0000 [ 149.928756][ T26] audit: type=1326 audit(1768175680.565:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2d683749 code=0x7ffc0000 [ 150.019627][ T26] audit: type=1326 audit(1768175680.565:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2d683749 code=0x7ffc0000 [ 150.078783][ T26] audit: type=1326 audit(1768175680.585:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d2d683749 code=0x7ffc0000 [ 150.243514][ T4914] loop3: detected capacity change from 0 to 1024 [ 150.403678][ T4914] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.414800][ T4914] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.714228][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 150.793585][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 150.808824][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.884574][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.969253][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.018797][ T21] usb 4-1: device descriptor read/64, error -71 [ 151.308818][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.416686][ T4332] bond0 (unregistering): Released all slaves [ 151.631354][ T21] usb 4-1: device descriptor read/64, error -71 [ 151.749157][ T21] usb usb4-port1: attempt power cycle [ 152.727613][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 152.727631][ T26] audit: type=1326 audit(1768175686.215:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839ccf749 code=0x7ffc0000 [ 152.773147][ T4936] loop1: detected capacity change from 0 to 512 [ 152.792319][ T26] audit: type=1326 audit(1768175686.265:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa839ccf749 code=0x7ffc0000 [ 152.828978][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.865514][ T4936] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.894211][ T26] audit: type=1326 audit(1768175686.265:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa839ccf783 code=0x7ffc0000 [ 152.916722][ T26] audit: type=1326 audit(1768175686.265:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa839cce1ff code=0x7ffc0000 [ 152.939099][ T21] usb 4-1: device descriptor read/8, error -71 [ 152.967780][ T4936] EXT4-fs (loop1): 1 truncate cleaned up [ 152.992799][ T4936] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000100,jqfmt=vfsv0,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000006,block_validity,noauto_da_alloc,,errors=continue. Quota mode: none. [ 153.068083][ T26] audit: type=1326 audit(1768175686.275:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa839ccf7d7 code=0x7ffc0000 [ 153.122574][ T26] audit: type=1326 audit(1768175686.275:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa839ccdf90 code=0x7ffc0000 [ 153.185465][ T26] audit: type=1326 audit(1768175686.275:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa839ccf34b code=0x7ffc0000 [ 153.278885][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.408743][ T26] audit: type=1326 audit(1768175686.345:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa839cce3aa code=0x7ffc0000 [ 153.431513][ T21] usb 4-1: device descriptor read/8, error -71 [ 153.501036][ T4725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.519102][ T26] audit: type=1326 audit(1768175686.345:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa839cce3aa code=0x7ffc0000 [ 153.569893][ T21] usb usb4-port1: unable to enumerate USB device [ 153.576583][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.588701][ T4233] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.591074][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.626680][ T26] audit: type=1326 audit(1768175686.345:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa839ccde97 code=0x7ffc0000 [ 153.664274][ T4725] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.693800][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.731299][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.752921][ T4944] loop1: detected capacity change from 0 to 256 [ 153.769614][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.776792][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.836108][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.878880][ T4233] usb 3-1: Using ep0 maxpacket: 16 [ 153.901556][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.931072][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.985823][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.993014][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.039003][ T4233] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 154.058395][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.066437][ T4233] usb 3-1: config 1 has no interface number 1 [ 154.084308][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 154.099151][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.105607][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 154.141463][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.174714][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.188767][ T4233] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.191374][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.229878][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.279081][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.295817][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.331086][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.351039][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.379570][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.413373][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.438941][ T4233] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.448299][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.498731][ T4233] usb 3-1: Product: syz [ 154.503350][ T4233] usb 3-1: Manufacturer: syz [ 154.519342][ T4233] usb 3-1: SerialNumber: syz [ 156.384730][ T4233] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 156.513691][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.527150][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.555543][ T4725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.265621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.270858][ T5002] loop3: detected capacity change from 0 to 1024 [ 157.275255][ T4233] usb 3-1: current rate 9338475 is different from the runtime rate 9338507 [ 157.319514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.364614][ T4725] device veth0_vlan entered promiscuous mode [ 157.400725][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.419561][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.435562][ T5002] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback. [ 157.474810][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.560702][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.619504][ T4725] device veth1_vlan entered promiscuous mode [ 157.697851][ T4233] usb 3-1: USB disconnect, device number 5 [ 157.735460][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.784530][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.829486][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.859525][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.957763][ T4725] device veth0_macvtap entered promiscuous mode [ 157.996068][ T4725] device veth1_macvtap entered promiscuous mode [ 158.083566][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.115475][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.183894][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.387736][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.451661][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.624677][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.681706][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.768498][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.880706][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.912986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.932462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.986017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.862283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.297111][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.358747][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.417765][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.458790][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.495315][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.574716][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.628823][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.650405][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.700380][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.733962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.768032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.816038][ T4725] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.836850][ T4725] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.884942][ T4725] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.897313][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 160.915910][ T4725] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.948220][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 161.012885][ T5054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.187'. [ 161.055159][ T5054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.187'. [ 161.350106][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.358232][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.652876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.714541][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.768729][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.811792][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.527148][ T5115] futex_wake_op: syz.1.182 tries to shift op by -1; fix this program [ 170.690914][ T5165] loop1: detected capacity change from 0 to 512 [ 170.808955][ T5165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.989728][ T5175] capability: warning: `syz.5.190' uses deprecated v2 capabilities in a way that may be insecure [ 171.042053][ T5165] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 172.624210][ T5165] EXT4-fs (loop1): 1 truncate cleaned up [ 172.668678][ T5165] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,debug_want_extra_isize=0x0000000000000068,lazytime,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 172.809699][ T5188] loop5: detected capacity change from 0 to 1024 [ 172.958899][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 173.218843][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 173.499032][ T13] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 173.522151][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.570859][ T13] usb 3-1: Product: syz [ 173.578576][ T13] usb 3-1: Manufacturer: syz [ 173.635152][ T13] usb 3-1: SerialNumber: syz [ 173.668998][ T13] r8152-cfgselector 3-1: config 0 descriptor?? [ 173.942914][ T5184] loop6: detected capacity change from 0 to 7 [ 173.982848][ T4327] Dev loop6: unable to read RDB block 7 [ 173.989350][ T5188] sock: sock_timestamping_bind_phc: sock not bind to device [ 174.006155][ T4327] loop6: unable to read partition table [ 174.023529][ T4327] loop6: partition table beyond EOD, truncated [ 174.066167][ T5184] Dev loop6: unable to read RDB block 7 [ 174.105337][ T5184] loop6: unable to read partition table [ 174.149011][ T5184] loop6: partition table beyond EOD, truncated [ 174.218344][ T5205] loop3: detected capacity change from 0 to 1024 [ 174.218981][ T5184] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.318876][ T13] r8152-cfgselector 3-1: Unknown version 0x0000 [ 174.328260][ T13] r8152-cfgselector 3-1: bad CDC descriptors [ 174.411169][ T5205] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 174.431212][ T13] r8152-cfgselector 3-1: Unknown version 0x0000 [ 174.498116][ T13] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 174.908831][ T4343] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 174.920220][ T5218] loop1: detected capacity change from 0 to 512 [ 175.130440][ T4343] usb 4-1: device descriptor read/64, error -71 [ 175.488714][ T4343] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 175.698886][ T4343] usb 4-1: device descriptor read/64, error -71 [ 177.063520][ T4343] usb usb4-port1: attempt power cycle [ 177.242873][ T5218] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 177.371343][ T5218] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.189446][ T4343] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 178.348786][ T4343] usb 4-1: device descriptor read/8, error -71 [ 179.036639][ T5257] loop3: detected capacity change from 0 to 1024 [ 180.115154][ T5257] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.230027][ T5257] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 180.240078][ T5257] EXT4-fs (loop3): orphan cleanup on readonly fs [ 180.279209][ T5257] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.214: Freeing blocks not in datazone - block = 0, count = 4096 [ 180.409647][ T5257] EXT4-fs (loop3): 1 orphan inode deleted [ 180.415453][ T5257] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000004,max_batch_time=0x000000004a460f56,minixdf,noload,quota,discard,nodioread_nolock,dax=never,dioread_nolock,,errors=continue. Quota mode: writeback. [ 180.519093][ T5265] loop1: detected capacity change from 0 to 1024 [ 183.098899][ T5265] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 183.182051][ T5265] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 183.268812][ T5265] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 183.308763][ T5265] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.463480][ T5265] EXT4-fs: failed to create workqueue [ 183.543905][ T5265] EXT4-fs (loop1): mount failed [ 183.554994][ T5287] loop3: detected capacity change from 0 to 1024 [ 183.642737][ T5287] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 183.715344][ T5287] EXT4-fs (loop3): orphan cleanup on readonly fs [ 183.725360][ T5287] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.221: Freeing blocks not in datazone - block = 0, count = 4096 [ 183.749740][ T5287] EXT4-fs (loop3): 1 orphan inode deleted [ 183.755552][ T5287] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.277191][ T4199] Bluetooth: hci0: unknown advertising packet type: 0x07 [ 185.277270][ T4199] Bluetooth: hci0: unknown advertising packet type: 0x6f [ 185.439018][ T4185] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.878975][ T4185] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.917785][ T4185] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.097974][ T4185] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.116162][ T4185] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.134014][ T4185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.148237][ T4185] usb 6-1: config 0 descriptor?? [ 186.981470][ T5338] loop3: detected capacity change from 0 to 512 [ 187.122276][ T5338] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 187.214145][ T5338] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 187.236213][ T5338] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 187.274979][ T5342] loop1: detected capacity change from 0 to 1024 [ 187.320898][ T5338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 187.331615][ T5338] System zones: 1-12 [ 187.344716][ T5338] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.231: corrupted in-inode xattr [ 187.368286][ T5338] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.231: couldn't read orphan inode 15 (err -117) [ 187.389194][ T5338] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 187.415551][ T4185] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 187.489931][ T4185] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 187.690182][ T5342] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 187.807168][ T1108] usb 6-1: USB disconnect, device number 2 [ 187.824796][ T5350] fido_id[5350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 187.866839][ T5342] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.863313][ T5381] loop5: detected capacity change from 0 to 256 [ 191.996074][ T4295] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 193.259343][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 194.220455][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 194.227910][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 194.242499][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.253371][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.489314][ T4295] usb 2-1: device descriptor read/all, error -71 [ 194.850312][ T5394] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 194.860383][ T5394] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 5394, name: syz.1.246 [ 194.869347][ T5394] 1 lock held by syz.1.246/5394: [ 194.874287][ T5394] #0: ffffffff8c142038 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 194.884081][ T5394] irq event stamp: 946 [ 194.888142][ T5394] hardirqs last enabled at (945): [] asm_sysvec_reschedule_ipi+0x16/0x20 [ 194.898215][ T5394] hardirqs last disabled at (946): [] _raw_spin_lock_irq+0x7a/0xe0 [ 194.907679][ T5394] softirqs last enabled at (790): [] ip_setsockopt+0x4c0/0x3070 [ 194.916997][ T5394] softirqs last disabled at (786): [] release_sock+0x2b/0x1b0 [ 194.926048][ T5394] Preemption disabled at: [ 194.926057][ T5394] [<0000000000000000>] 0x0 [ 194.934823][ T5394] CPU: 1 PID: 5394 Comm: syz.1.246 Not tainted syzkaller #0 [ 194.942106][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.952169][ T5394] Call Trace: [ 194.955456][ T5394] [ 194.958389][ T5394] dump_stack_lvl+0x168/0x230 [ 194.963068][ T5394] ? ip_setsockopt+0x4c0/0x3070 [ 194.967937][ T5394] ? show_regs_print_info+0x20/0x20 [ 194.973159][ T5394] ? load_image+0x3b0/0x3b0 [ 194.977691][ T5394] ___might_sleep+0x47c/0x600 [ 194.982384][ T5394] ? __might_sleep+0xf0/0xf0 [ 194.987098][ T5394] down_read+0x20/0x2e0 [ 194.991271][ T5394] kernfs_walk_and_get_ns+0x81/0x2b0 [ 194.996578][ T5394] ? kernfs_find_ns+0x510/0x510 [ 195.001440][ T5394] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 195.007601][ T5394] cgroup_get_from_path+0x5f/0x2f0 [ 195.012712][ T5394] cgroup_mt_check_v1+0x1ae/0x2c0 [ 195.017755][ T5394] xt_check_match+0x3c6/0xaa0 [ 195.022457][ T5394] ? xt_check_proc_name+0x240/0x240 [ 195.027712][ T5394] ? strcmp+0x2d/0xb0 [ 195.031704][ T5394] ? xt_find_match+0x1e1/0x210 [ 195.036479][ T5394] translate_table+0x14f8/0x1fe0 [ 195.041480][ T5394] ? ipt_register_table+0x7e0/0x7e0 [ 195.046702][ T5394] ? lock_chain_count+0x20/0x20 [ 195.051562][ T5394] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 195.057197][ T5394] ? lockdep_hardirqs_on+0x94/0x140 [ 195.062400][ T5394] ? do_ipt_set_ctl+0x8b4/0xcf0 [ 195.067256][ T5394] do_ipt_set_ctl+0x96c/0xcf0 [ 195.071936][ T5394] ? release_firmware_map_entry+0x190/0x190 [ 195.077832][ T5394] ? nf_setsockopt+0x218/0x280 [ 195.082600][ T5394] ? ipt_unregister_table_exit+0x220/0x220 [ 195.088406][ T5394] ? preempt_schedule_irq+0xd0/0x150 [ 195.093780][ T5394] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 195.099796][ T5394] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 195.105433][ T5394] ? lockdep_hardirqs_on+0x94/0x140 [ 195.110636][ T5394] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 195.116281][ T5394] nf_setsockopt+0x25f/0x280 [ 195.120915][ T5394] ip_setsockopt+0x2127/0x3070 [ 195.125781][ T5394] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 195.131169][ T5394] ? __might_sleep+0xf0/0xf0 [ 195.135766][ T5394] ? rcu_lock_release+0x9/0x20 [ 195.140566][ T5394] tcp_setsockopt+0x21a/0x1d70 [ 195.145342][ T5394] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 195.150726][ T5394] ? aa_af_perm+0x2b0/0x2b0 [ 195.155238][ T5394] ? __fget_files+0x40f/0x480 [ 195.160098][ T5394] ? aa_sock_opt_perm+0x74/0x100 [ 195.165039][ T5394] ? sock_common_setsockopt+0x32/0xb0 [ 195.170419][ T5394] ? sock_common_recvmsg+0x1b0/0x1b0 [ 195.175715][ T5394] __sys_setsockopt+0x2bf/0x3d0 [ 195.180666][ T5394] __x64_sys_setsockopt+0xb1/0xc0 [ 195.185692][ T5394] do_syscall_64+0x4c/0xa0 [ 195.190116][ T5394] ? clear_bhb_loop+0x30/0x80 [ 195.194809][ T5394] ? clear_bhb_loop+0x30/0x80 [ 195.199497][ T5394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.205422][ T5394] RIP: 0033:0x7fa839ccf749 [ 195.209845][ T5394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.229462][ T5394] RSP: 002b:00007fa837f15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.237886][ T5394] RAX: ffffffffffffffda RBX: 00007fa839f26090 RCX: 00007fa839ccf749 [ 195.245860][ T5394] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 195.253846][ T5394] RBP: 00007fa839d53f91 R08: 00000000000022f8 R09: 0000000000000000 [ 195.261912][ T5394] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 195.269889][ T5394] R13: 00007fa839f26128 R14: 00007fa839f26090 R15: 00007ffc89cac888 [ 195.277884][ T5394] [ 195.280906][ T5394] [ 195.283243][ T5394] ============================= [ 195.288077][ T5394] [ BUG: Invalid wait context ] [ 195.292915][ T5394] syzkaller #0 Tainted: G W [ 195.298721][ T5394] ----------------------------- [ 195.303556][ T5394] syz.1.246/5394 is trying to lock: [ 195.308738][ T5394] ffffffff8c24d570 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x81/0x2b0 [ 195.318217][ T5394] other info that might help us debug this: [ 195.324102][ T5394] context-{4:4} [ 195.327557][ T5394] 1 lock held by syz.1.246/5394: [ 195.332481][ T5394] #0: ffffffff8c142038 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 195.342228][ T5394] stack backtrace: [ 195.346024][ T5394] CPU: 1 PID: 5394 Comm: syz.1.246 Tainted: G W syzkaller #0 [ 195.354865][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.364918][ T5394] Call Trace: [ 195.368221][ T5394] [ 195.371152][ T5394] dump_stack_lvl+0x168/0x230 [ 195.375838][ T5394] ? show_regs_print_info+0x20/0x20 [ 195.381249][ T5394] ? load_image+0x3b0/0x3b0 [ 195.385760][ T5394] __lock_acquire+0x1be9/0x7c60 [ 195.390631][ T5394] ? verify_lock_unused+0x140/0x140 [ 195.395836][ T5394] ? __printk_cpu_unlock+0x5f/0x70 [ 195.400945][ T5394] ? dump_stack_lvl+0x1bf/0x230 [ 195.405793][ T5394] ? ip_setsockopt+0x4c0/0x3070 [ 195.410646][ T5394] ? show_regs_print_info+0x20/0x20 [ 195.415838][ T5394] ? load_image+0x3b0/0x3b0 [ 195.420340][ T5394] lock_acquire+0x197/0x3f0 [ 195.424848][ T5394] ? kernfs_walk_and_get_ns+0x81/0x2b0 [ 195.430306][ T5394] ? __might_sleep+0xf0/0xf0 [ 195.434915][ T5394] ? read_lock_is_recursive+0x10/0x10 [ 195.440302][ T5394] down_read+0x44/0x2e0 [ 195.444473][ T5394] ? kernfs_walk_and_get_ns+0x81/0x2b0 [ 195.449938][ T5394] kernfs_walk_and_get_ns+0x81/0x2b0 [ 195.455329][ T5394] ? kernfs_find_ns+0x510/0x510 [ 195.460180][ T5394] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 195.466335][ T5394] cgroup_get_from_path+0x5f/0x2f0 [ 195.471448][ T5394] cgroup_mt_check_v1+0x1ae/0x2c0 [ 195.476490][ T5394] xt_check_match+0x3c6/0xaa0 [ 195.481172][ T5394] ? xt_check_proc_name+0x240/0x240 [ 195.486370][ T5394] ? strcmp+0x2d/0xb0 [ 195.490363][ T5394] ? xt_find_match+0x1e1/0x210 [ 195.495126][ T5394] translate_table+0x14f8/0x1fe0 [ 195.500093][ T5394] ? ipt_register_table+0x7e0/0x7e0 [ 195.505297][ T5394] ? lock_chain_count+0x20/0x20 [ 195.510153][ T5394] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 195.515792][ T5394] ? lockdep_hardirqs_on+0x94/0x140 [ 195.520997][ T5394] ? do_ipt_set_ctl+0x8b4/0xcf0 [ 195.525849][ T5394] do_ipt_set_ctl+0x96c/0xcf0 [ 195.530552][ T5394] ? release_firmware_map_entry+0x190/0x190 [ 195.536453][ T5394] ? nf_setsockopt+0x218/0x280 [ 195.541218][ T5394] ? ipt_unregister_table_exit+0x220/0x220 [ 195.547022][ T5394] ? preempt_schedule_irq+0xd0/0x150 [ 195.552310][ T5394] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 195.558468][ T5394] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 195.564123][ T5394] ? lockdep_hardirqs_on+0x94/0x140 [ 195.569381][ T5394] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 195.575146][ T5394] nf_setsockopt+0x25f/0x280 [ 195.579762][ T5394] ip_setsockopt+0x2127/0x3070 [ 195.584560][ T5394] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 195.589941][ T5394] ? __might_sleep+0xf0/0xf0 [ 195.594625][ T5394] ? rcu_lock_release+0x9/0x20 [ 195.599391][ T5394] tcp_setsockopt+0x21a/0x1d70 [ 195.604161][ T5394] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 195.609540][ T5394] ? aa_af_perm+0x2b0/0x2b0 [ 195.614044][ T5394] ? __fget_files+0x40f/0x480 [ 195.618739][ T5394] ? aa_sock_opt_perm+0x74/0x100 [ 195.623784][ T5394] ? sock_common_setsockopt+0x32/0xb0 [ 195.629396][ T5394] ? sock_common_recvmsg+0x1b0/0x1b0 [ 195.634699][ T5394] __sys_setsockopt+0x2bf/0x3d0 [ 195.639769][ T5394] __x64_sys_setsockopt+0xb1/0xc0 [ 195.644808][ T5394] do_syscall_64+0x4c/0xa0 [ 195.649257][ T5394] ? clear_bhb_loop+0x30/0x80 [ 195.653938][ T5394] ? clear_bhb_loop+0x30/0x80 [ 195.658643][ T5394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.664558][ T5394] RIP: 0033:0x7fa839ccf749 [ 195.668980][ T5394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.688636][ T5394] RSP: 002b:00007fa837f15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.697088][ T5394] RAX: ffffffffffffffda RBX: 00007fa839f26090 RCX: 00007fa839ccf749 [ 195.705090][ T5394] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 195.713097][ T5394] RBP: 00007fa839d53f91 R08: 00000000000022f8 R09: 0000000000000000 [ 195.721077][ T5394] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 195.729051][ T5394] R13: 00007fa839f26128 R14: 00007fa839f26090 R15: 00007ffc89cac888 [ 195.737031][ T5394] [ 195.740207][ T5394] xt_cgroup: invalid path, errno=-2 [ 197.628723][ T4192] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.888722][ T4192] usb 3-1: Using ep0 maxpacket: 16 [ 198.008878][ T4192] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.020019][ T4192] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.029975][ T4192] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.036705][ T4192] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 198.045802][ T4192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.055567][ T4192] usb 3-1: config 0 descriptor?? [ 198.520913][ T5415] loop2: detected capacity change from 0 to 8 [ 198.577363][ T5415] SQUASHFS error: lzo decompression failed, data probably corrupt [ 198.585373][ T5415] SQUASHFS error: Failed to read block 0x91: -5 [ 198.593152][ T5415] SQUASHFS error: Unable to read metadata cache entry [8f] [ 198.602047][ T5415] SQUASHFS error: Unable to read inode 0x11f [ 198.663546][ T4192] hid (null): unknown global tag 0xc [ 198.670215][ T4192] hid (null): report_id 13876 is invalid [ 198.675895][ T4192] hid (null): unknown global tag 0xc [ 198.681740][ T4192] hid (null): unknown global tag 0xe8 [ 198.687185][ T4192] hid (null): global environment stack underflow [ 198.693652][ T4192] hid (null): report_id 0 is invalid [ 198.699031][ T4192] hid (null): unknown global tag 0xe [ 198.705769][ T4192] hid (null): global environment stack underflow [ 198.712187][ T4192] hid (null): bogus close delimiter [ 198.718049][ T4192] hid (null): unknown global tag 0xe [ 198.724016][ T4192] hid (null): unknown global tag 0xd [ 198.862162][ T4192] usb 3-1: USB disconnect, device number 7